• 產品與解決方案
  • 行業解決方案
  • 服務
  • 支持
  • 合作夥伴
  • 關於我們

H3C S6890係列以太網交換機 典型配置舉例-Release 27xx係列-6W100

目錄

46-FCoE典型配置舉例

本章節下載 46-FCoE典型配置舉例  (421.67 KB)

46-FCoE典型配置舉例

H3C S6890產品FCoE典型配置舉例

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

資料版本:6W100-20190628

 

Copyright © 2019 bobty下载软件 版權所有,保留一切權利。

非經本公司書麵許可,任何單位和個人不得擅自摘抄、複製本文檔內容的部分或全部,並不得以任何形式傳播。

除bobty下载软件 的商標外,本手冊中出現的其它公司的商標、產品標識及商品名稱,由各自權利人擁有。

本文檔中的信息可能變動,恕不另行通知。

 



1  簡介

本文檔介紹了FCoE的配置舉例。

配置前提

本文檔中的配置均是在實驗室環境下進行的配置和驗證,配置前設備的所有參數均采用出廠時的缺省配置。如果您已經對設備進行了配置,為了保證配置效果,請確認現有配置和以下舉例中的配置不衝突。

本文假設您已了解FCoE特性。

使用限製

·     FCoE功能的使用受License控製,請在使用FCoE功能前,安裝有效的數據中心License。

·     設備隻有工作在高級模式或專家模式下,才支持FCoE功能。

·     在部署了FCoE功能的環境中,建議將IRF鏈路down延遲上報時間配置為0。

4  FC靜態路由配置舉例

4.1  組網需求

圖1所示,網絡由三台FCF交換機Switch A~Switch C、1個服務器Server和1個磁盤設備Disk組成。

現要求在Switch A、Switch B和Switch C上配置FCoE功能,實現:

·     任意兩台FCF交換機之間都能互通;

·     SAN網絡中的存儲數據流量能夠在以太網鏈路上無損傳輸;

·     Server能夠通過Fabric網絡訪問Disk內的存儲資源。

圖1 配置FC靜態路由組網圖

 

4.2  配置思路

·     為了實現SAN網絡中的存儲數據流量能夠在無損以太網鏈路上傳輸,H3C建議用戶在交換機和服務器連接的以太網接口上配置DCBX、自動協商模式的PFC、ETS功能;在交換機和磁盤設備連接的以太網接口上配置DCBX、自動協商模式的PFC功能;在交換機與交換機連接的以太網接口上強製開啟PFC功能。

·     由於網絡拓撲結構比較簡單並且穩定,建議用戶采用靜態方式建立Fabric網絡,並為該Fabric網絡配置FC靜態路由。

·     為了能夠實現Server能夠訪問Disk內的存儲資源,需要配置允許默認Zone內的成員互相訪問。

4.3  使用版本

本舉例是在S6890-CMW710-R2712版本上進行配置和驗證的。

4.4  配置注意事項

配置FC靜態路由需要先規劃好Fabric網絡,即確定Fabric網絡中所有FCF交換機需要配置的域ID。

缺省情況下,S6890係列交換機的接口處於ADM(Administratively Down)狀態,請根據實際需要在對應接口視圖下使用undo shutdown命令開啟接口。

4.5  配置步驟

4.5.1  Switch A的配置

(1)     開啟高級模式

# 配置設備工作模式為高級模式(如果已經配置設備為高級模式此步驟可略)。

<SwitchA> system-view

[SwitchA] system-working-mode advance

Do you want to change the system working mode? [Y/N]:y

The system working mode is changed, please save the configuration and reboot the

 system to make it effective.

# 保存配置。

[SwitchA] save

The current configuration will be written to the device. Are you sure? [Y/N]:y

Please input the file name(*.cfg)[flash:/startup.cfg]

(To leave the existing filename unchanged, press the enter key):

Validating file. Please wait...

Saved the current configuration to mainboard device successfully.

[SwitchA] quit

# 重啟設備。

<SwitchA> reboot

Start to check configuration with next startup configuration file, please wait.........DONE!

This command will reboot the device. Continue? [Y/N]:y

Now rebooting, please wait...

(2)     部署DCBX

# 全局開啟LLDP功能。

<SwitchA> system-view

[SwitchA] lldp global enable

# 在以太網接口Ten-GigabitEthernet1/0/1上開啟LLDP功能,並允許發布DCBX TLV。

[SwitchA] interface ten-gigabitethernet 1/0/1

[SwitchA-Ten-GigabitEthernet1/0/1] lldp enable

[SwitchA-Ten-GigabitEthernet1/0/1] lldp tlv-enable dot1-tlv dcbx

[SwitchA-Ten-GigabitEthernet1/0/1] quit

# 創建名為DCBX的二層ACL,並為其創建規則來匹配FCoE報文(協議號為0x8906)和FIP報文(協議號為0x8914)。

[SwitchA] acl mac name DCBX

[SwitchA-acl-ethernetframe-DCBX] rule 0 permit type 8906 ffff

[SwitchA-acl-ethernetframe-DCBX] rule 5 permit type 8914 ffff

[SwitchA-acl-ethernetframe-DCBX] quit

# 定義名為DCBX的類,其下各規則間的關係為邏輯或,並定義其匹配名為DCBX的ACL。

[SwitchA] traffic classifier DCBX operator or

[SwitchA-classifier-DCBX] if-match acl mac name DCBX

[SwitchA-classifier-DCBX] quit

# 定義名為DCBX的流行為,並配置標記報文的802.1p優先級為3。

[SwitchA] traffic behavior DCBX

[SwitchA-behavior-DCBX] remark dot1p 3

[SwitchA-behavior-DCBX] quit

# 定義名為DCBX的策略,為類DCBX指定采用的流行為是DCBX,並指定該策略為DCBX模式。

[SwitchA] qos policy DCBX

[SwitchA-qospolicy-DCBX] classifier DCBX behavior DCBX mode dcbx

[SwitchA-qospolicy-DCBX] quit

# 在以太網接口Ten-GigabitEthernet1/0/1的出方向上應用策略DCBX。

[SwitchA] interface ten-gigabitethernet 1/0/1

[SwitchA-Ten-GigabitEthernet1/0/1] qos apply policy DCBX outbound

(3)     部署PFC

# 在以太網接口Ten-GigabitEthernet1/0/1上配置PFC功能的開啟模式為自動協商模式,且設置對802.1p優先級3開啟PFC功能,並配置信任報文自帶的802.1p優先級。

[SwitchA-Ten-GigabitEthernet1/0/1] priority-flow-control auto

[SwitchA-Ten-GigabitEthernet1/0/1] priority-flow-control no-drop dot1p 3

[SwitchA-Ten-GigabitEthernet1/0/1] qos trust dot1p

[SwitchA-Ten-GigabitEthernet1/0/1] quit

# 在以太網接口Ten-GigabitEthernet1/0/2上配置強製開啟PFC功能,且設置對802.1p優先級3開啟PFC功能,並配置信任報文自帶的802.1p優先級。

[SwitchA] interface ten-gigabitethernet 1/0/2

[SwitchA-Ten-GigabitEthernet1/0/2] priority-flow-control enable

[SwitchA-Ten-GigabitEthernet1/0/2] priority-flow-control no-drop dot1p 3

[SwitchA-Ten-GigabitEthernet1/0/2] qos trust dot1p

[SwitchA-Ten-GigabitEthernet1/0/2] quit

(4)     部署ETS

# 配置802.1p優先級到本地優先級的映射,將802.1p優先級3映射到本地優先級1,配置其它的802.1p優先級映射到本地優先級0。

[SwitchA] qos map-table dot1p-lp

[SwitchA-maptbl-dot1p-lp] import 3 export 1

[SwitchA-maptbl-dot1p-lp] import 0 1 2 4 5 6 7 export 0

[SwitchA-maptbl-dot1p-lp] quit

# 在以太網接口Ten-GigabitEthernet1/0/1上開啟並配置WRR隊列,使FCoE流量和普通LAN流量各占50%帶寬。

[SwitchA] interface ten-gigabitethernet 1/0/1

[SwitchA-Ten-GigabitEthernet1/0/1] qos wrr byte-count

[SwitchA-Ten-GigabitEthernet1/0/1] qos wrr af1 group 1 byte-count 1

[SwitchA-Ten-GigabitEthernet1/0/1] qos wrr be group 1 byte-count 1

# 在以太網接口Ten-GigabitEthernet1/0/1上配置其它的隊列為SP調度方式。

[SwitchA-Ten-GigabitEthernet1/0/1] qos wrr af2 group sp

[SwitchA-Ten-GigabitEthernet1/0/1] qos wrr af3 group sp

[SwitchA-Ten-GigabitEthernet1/0/1] qos wrr af4 group sp

[SwitchA-Ten-GigabitEthernet1/0/1] qos wrr ef group sp

[SwitchA-Ten-GigabitEthernet1/0/1] qos wrr cs6 group sp

[SwitchA-Ten-GigabitEthernet1/0/1] qos wrr cs7 group sp

[SwitchA-Ten-GigabitEthernet1/0/1] quit

(5)     配置FCoE功能

# 配置交換機模式為FCF模式。

[SwitchA] fcoe-mode fcf

# 關閉VSAN 1的Fabric配置功能。

[SwitchA] vsan 1

[SwitchA-vsan1] undo domain configure enable

# 配置Fabric網絡的名稱。

[SwitchA-vsan1] fabric-name 11:11:11:11:11:11:11:11

# 配置Switch A的域ID為1。

[SwitchA-vsan1] domain-id 1 static

Non-disruptive reconfiguration or isolating the switch may be performed. Continue? [Y/N]:y

[SwitchA-vsan1] quit

# 創建VFC1接口,將VFC1接口綁定到以太網接口Ten-GigabitEthernet1/0/1上,並將VFC1接口以Trunk方式加入VSAN 1。

[SwitchA] interface vfc 1

[SwitchA-Vfc1] bind interface ten-gigabitethernet 1/0/1

[SwitchA-Vfc1] port trunk vsan 1

[SwitchA-Vfc1] quit

# 創建VFC2接口,配置VFC2接口工作在E模式,將VFC2接口綁定到以太網接口Ten-GigabitEthernet1/0/2上,並將VFC2接口以Trunk方式加入VSAN 1。

[SwitchA] interface vfc 2

[SwitchA-Vfc2] fc mode e

[SwitchA-Vfc2] bind interface ten-gigabitethernet 1/0/2

[SwitchA-Vfc2] port trunk vsan 1

[SwitchA-Vfc2] quit

# 配置以太網接口Ten-GigabitEthernet1/0/1和Ten-GigabitEthernet1/0/2允許VLAN 10的報文通過。

[SwitchA] interface range ten-gigabitethernet 1/0/1 to ten-gigabitethernet 1/0/2

[SwitchA-if-range] port link-type trunk

[SwitchA-if-range] port trunk permit vlan 10

[SwitchA-if-range] quit

# 開啟VLAN 10FCoE功能並將其與VSAN 1進行映射。

[SwitchA] vlan 10

[SwitchA-vlan10] fcoe enable vsan 1

[SwitchA-vlan10] quit

# 配置允許默認Zone內的成員互相訪問。

[SwitchA] vsan 1

[SwitchA-vsan1] zone default-zone permit

# 在Switch A上配置到達Switch B和Switch C的FC靜態路由。

[SwitchA-vsan1] fc route-static 020000 8 vfc 2

[SwitchA-vsan1] fc route-static 030000 8 vfc 2

[SwitchA-vsan1] quit

4.5.2  Switch B的配置

(1)     開啟高級模式

# 配置設備工作模式為高級模式(如果已經配置設備為高級模式此步驟可略)。

<SwitchB> system-view

[SwitchB] system-working-mode advance

Do you want to change the system working mode? [Y/N]:y

The system working mode is changed, please save the configuration and reboot the

 system to make it effective.

# 保存配置。

[SwitchB] save

The current configuration will be written to the device. Are you sure? [Y/N]:y

Please input the file name(*.cfg)[flash:/startup.cfg]

(To leave the existing filename unchanged, press the enter key):

Validating file. Please wait...

Saved the current configuration to mainboard device successfully.

[SwitchB] quit

# 重啟設備。

<SwitchB> reboot

Start to check configuration with next startup configuration file, please wait.........DONE!

This command will reboot the device. Continue? [Y/N]:y

Now rebooting, please wait...

(2)     部署PFC

# 在以太網接口Ten-GigabitEthernet1/0/1和Ten-GigabitEthernet1/0/2上配置強製開啟PFC功能,且設置對802.1p優先級3開啟PFC功能,並配置信任報文自帶的802.1p優先級。

<SwitchB> system-view

[SwitchB] interface range ten-gigabitethernet 1/0/1 to ten-gigabitethernet 1/0/2

[SwitchB-if-range] priority-flow-control enable

[SwitchB-if-range] priority-flow-control no-drop dot1p 3

[SwitchB-if-range] qos trust dot1p

[SwitchB-if-range] quit

(3)     配置FCoE功能

# 配置交換機模式為FCF模式。

[SwitchB] fcoe-mode fcf

# 關閉VSAN 1的Fabric配置功能。

[SwitchB] vsan 1

[SwitchB-vsan1] undo domain configure enable

# 配置Fabric網絡的名稱。

[SwitchB-vsan1] fabric-name 11:11:11:11:11:11:11:11

# 配置Switch B的域ID為2。

[SwitchB-vsan1] domain-id 2 static

Non-disruptive reconfiguration or isolating the switch may be performed. Continue? [Y/N]:y

[SwitchB-vsan1] quit

# 創建VFC1接口,配置VFC1接口工作在E模式,將VFC1接口綁定到以太網接口Ten-GigabitEthernet1/0/1上,並將VFC1接口以Trunk方式加入VSAN 1。

[SwitchB] interface vfc 1

[SwitchB-Vfc1] fc mode e

[SwitchB-Vfc1] bind interface ten-gigabitethernet 1/0/1

[SwitchB-Vfc1] port trunk vsan 1

[SwitchB-Vfc1] quit

# 創建VFC2接口,配置VFC2接口工作在E模式,將VFC2接口綁定到以太網接口Ten-GigabitEthernet1/0/2上,並將VFC1接口以Trunk方式加入VSAN 1。

[SwitchB] interface vfc 2

[SwitchB-Vfc2] fc mode e

[SwitchB-Vfc2] bind interface ten-gigabitethernet 1/0/2

[SwitchB-Vfc2] port trunk vsan 1

[SwitchB-Vfc2] quit

# 配置以太網接口Ten-GigabitEthernet1/0/1和Ten-GigabitEthernet1/0/2允許VLAN 10的報文通過。

[SwitchB] interface range ten-gigabitethernet 1/0/1 to ten-gigabitethernet 1/0/2

[SwitchB-if-range] port link-type trunk

[SwitchB-if-range] port trunk permit vlan 10

[SwitchB-if-range] quit

# 開啟VLAN 10FCoE功能並將其與VSAN 1進行映射。

[SwitchB] vlan 10

[SwitchB-vlan10] fcoe enable vsan 1

[SwitchB-vlan10] quit

# 配置允許默認Zone內的成員互相訪問。

[SwitchB] vsan 1

[SwitchB-vsan1] zone default-zone permit

# 在Switch B上配置到達Switch A和Switch C的FC靜態路由。

[SwitchB-vsan1] fc route-static 010000 8 vfc 1

[SwitchB-vsan1] fc route-static 030000 8 vfc 2

[SwitchB-vsan1] quit

4.5.3  Switch C的配置

(1)     開啟高級模式

# 配置設備工作模式為高級模式(如果已經配置設備為高級模式此步驟可略)。

<SwitchC> system-view

[SwitchC] system-working-mode advance

Do you want to change the system working mode? [Y/N]:y

The system working mode is changed, please save the configuration and reboot the

 system to make it effective.

# 保存配置。

[SwitchC] save

The current configuration will be written to the device. Are you sure? [Y/N]:y

Please input the file name(*.cfg)[flash:/startup.cfg]

(To leave the existing filename unchanged, press the enter key):

Validating file. Please wait...

Saved the current configuration to mainboard device successfully.

[SwitchC] quit

# 重啟設備。

<SwitchC> reboot

Start to check configuration with next startup configuration file, please wait.........DONE!

This command will reboot the device. Continue? [Y/N]:y

Now rebooting, please wait...

(2)     部署DCBX

# 全局開啟LLDP功能。

<SwitchC> system-view

[SwitchC] lldp global enable

# 在以太網接口Ten-GigabitEthernet1/0/2上開啟LLDP功能,並允許發布DCBX TLV。

[SwitchC] interface ten-gigabitethernet 1/0/2

[SwitchC-Ten-GigabitEthernet1/0/2] lldp enable

[SwitchC-Ten-GigabitEthernet1/0/2] lldp tlv-enable dot1-tlv dcbx

[SwitchC-Ten-GigabitEthernet1/0/2] quit

# 創建名為DCBX的二層ACL,並為其創建規則來匹配FCoE報文(協議號為0x8906)和FIP報文(協議號為0x8914)。

[SwitchC] acl mac name DCBX

[SwitchC-acl-ethernetframe-DCBX] rule 0 permit type 8906 ffff

[SwitchC-acl-ethernetframe-DCBX] rule 5 permit type 8914 ffff

[SwitchC-acl-ethernetframe-DCBX] quit

# 定義名為DCBX的類,其下各規則間的關係為邏輯或,並定義其匹配名為DCBX的ACL。

[SwitchC] traffic classifier DCBX operator or

[SwitchC-classifier-DCBX] if-match acl mac name DCBX

[SwitchC-classifier-DCBX] quit

# 定義名為DCBX的流行為,並配置標記報文的802.1p優先級為3。

[SwitchC] traffic behavior DCBX

[SwitchC-behavior-DCBX] remark dot1p 3

[SwitchC-behavior-DCBX] quit

# 定義名為DCBX的策略,為類DCBX指定采用的流行為是DCBX,並指定該策略為DCBX模式。

[SwitchC] qos policy DCBX

[SwitchC-qospolicy-DCBX] classifier DCBX behavior DCBX mode dcbx

[SwitchC-qospolicy-DCBX] quit

# 在以太網接口Ten-GigabitEthernet1/0/2的出方向上應用策略DCBX。

[SwitchC] interface ten-gigabitethernet 1/0/2

[SwitchC-Ten-GigabitEthernet1/0/2] qos apply policy DCBX outbound

(3)     部署PFC

# 在以太網接口Ten-GigabitEthernet1/0/2上配置PFC功能的開啟模式為自動協商模式,且設置對802.1p優先級3開啟PFC功能,並配置信任報文自帶的802.1p優先級。

[SwitchC-Ten-GigabitEthernet1/0/2] priority-flow-control auto

[SwitchC-Ten-GigabitEthernet1/0/2] priority-flow-control no-drop dot1p 3

[SwitchC-Ten-GigabitEthernet1/0/2] qos trust dot1p

[SwitchC-Ten-GigabitEthernet1/0/2] quit

# 在以太網接口Ten-GigabitEthernet1/0/上配置強製開啟PFC功能,且設置對802.1p優先級3開啟PFC功能,並配置信任報文自帶的802.1p優先級。

[SwitchC] interface ten-gigabitethernet 1/0/1

[SwitchC-Ten-GigabitEthernet1/0/1] priority-flow-control enable

[SwitchC-Ten-GigabitEthernet1/0/1] priority-flow-control no-drop dot1p 3

[SwitchC-Ten-GigabitEthernet1/0/1] qos trust dot1p

[SwitchC-Ten-GigabitEthernet1/0/1] quit

(4)     配置FCoE功能

# 配置交換機模式為FCF模式。

[SwitchC] fcoe-mode fcf

# 關閉VSAN 1的Fabric配置功能。

[SwitchC] vsan 1

[SwitchC-vsan1] undo domain configure enable

# 配置Fabric網絡的名稱。

[SwitchC-vsan1] fabric-name 11:11:11:11:11:11:11:11

# 配置Switch C的域ID為3。

[SwitchC-vsan1] domain-id 3 static

Non-disruptive reconfiguration or isolating the switch may be performed. Continue? [Y/N]:y

[SwitchC-vsan1] quit

# 創建VFC1接口,配置VFC1接口工作在E模式,將VFC1接口綁定到以太網接口Ten-GigabitEthernet1/0/1上,並將VFC1接口以Trunk方式加入VSAN 1。

[SwitchC] interface vfc 1

[SwitchC-Vfc1] fc mode e

[SwitchC-Vfc1] bind interface ten-gigabitethernet 1/0/1

[SwitchC-Vfc1] port trunk vsan 1

[SwitchC-Vfc1] quit

# 創建VFC2接口,將VFC2接口綁定到以太網接口Ten-GigabitEthernet1/0/2上,並將VFC2接口以Trunk方式加入VSAN 1。

[SwitchC] interface vfc 2

[SwitchC-Vfc2] bind interface ten-gigabitethernet 1/0/2

[SwitchC-Vfc2] port trunk vsan 1

[SwitchC-Vfc2] quit

# 配置以太網接口Ten-GigabitEthernet1/0/1和Ten-GigabitEthernet1/0/2允許VLAN 10的報文通過。

[SwitchC] interface range ten-gigabitethernet 1/0/1 to ten-gigabitethernet 1/0/2

[SwitchC-if-range] port link-type trunk

[SwitchC-if-range] port trunk permit vlan 10

[SwitchC-if-range] quit

# 開啟VLAN 10FCoE功能並將其與VSAN 1進行映射。

[SwitchC] vlan 10

[SwitchC-vlan10] fcoe enable vsan 1

[SwitchC-vlan10] quit

# 配置允許默認Zone內的成員互相訪問。

[SwitchC] vsan 1

[SwitchC-vsan1] zone default-zone permit

# 在Switch C上配置到達Switch A和Switch B的FC靜態路由。

[SwitchC-vsan1] fc route-static 010000 8 vfc 1

[SwitchC-vsan1] fc route-static 020000 8 vfc 1

[SwitchC-vsan1] quit

4.6  驗證配置

# 顯示Switch A上VSAN 1的FC路由表。

[SwitchA] display fc routing-table vsan 1

Routing Table: VSAN 1

  Destinations : 6          Routes : 6

  Destination/mask   Protocol   Preference   Cost     Interface

  0x020000/8         STATIC     10           0        Vfc2

  0x030000/8         STATIC     10           0        Vfc2

  0xfffc01/24        DIRECT     0            0        InLoop0

  0xfffffa/24        DIRECT     0            0        InLoop0

  0xfffffc/24        DIRECT     0            0        InLoop0

  0xfffffd/24        DIRECT     0            0        InLoop0

以上信息表明,Switch A有到Switch B和Switch C的靜態路由。

# 顯示Switch B上VSAN 1的FC路由表。

[SwitchB] display fc routing-table vsan 1

Routing Table: VSAN 1

  Destinations : 6          Routes : 6

  Destination/mask   Protocol   Preference   Cost     Interface

  0x010000/8         STATIC     10           0        Vfc1

  0x030000/8         STATIC     10           0        Vfc2

  0xfffc02/24        DIRECT     0            0        InLoop0

  0xfffffa/24        DIRECT     0            0        InLoop0

  0xfffffc/24        DIRECT     0            0        InLoop0

  0xfffffd/24        DIRECT     0            0        InLoop0

以上信息表明,Switch B有到Switch A和Switch C的靜態路由。

# 顯示Switch C上VSAN 1的FC路由表。

[SwitchC] display fc routing-table vsan 1

Routing Table: VSAN 1

  Destinations : 6          Routes : 6

  Destination/mask   Protocol   Preference   Cost     Interface

  0x010000/8         STATIC     10           0        Vfc1

  0x020000/8         STATIC     10           0        Vfc1

  0xfffc03/24        DIRECT     0            0        InLoop0

  0xfffffa/24        DIRECT     0            0        InLoop0

  0xfffffc/24        DIRECT     0            0        InLoop0

  0xfffffd/24        DIRECT     0            0        InLoop0

以上信息表明,Switch C有到Switch A和Switch B的靜態路由。

# 在Switch A上使用fcping命令驗證Switch C是否可達。

[SwitchA] fcping fcid fffc03 vsan 1

FCPING fcid 0xfffc03: 128 data bytes, press CTRL_C to break

Reply from 0xfffc03: bytes = 128 time = 23 ms

Reply from 0xfffc03: bytes = 128 time = 9 ms

Reply from 0xfffc03: bytes = 128 time = 19 ms

Reply from 0xfffc03: bytes = 128 time = 14 ms

Reply from 0xfffc03: bytes = 128 time = 25 ms

 

--- 0xfffc03 fcping statistics ---

5 packet(s) transmitted

5 packet(s) received

0.00% packet loss

round-trip min/avg/max = 9/18/25 ms

以上信息表明,Switch A和Switch C之間路由可達。

4.7  配置文件

·     Switch A:

#

 lldp global enable

#

 system-working-mode advance

#

 fcoe-mode fcf

#

vsan 1

 fabric-name 11:11:11:11:11:11:11:11

 domain-id 1 static

 undo domain configure enable

 fc route-static 020000 8 Vfc2

 fc route-static 030000 8 Vfc2

 zone default-zone permit

#

vlan 10

 fcoe enable vsan 1

#

qos map-table dot1p-lp

 import 0 export 0

 import 2 export 0

 import 3 export 1

 import 4 export 0

 import 5 export 0

 import 6 export 0

 import 7 export 0

#

traffic classifier DCBX operator or

 if-match acl mac name DCBX

#

traffic behavior DCBX

 remark dot1p 3

#

qos policy DCBX

 classifier DCBX behavior DCBX mode dcbx

#

interface Ten-GigabitEthernet1/0/1

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 1 10

 priority-flow-control auto

 priority-flow-control no-drop dot1p 3

 lldp tlv-enable dot1-tlv dcbx

 qos wrr byte-count

 qos wrr af1 group 1 byte-count 1

 qos wrr af2 group sp

 qos wrr af3 group sp

 qos wrr af4 group sp

 qos wrr ef group sp

 qos wrr cs6 group sp

 qos wrr cs7 group sp

 qos apply policy DCBX outbound

#

interface Ten-GigabitEthernet1/0/2

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 1 10

 priority-flow-control enable

 priority-flow-control no-drop dot1p 3

#

interface Vfc1

 port trunk vsan 1

 bind interface Ten-GigabitEthernet1/0/1

#

interface Vfc2

 fc mode e

 port trunk vsan 1

 bind interface Ten-GigabitEthernet1/0/2

#

acl mac name DCBX

 rule 0 permit type 8906 ffff

 rule 5 permit type 8914 ffff

#

·     Switch B:

#

 system-working-mode advance

#

 fcoe-mode fcf

#

vsan 1

 fabric-name 11:11:11:11:11:11:11:11

 domain-id 2 static

 undo domain configure enable

 fc route-static 010000 8 Vfc1

 fc route-static 030000 8 Vfc2

 zone default-zone permit

#

vlan 10

 fcoe enable vsan 1

#

interface Ten-GigabitEthernet1/0/1

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 1 10

 priority-flow-control enable

 priority-flow-control no-drop dot1p 3

#

interface Ten-GigabitEthernet1/0/2

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 1 10

 priority-flow-control enable

 priority-flow-control no-drop dot1p 3

#

interface Vfc1

 fc mode e

 port trunk vsan 1

 bind interface Ten-GigabitEthernet1/0/1

#

interface Vfc2

 fc mode e

 port trunk vsan 1

 bind interface Ten-GigabitEthernet1/0/2

#

·     Switch C:

#

 lldp global enable

#

 system-working-mode advance

#

 fcoe-mode fcf

#

vsan 1

 fabric-name 11:11:11:11:11:11:11:11

 domain-id 3 static

 undo domain configure enable

 fc route-static 010000 8 Vfc1

 fc route-static 020000 8 Vfc1

 zone default-zone permit

#

vlan 10

 fcoe enable vsan 1

#

traffic classifier DCBX operator or

 if-match acl mac name DCBX

#

traffic behavior DCBX

 remark dot1p 3

#

qos policy DCBX

 classifier DCBX behavior DCBX mode dcbx

#

interface Ten-GigabitEthernet1/0/1

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 1 10

 priority-flow-control enable

 priority-flow-control no-drop dot1p 3

#

interface Ten-GigabitEthernet1/0/2

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 1 10

 priority-flow-control auto

 priority-flow-control no-drop dot1p 3

 lldp tlv-enable dot1-tlv dcbx

 qos apply policy DCBX outbound

#

interface Vfc1

 fc mode e

 port trunk vsan 1

 bind interface Ten-GigabitEthernet1/0/1

#

interface Vfc2

 port trunk vsan 1

 bind interface Ten-GigabitEthernet1/0/2

#

acl mac name DCBX

 rule 0 permit type 8906 ffff

 rule 5 permit type 8914 ffff

#

5  FSPF配置舉例

5.1  組網需求

圖2所示,網絡由三台FCF交換機Switch A~Switch C、1個服務器Server和1個磁盤設備Disk組成。

現要求在Switch A、Switch B和Switch C上配置FCoE功能,實現:

·     Fabric網絡中任意兩台交換機之間的FC報文轉發均有最短路徑,且FC報文的轉發路徑能夠自動適應網絡拓撲結構的變化。

·     SAN網絡中的存儲數據流量能夠在以太網鏈路上無損傳輸;

·     Server能夠通過Fabric網絡訪問Disk內的存儲資源。

圖2 配置FSPF組網圖

 

5.2  配置思路

·     為了實現SAN網絡中的存儲數據流量能夠在無損以太網鏈路上傳輸,H3C建議用戶在交換機和服務器連接的以太網接口上配置DCBX、自動協商模式的PFC、ETS功能;在交換機和磁盤設備連接的以太網接口上配置DCBX、自動協商模式的PFC功能;在交換機與交換機連接的以太網接口上強製開啟PFC功能。

·     由於網絡結構比較複雜,且用戶希望所建立的Fabric網絡能夠自動計算所有交換機之間的FC報文的轉發路徑,FC報文的轉發路徑能夠自動適應網絡拓撲結構的變化,所以建議用戶采用動態方式建立Fabric網絡,並為該Fabric網絡配置FSPF。

·     建議將性能較好的某台FCF交換機的優先級配置為最高,使其被選舉為主交換機,為同VSAN內其它FCF交換機分配域ID,從而實現動態建立Fabric網絡。

5.3  使用版本

本舉例是在S6890-CMW710-R2712版本上進行配置和驗證的。

5.4  配置注意事項

缺省情況下,S6890係列交換機的接口處於ADM(Administratively Down)狀態,請根據實際需要在對應接口視圖下使用undo shutdown命令開啟接口。

5.5  配置步驟

5.5.1  Switch A的配置

(1)     開啟高級模式

# 配置設備工作模式為高級模式(如果已經配置設備為高級模式此步驟可略)。

<SwitchA> system-view

[SwitchA] system-working-mode advance

Do you want to change the system working mode? [Y/N]:y

The system working mode is changed, please save the configuration and reboot the

 system to make it effective.

# 保存配置。

[SwitchA] save

The current configuration will be written to the device. Are you sure? [Y/N]:y

Please input the file name(*.cfg)[flash:/startup.cfg]

(To leave the existing filename unchanged, press the enter key):

Validating file. Please wait...

Saved the current configuration to mainboard device successfully.

[SwitchA] quit

# 重啟設備。

<SwitchA> reboot

Start to check configuration with next startup configuration file, please wait.........DONE!

This command will reboot the device. Continue? [Y/N]:y

Now rebooting, please wait...

(2)     部署DCBX

# 全局開啟LLDP功能。

<SwitchA> system-view

[SwitchA] lldp global enable

# 在以太網接口Ten-GigabitEthernet1/0/1上開啟LLDP功能,並允許發布DCBX TLV。

[SwitchA] interface ten-gigabitethernet 1/0/1

[SwitchA-Ten-GigabitEthernet1/0/1] lldp enable

[SwitchA-Ten-GigabitEthernet1/0/1] lldp tlv-enable dot1-tlv dcbx

[SwitchA-Ten-GigabitEthernet1/0/1] quit

# 創建名為DCBX的二層ACL,並為其創建規則來匹配FCoE報文(協議號為0x8906)和FIP報文(協議號為0x8914)。

[SwitchA] acl mac name DCBX

[SwitchA-acl-ethernetframe-DCBX] rule 0 permit type 8906 ffff

[SwitchA-acl-ethernetframe-DCBX] rule 5 permit type 8914 ffff

[SwitchA-acl-ethernetframe-DCBX] quit

# 定義名為DCBX的類,其下各規則間的關係為邏輯或,並定義其匹配名為DCBX的ACL。

[SwitchA] traffic classifier DCBX operator or

[SwitchA-classifier-DCBX] if-match acl mac name DCBX

[SwitchA-classifier-DCBX] quit

# 定義名為DCBX的流行為,並配置標記報文的802.1p優先級為3。

[SwitchA] traffic behavior DCBX

[SwitchA-behavior-DCBX] remark dot1p 3

[SwitchA-behavior-DCBX] quit

# 定義名為DCBX的策略,為類DCBX指定采用的流行為是DCBX,並指定該策略為DCBX模式。

[SwitchA] qos policy DCBX

[SwitchA-qospolicy-DCBX] classifier DCBX behavior DCBX mode dcbx

[SwitchA-qospolicy-DCBX] quit

# 在以太網接口Ten-GigabitEthernet1/0/1的出方向上應用策略DCBX。

[SwitchA] interface ten-gigabitethernet 1/0/1

[SwitchA-Ten-GigabitEthernet1/0/1] qos apply policy DCBX outbound

(3)     部署PFC

# 在以太網接口Ten-GigabitEthernet1/0/1上配置PFC功能的開啟模式為自動協商模式,且設置對802.1p優先級3開啟PFC功能,並配置信任報文自帶的802.1p優先級。

[SwitchA-Ten-GigabitEthernet1/0/1] priority-flow-control auto

[SwitchA-Ten-GigabitEthernet1/0/1] priority-flow-control no-drop dot1p 3

[SwitchA-Ten-GigabitEthernet1/0/1] qos trust dot1p

[SwitchA-Ten-GigabitEthernet1/0/1] quit

# 在以太網接口Ten-GigabitEthernet1/0/2~Ten-GigabitEthernet1/0/3上配置強製開啟PFC功能,且設置對802.1p優先級3開啟PFC功能,並配置信任報文自帶的802.1p優先級。

[SwitchA] interface range ten-gigabitethernet 1/0/2 to ten-gigabitethernet 1/0/3

[SwitchA-if-range] priority-flow-control enable

[SwitchA-if-range] priority-flow-control no-drop dot1p 3

[SwitchA-if-range] qos trust dot1p

[SwitchA-if-range] quit

(4)     部署ETS

# 配置802.1p優先級到本地優先級的映射,將802.1p優先級3映射到本地優先級1,配置其它的802.1p優先級映射到本地優先級0。

[SwitchA] qos map-table dot1p-lp

[SwitchA-maptbl-dot1p-lp] import 3 export 1

[SwitchA-maptbl-dot1p-lp] import 0 1 2 4 5 6 7 export 0

[SwitchA-maptbl-dot1p-lp] quit

# 在以太網接口Ten-GigabitEthernet1/0/1上開啟並配置WRR隊列,使FCoE流量和普通LAN流量各占50%帶寬。

[SwitchA] interface ten-gigabitethernet 1/0/1

[SwitchA-Ten-GigabitEthernet1/0/1] qos wrr byte-count

[SwitchA-Ten-GigabitEthernet1/0/1] qos wrr af1 group 1 byte-count 1

[SwitchA-Ten-GigabitEthernet1/0/1] qos wrr be group 1 byte-count 1

# 在以太網接口Ten-GigabitEthernet1/0/1上配置其它的隊列為SP調度方式。

[SwitchA-Ten-GigabitEthernet1/0/1] qos wrr af2 group sp

[SwitchA-Ten-GigabitEthernet1/0/1] qos wrr af3 group sp

[SwitchA-Ten-GigabitEthernet1/0/1] qos wrr af4 group sp

[SwitchA-Ten-GigabitEthernet1/0/1] qos wrr ef group sp

[SwitchA-Ten-GigabitEthernet1/0/1] qos wrr cs6 group sp

[SwitchA-Ten-GigabitEthernet1/0/1] qos wrr cs7 group sp

[SwitchA-Ten-GigabitEthernet1/0/1] quit

(5)     配置FCoE功能

# 交換機模式配置為FCF模式。

[SwitchA] fcoe-mode fcf

# 開啟Fabric配置功能(缺省已開啟,此步驟可選)。

[SwitchA] vsan 1

[SwitchA-vsan1] domain configure enable

# 配置交換機的優先級為1,使Switch A成為主交換機。

[SwitchA-vsan1] priority 1

[SwitchA-vsan1] quit

 # 創建VFC1接口,將VFC1接口綁定到以太網接口Ten-GigabitEthernet1/0/1上,並將VFC1接口以Trunk方式加入VSAN 1。

[SwitchA] interface vfc 1

[SwitchA-Vfc1] bind interface ten-gigabitethernet 1/0/1

[SwitchA-Vfc1] port trunk vsan 1

[SwitchA-Vfc1] quit

# 創建VFC2接口,配置VFC2接口工作在E模式,將VFC2接口綁定到以太網接口Ten-GigabitEthernet1/0/2上,並將VFC2接口以Trunk方式加入VSAN 1。

[SwitchA] interface vfc 2

[SwitchA-Vfc2] fc mode e

[SwitchA-Vfc2] bind interface ten-gigabitethernet 1/0/2

[SwitchA-Vfc2] port trunk vsan 1

[SwitchA-Vfc2] quit

# 創建VFC3接口,配置VFC3接口工作在E模式,將VFC3接口綁定到以太網接口Ten-GigabitEthernet1/0/3上,並將VFC3接口以Trunk方式加入VSAN 1。

[SwitchA] interface vfc 3

[SwitchA-Vfc3] fc mode e

[SwitchA-Vfc3] bind interface ten-gigabitethernet 1/0/3

[SwitchA-Vfc3] port trunk vsan 1

[SwitchA-Vfc3] quit

# 配置以太網接口Ten-GigabitEthernet1/0/1~Ten-GigabitEthernet1/0/3允許VLAN 10的報文通過。

[SwitchA] interface range ten-gigabitethernet 1/0/1 to ten-gigabitethernet 1/0/3

[SwitchA-if-range] port link-type trunk

[SwitchA-if-range] port trunk permit vlan 10

[SwitchA-if-range] quit

# 開啟VLAN 10的FCoE功能,並將其與VSAN 1進行映射。

[SwitchA] vlan 10

[SwitchA-vlan10] fcoe enable vsan 1

[SwitchA-vlan10] quit

# 配置允許默認Zone內的成員互相訪問。

[SwitchA] vsan 1

[SwitchA-vsan1] zone default-zone permit

# 全局開啟FSPF功能(缺省已開啟,此步驟可選)。

[SwitchA-vsan1] fspf enable

[SwitchA-vsan1] quit

5.5.2  Switch B的配置

(1)     開啟高級模式

# 配置設備工作模式為高級模式(如果已經配置設備為高級模式此步驟可略)。

<SwitchB> system-view

[SwitchB] system-working-mode advance

Do you want to change the system working mode? [Y/N]:y

The system working mode is changed, please save the configuration and reboot the

 system to make it effective.

# 保存配置。

[SwitchB] save

The current configuration will be written to the device. Are you sure? [Y/N]:y

Please input the file name(*.cfg)[flash:/startup.cfg]

(To leave the existing filename unchanged, press the enter key):

Validating file. Please wait...

Saved the current configuration to mainboard device successfully.

[SwitchB] quit

# 重啟設備。

<SwitchB> reboot

Start to check configuration with next startup configuration file, please wait.........DONE!

This command will reboot the device. Continue? [Y/N]:y

Now rebooting, please wait...

(2)     部署PFC

# 在以太網接口Ten-GigabitEthernet1/0/1和Ten-GigabitEthernet1/0/2上配置強製開啟PFC功能,且設置對802.1p優先級3開啟PFC功能,並配置信任報文自帶的802.1p優先級。

<SwitchB> system-view

[SwitchB] interface range ten-gigabitethernet 1/0/1 to ten-gigabitethernet 1/0/2

[SwitchB-if-range] priority-flow-control enable

[SwitchB-if-range] priority-flow-control no-drop dot1p 3

[SwitchB-if-range] qos trust dot1p

[SwitchB-if-range] quit

(3)     配置FCoE功能

# 配置交換機模式為FCF模式。

[SwitchB] fcoe-mode fcf

# 開啟Fabric配置功能(缺省已開啟,此步驟可選)。

[SwitchB] vsan 1

[SwitchB-vsan1] domain configure enable

# 配置域ID為2。

[SwitchB-vsan1] domain-id 2 preferred

Non-disruptive reconfiguration or isolating the switch may be performed. Continue? [Y/N]:y

[SwitchB-vsan1] quit

# 創建VFC1接口,配置VFC1接口工作在E模式,將VFC1接口綁定到以太網接口Ten-GigabitEthernet1/0/1上,並將VFC1接口以Trunk方式加入VSAN 1。

[SwitchB] interface vfc 1

[SwitchB-Vfc1] fc mode e

[SwitchB-Vfc1] bind interface ten-gigabitethernet 1/0/1

[SwitchB-Vfc1] port trunk vsan 1

[SwitchB-Vfc1] quit

# 創建VFC2接口,配置VFC2接口工作在E模式,將VFC2接口綁定到以太網接口Ten-GigabitEthernet1/0/2上,並將VFC2接口以Trunk方式加入VSAN 1。

[SwitchB] interface vfc 2

[SwitchB-Vfc2] fc mode e

[SwitchB-Vfc2] bind interface ten-gigabitethernet 1/0/2

[SwitchB-Vfc2] port trunk vsan 1

[SwitchB-Vfc2] quit

# 配置以太網接口Ten-GigabitEthernet1/0/1和Ten-GigabitEthernet1/0/2允許VLAN 10的報文通過。

[SwitchB] interface range ten-gigabitethernet 1/0/1 to ten-gigabitethernet 1/0/2

[SwitchB-if-range] port link-type trunk

[SwitchB-if-range] port trunk permit vlan 10

[SwitchB-if-range] quit

# 開啟VLAN 10的FCoE功能,並將其與VSAN 1進行映射。

[SwitchB] vlan 10

[SwitchB-vlan10] fcoe enable vsan 1

[SwitchB-vlan10] quit

# 配置允許默認Zone內的成員互相訪問。

[SwitchB] vsan 1

[SwitchB-vsan1] zone default-zone permit

# 全局開啟FSPF功能(缺省已開啟,此步驟可選)。

[SwitchB-vsan1] fspf enable

[SwitchB-vsan1] quit

5.5.3  Switch C的配置

(1)     開啟高級模式

# 配置設備工作模式為高級模式(如果已經配置設備為高級模式此步驟可略)。

<SwitchC> system-view

[SwitchC] system-working-mode advance

Do you want to change the system working mode? [Y/N]:y

The system working mode is changed, please save the configuration and reboot the

 system to make it effective.

# 保存配置。

[SwitchC] save

The current configuration will be written to the device. Are you sure? [Y/N]:y

Please input the file name(*.cfg)[flash:/startup.cfg]

(To leave the existing filename unchanged, press the enter key):

Validating file. Please wait...

Saved the current configuration to mainboard device successfully.

[SwitchC] quit

# 重啟設備。

<SwitchC> reboot

Start to check configuration with next startup configuration file, please wait.........DONE!

This command will reboot the device. Continue? [Y/N]:y

Now rebooting, please wait...

(2)     部署DCBX

# 全局開啟LLDP功能。

<SwitchC> system-view

[SwitchC] lldp global enable

# 在以太網接口Ten-GigabitEthernet1/0/1上開啟LLDP功能,並允許發布DCBX TLV。

[SwitchC] interface ten-gigabitethernet 1/0/1

[SwitchC-Ten-GigabitEthernet1/0/1] lldp enable

[SwitchC-Ten-GigabitEthernet1/0/1] lldp tlv-enable dot1-tlv dcbx

[SwitchC-Ten-GigabitEthernet1/0/1] quit

# 創建名為DCBX的二層ACL,並為其創建規則來匹配FCoE報文(協議號為0x8906)和FIP報文(協議號為0x8914)。

[SwitchC] acl mac name DCBX

[SwitchC-acl-ethernetframe-DCBX] rule 0 permit type 8906 ffff

[SwitchC-acl-ethernetframe-DCBX] rule 5 permit type 8914 ffff

[SwitchC-acl-ethernetframe-DCBX] quit

# 定義名為DCBX的類,其下各規則間的關係為邏輯或,並定義其匹配名為DCBX的ACL。

[SwitchC] traffic classifier DCBX operator or

[SwitchC-classifier-DCBX] if-match acl mac name DCBX

[SwitchC-classifier-DCBX] quit

# 定義名為DCBX的流行為,並配置標記報文的802.1p優先級為3。

[SwitchC] traffic behavior DCBX

[SwitchC-behavior-DCBX] remark dot1p 3

[SwitchC-behavior-DCBX] quit

# 定義名為DCBX的策略,為類DCBX指定采用的流行為是DCBX,並指定該策略為DCBX模式。

[SwitchC] qos policy DCBX

[SwitchC-qospolicy-DCBX] classifier DCBX behavior DCBX mode dcbx

[SwitchC-qospolicy-DCBX] quit

# 在以太網接口Ten-GigabitEthernet1/0/1的出方向上應用策略DCBX。

[SwitchC] interface ten-gigabitethernet 1/0/1

[SwitchC-Ten-GigabitEthernet1/0/1] qos apply policy DCBX outbound

(3)     部署PFC

# 在以太網接口Ten-GigabitEthernet1/0/1上配置PFC功能的開啟模式為自動協商模式,且設置對802.1p優先級3開啟PFC功能,並配置信任報文自帶的802.1p優先級。

[SwitchC-Ten-GigabitEthernet1/0/1] priority-flow-control auto

[SwitchC-Ten-GigabitEthernet1/0/1] priority-flow-control no-drop dot1p 3

[SwitchC-Ten-GigabitEthernet1/0/1] qos trust dot1p

[SwitchC-Ten-GigabitEthernet1/0/1] quit

# 在以太網接口Ten-GigabitEthernet1/0/2和Ten-GigabitEthernet1/0/3上配置強製開啟PFC功能,且設置對802.1p優先級3開啟PFC功能,並配置信任報文自帶的802.1p優先級。

[SwitchC] interface range ten-gigabitethernet 1/0/2 to ten-gigabitethernet 1/0/3

[SwitchC-if-range] priority-flow-control enable

[SwitchC-if-range] priority-flow-control no-drop dot1p 3

[SwitchC-if-range] qos trust dot1p

[SwitchC-if-range] quit

(4)     配置FCoE功能

# 配置交換機模式為FCF模式。

[SwitchC] fcoe-mode fcf

# 開啟Fabric配置功能(缺省已開啟,此步驟可選)。

[SwitchC] vsan 1

[SwitchC-vsan1] domain configure enable

# 配置域ID為3。

[SwitchC-vsan1] domain-id 3 preferred

Non-disruptive reconfiguration or isolating the switch may be performed. Continue? [Y/N]:y

[SwitchC-vsan1] quit

# 創建VFC1接口,將VFC1接口綁定到以太網接口Ten-GigabitEthernet1/0/1上,並將VFC1接口以Trunk方式加入VSAN 1。

[SwitchC] interface vfc 1

[SwitchC-Vfc1] bind interface ten-gigabitethernet 1/0/1

[SwitchC-Vfc1] port trunk vsan 1

[SwitchC-Vfc1] quit

# 創建VFC2接口,配置VFC2接口工作在E模式,將VFC2接口綁定到以太網接口Ten-GigabitEthernet1/0/2上,並將VFC2接口以Trunk方式加入VSAN 1。

[SwitchC] interface vfc 2

[SwitchC-Vfc2] fc mode e

[SwitchC-Vfc2] bind interface ten-gigabitethernet 1/0/2

[SwitchC-Vfc2] port trunk vsan 1

[SwitchC-Vfc2] quit

# 創建VFC3接口,配置VFC3接口工作在E模式,將VFC3接口綁定到以太網接口Ten-GigabitEthernet1/0/3上,並將VFC3接口以Trunk方式加入VSAN 1。

[SwitchC] interface vfc 3

[SwitchC-Vfc3] fc mode e

[SwitchC-Vfc3] bind interface ten-gigabitethernet 1/0/3

[SwitchC-Vfc3] port trunk vsan 1

[SwitchC-Vfc3] quit

# 配置以太網接口Ten-GigabitEthernet1/0/1~Ten-GigabitEthernet1/0/3允許VLAN 10的報文通過。

[SwitchC] interface range ten-gigabitethernet 1/0/1 to ten-gigabitethernet 1/0/3

[SwitchC-if-range] port link-type trunk

[SwitchC-if-range] port trunk permit vlan 10

[SwitchC-if-range] quit

# 開啟VLAN 10的FCoE功能,並將其與VSAN 1進行映射。

[SwitchC] vlan 10

[SwitchC-vlan10] fcoe enable vsan 1

[SwitchC-vlan10] quit

# 配置允許默認Zone內的成員互相訪問。

[SwitchC] vsan 1

[SwitchC-vsan1] zone default-zone permit

# 全局開啟FSPF功能(缺省已開啟,此步驟可選)。

[SwitchC-vsan1] fspf enable

[SwitchC-vsan1] quit

5.6  驗證配置

(1)     各條鏈路均連接正常時,驗證VSAN 1內FSPF路由信息

# 顯示Switch A的FSPF鄰居信息。

[SwitchA] display fspf neighbor

FSPF neighbor information of VSAN 1(01):

  Interface   NbrDomain   IfIndex   NbrIfIndex   Dead Time   State

  Vfc2        2           0x68      0x68         00:01:06    Full

  Vfc3        3           0x69      0x69         00:01:06    Full

上述信息表明,Switch A存在兩個鄰居(域ID分別為2和3),即Switch B和Switch C。

# 顯示Switch A的FC路由表相關信息。

[SwitchA] display fc routing-table vsan 1

Routing Table: VSAN 1

  Destinations : 6          Routes : 6

  Destination/mask   Protocol   Preference   Cost     Interface

  0x020000/8         FSPF       20           100      Vfc2

  0x030000/8         FSPF       20           100      Vfc3

  0xfffc01/24        DIRECT     0            0        InLoop0

  0xfffffa/24        DIRECT     0            0        InLoop0

  0xfffffc/24        DIRECT     0            0        InLoop0

  0xfffffd/24        DIRECT     0            0        InLoop0

以上信息表明,Switch A學到了到達Switch B和Switch C的FSPF路由。

# 使用fcping命令查看Switch A和Switch C之間的路由是否可達

[SwitchA] fcping fcid fffc03 vsan 1

FCPING fcid 0xfffc03: 128 data bytes, press CTRL_C to break.

Reply from 0xfffc03: bytes = 128 time = 1.102 ms

Reply from 0xfffc03: bytes = 128 time = 0.276 ms

Reply from 0xfffc03: bytes = 128 time = 0.253 ms

Reply from 0xfffc03: bytes = 128 time = 0.270 ms

Reply from 0xfffc03: bytes = 128 time = 0.247 ms

 

--- 0xfffc03 fcping statistics ---

5 packet(s) transmitted

5 packet(s) received

0.00% packet loss

round-trip min/avg/max = 0.247/0.430/1.102 ms

以上信息表明,Switch A和Switch C之間路由可達。

# 探測在VSAN 1內Switch A到Switch C的雙向路由信息。

[SwitchA] fctracert fcid fffc03 vsan 1

Route present for: 0xfffc03, press CTRL_C to break.

20:00:00:0b:46:00:02:82(0xfffc01)

20:00:00:05:30:00:18:db(0xfffc03)

20:00:00:05:30:00:18:db(0xfffc03)

20:00:00:0b:46:00:02:82(0xfffc01)

Fctracert completed.

以上信息表明,Switch A到Switch C的路徑是直接從Switch A到Switch C,沒有經過Switch B。

(2)     斷開Switch A和Switch C之間的鏈路時,驗證VSAN 1內FSPF路由是否發生變化

# 查看Switch A的FC路由表相關信息。

[SwitchA] display fc routing-table vsan 1

Routing Table: VSAN 1

  Destinations : 6          Routes : 6

  Destination/mask   Protocol   Preference   Cost     Interface

  0x020000/8         FSPF       20           100      Vfc2

  0x030000/8         FSPF       20           200      Vfc2

  0xfffc01/24        DIRECT     0            0        InLoop0

  0xfffffa/24        DIRECT     0            0        InLoop0

  0xfffffc/24        DIRECT     0            0        InLoop0

  0xfffffd/24        DIRECT     0            0        InLoop0

以上信息表明,Switch A上依然存在到達Switch C的FSPF路由。

# 使用fcping命令查看Switch A和Switch C之間的路由是否可達。

[SwitchA] fcping fcid fffc03 vsan 1

FCPING fcid 0xfffc03: 128 data bytes, press CTRL_C to break.

Reply from 0xfffc03: bytes = 128 time = 2.846 ms

Reply from 0xfffc03: bytes = 128 time = 2.810 ms

Reply from 0xfffc03: bytes = 128 time = 2.799 ms

Reply from 0xfffc03: bytes = 128 time = 2.908 ms

Reply from 0xfffc03: bytes = 128 time = 3.840 ms

 

--- 0xfffc03 fcping statistics ---

5 packet(s) transmitted

5 packet(s) received

0.00% packet loss

round-trip min/avg/max = 2.799/3.041/3.840 ms

以上信息表明,斷開Switch A和Switch C之間的鏈路後,FSPF自動切換到另一條鏈路,Switch A和Switch C之間路由依然可達,從而實現了路由的動態切換。

# 再次探測在VSAN 1內Switch A到Switch C的雙向路由信息。

[SwitchA] fctracert fcid fffc03 vsan 1

Route present for: 0xfffc03, press CTRL_C to break.

20:00:00:0b:46:00:02:82(0xfffc01)

20:00:00:e0:fc:00:c5:18(0xfffc02)

20:00:00:05:30:00:18:db(0xfffc03)

20:00:00:05:30:00:18:db(0xfffc03)

20:00:00:e0:fc:00:c5:18(0xfffc02)

20:00:00:0b:46:00:02:82(0xfffc01)

Fctracert completed.

以上信息表明,Switch A到Switch C的路徑是經過Switch B的。

5.7  配置文件

·     Switch A:

#

 lldp global enable

#

 system-working-mode advance

#

 fcoe-mode fcf

#

vsan 1

 priority 1

 zone default-zone permit

#

vlan 10

 fcoe enable vsan 1

#

qos map-table dot1p-lp

 import 0 export 0

 import 2 export 0

 import 3 export 1

 import 4 export 0

 import 5 export 0

 import 6 export 0

 import 7 export 0

#

traffic classifier DCBX operator or

 if-match acl mac name DCBX

#

traffic behavior DCBX

 remark dot1p 3

#

qos policy DCBX

 classifier DCBX behavior DCBX mode dcbx

#

interface Ten-GigabitEthernet1/0/1

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 1 10

 priority-flow-control auto

 priority-flow-control no-drop dot1p 3

 lldp tlv-enable dot1-tlv dcbx

 qos wrr byte-count

 qos wrr af1 group 1 byte-count 1

 qos wrr af2 group sp

 qos wrr af3 group sp

 qos wrr af4 group sp

 qos wrr ef group sp

 qos wrr cs6 group sp

 qos wrr cs7 group sp

 qos apply policy DCBX outbound

#

interface Ten-GigabitEthernet1/0/2

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 1 10

 priority-flow-control enable

 priority-flow-control no-drop dot1p 3

#

interface Ten-GigabitEthernet1/0/3

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 1 10

 priority-flow-control enable

 priority-flow-control no-drop dot1p 3

#

interface Vfc1

 port trunk vsan 1

 bind interface Ten-GigabitEthernet1/0/1

#

interface Vfc2

 fc mode e

 port trunk vsan 1

 bind interface Ten-GigabitEthernet1/0/2

#

interface Vfc3

 fc mode e

 port trunk vsan 1

 bind interface Ten-GigabitEthernet1/0/3

#

acl mac name DCBX

 rule 0 permit type 8906 ffff

 rule 5 permit type 8914 ffff

#

·     Switch B:

#

 system-working-mode advance

#

 fcoe-mode fcf

#

vsan 1

 domain-id 2 preferred

 zone default-zone permit

#

vlan 10

 fcoe enable vsan 1

#

interface Ten-GigabitEthernet1/0/1

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 1 10

 priority-flow-control enable

 priority-flow-control no-drop dot1p 3

#

interface Ten-GigabitEthernet1/0/2

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 1 10

 priority-flow-control enable

 priority-flow-control no-drop dot1p 3

#

interface Vfc1

 fc mode e

 port trunk vsan 1

 bind interface Ten-GigabitEthernet1/0/1

#

interface Vfc2

 fc mode e

 port trunk vsan 1

 bind interface Ten-GigabitEthernet1/0/2

#

·     Switch C:

#

lldp global enable

#

 system-working-mode advance

#

 fcoe-mode fcf

#

vsan 1

 domain-id 3 preferred

 zone default-zone permit

#

vlan 10

 fcoe enable vsan 1

#

traffic classifier DCBX operator or

 if-match acl mac name DCBX

#

traffic behavior DCBX

 remark dot1p 3

#

qos policy DCBX

 classifier DCBX behavior DCBX mode dcbx

#

interface Ten-GigabitEthernet1/0/1

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 1 10

 priority-flow-control auto

 priority-flow-control no-drop dot1p 3

 lldp tlv-enable dot1-tlv dcbx

 qos apply policy DCBX outbound

#

interface Ten-GigabitEthernet1/0/2

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 1 10

 priority-flow-control enable

 priority-flow-control no-drop dot1p 3

#

interface Ten-GigabitEthernet1/0/3

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 1 10

 priority-flow-control enable

 priority-flow-control no-drop dot1p 3

#

interface Vfc1

 port trunk vsan 1

 bind interface Ten-GigabitEthernet1/0/1

#

interface Vfc2

 fc mode e

 port trunk vsan 1

 bind interface Ten-GigabitEthernet1/0/2

#

interface Vfc3

 fc mode e

 port trunk vsan 1

 bind interface Ten-GigabitEthernet1/0/3

#

acl mac name DCBX

 rule 0 permit type 8906 ffff

 rule 5 permit type 8914 ffff

#

FC Zone配置舉例

6.1  組網需求

圖3所示,網絡由3台FCF交換機Switch A~Switch C、2台服務器和3個磁盤設備組成。其中Server A為A部門服務器,Server B為B部門服務器。

現要求在Switch A、Switch B和Switch C上配置FCoE功能,實現:

·     SAN網絡中的存儲數據流量能夠在以太網鏈路上無損傳輸;

·     Disk A為A部門專屬磁盤,即僅Server A能訪問Disk A;

·     Disk B為B部門專屬磁盤,即僅Server B能訪問Disk B;

·     Disk C為兩部門共同擁有的磁盤,即Server A和Server B能訪問Disk C;

·     兩個部門之間的業務相互隔離,提高安全性,即Server A和Server B之間不能相互訪問。

圖3 配置FC Zone組網圖

 

6.2  配置思路

·     為了實現SAN網絡中的存儲數據流量能夠在無損以太網鏈路上傳輸,H3C建議用戶在交換機和服務器連接的以太網接口上配置DCBX、自動協商模式的PFC、ETS功能;在交換機和磁盤設備連接的以太網接口上配置DCBX、自動協商模式的PFC功能;在交換機與交換機連接的以太網接口上強製開啟PFC功能。

·     為實現在VSAN 1中對訪問權限進行控製,需要將VSAN 1劃分為2個Zone,其中:

¡     Zone1包括Server A、Disk A和Disk C;

¡     Zone2包括Server B、Disk B 和Disk C。

·     因為Zone1和Zone2存在一個Server和多個Disk,所以需要對Zone1和Zone2開啟Pairwise特性,配置Server A和Server B角色為Initiator,Disk A、Disk B和Disk C角色為Target。

·     Zone的相關配置僅需要在Fabric網絡中任意一台設備上配置,以Switch A為例,同時為了保證Fabric網絡中各設備數據的一致性,需要激活Zone set並發起向全網的擴散過程,即攜帶完整數據庫信息進行數據同步。

6.3  使用版本

本舉例是在S6890-CMW710-R2712版本上進行配置和驗證的。

6.4  配置注意事項

缺省情況下,S6890係列交換機的接口處於ADM(Administratively Down)狀態,請根據實際需要在對應接口視圖下使用undo shutdown命令開啟接口。

6.5  配置步驟

6.5.1  Switch A的配置

(1)     開啟高級模式

# 配置設備工作模式為高級模式(如果已經配置設備為高級模式此步驟可略)。

<SwitchA> system-view

[SwitchA] system-working-mode advance

Do you want to change the system working mode? [Y/N]:y

The system working mode is changed, please save the configuration and reboot the

 system to make it effective.

# 保存配置。

[SwitchA] save

The current configuration will be written to the device. Are you sure? [Y/N]:y

Please input the file name(*.cfg)[flash:/startup.cfg]

(To leave the existing filename unchanged, press the enter key):

Validating file. Please wait...

Saved the current configuration to mainboard device successfully.

[SwitchA] quit

# 重啟設備。

<SwitchA> reboot

Start to check configuration with next startup configuration file, please wait.........DONE!

This command will reboot the device. Continue? [Y/N]:y

Now rebooting, please wait...

(2)     部署DCBX

# 全局開啟LLDP功能。

<SwitchA> system-view

[SwitchA] lldp global enable

# 在以太網接口Ten-GigabitEthernet1/0/3和Ten-GigabitEthernet1/0/4上開啟LLDP功能,並允許發布DCBX TLV。

[SwitchA] interface range ten-gigabitethernet 1/0/3 to ten-gigabitethernet 1/0/4

[SwitchA-if-range] lldp enable

[SwitchA-if-range] lldp tlv-enable dot1-tlv dcbx

[SwitchA-if-range] quit

# 創建名為DCBX的二層ACL,並為其創建規則來匹配FCoE報文(協議號為0x8906)和FIP報文(協議號為0x8914)。

[SwitchA] acl mac name DCBX

[SwitchA-acl-ethernetframe-DCBX] rule 0 permit type 8906 ffff

[SwitchA-acl-ethernetframe-DCBX] rule 5 permit type 8914 ffff

[SwitchA-acl-ethernetframe-DCBX] quit

# 定義名為DCBX的類,其下各規則間的關係為邏輯或,並定義其匹配名為DCBX的ACL。

[SwitchA] traffic classifier DCBX operator or

[SwitchA-classifier-DCBX] if-match acl mac name DCBX

[SwitchA-classifier-DCBX] quit

# 定義名為DCBX的流行為,並配置標記報文的802.1p優先級為3。

[SwitchA] traffic behavior DCBX

[SwitchA-behavior-DCBX] remark dot1p 3

[SwitchA-behavior-DCBX] quit

# 定義名為DCBX的策略,為類DCBX指定采用的流行為是DCBX,並指定該策略為DCBX模式。

[SwitchA] qos policy DCBX

[SwitchA-qospolicy-DCBX] classifier DCBX behavior DCBX mode dcbx

[SwitchA-qospolicy-DCBX] quit

# 在以太網接口Ten-GigabitEthernet1/0/3和Ten-GigabitEthernet1/0/4的出方向上應用策略DCBX。

[SwitchA] interface range ten-gigabitethernet 1/0/3 to ten-gigabitethernet 1/0/4

[SwitchA-if-range] qos apply policy DCBX outbound

(3)     部署PFC

# 在以太網接口Ten-GigabitEthernet1/0/3和Ten-GigabitEthernet1/0/4上配置PFC功能的開啟模式為自動協商模式,且設置對802.1p優先級3開啟PFC功能,並配置信任報文自帶的802.1p優先級。

[SwitchA-if-range] priority-flow-control auto

[SwitchA-if-range] priority-flow-control no-drop dot1p 3

[SwitchA-if-range] qos trust dot1p

# 在以太網接口Ten-GigabitEthernet1/0/1和Ten-GigabitEthernet1/0/2上配置強製開啟PFC功能,且設置對802.1p優先級3開啟PFC功能,並配置信任報文自帶的802.1p優先級。

[SwitchA] interface range ten-gigabitethernet 1/0/1 to ten-gigabitethernet 1/0/2

[SwitchA-if-range] priority-flow-control enable

[SwitchA-if-range] priority-flow-control no-drop dot1p 3

[SwitchA-if-range] qos trust dot1p

[SwitchA-if-range] quit

(4)     部署ETS

# 配置802.1p優先級到本地優先級的映射,將802.1p優先級3映射到本地優先級1,配置其它的802.1p優先級映射到本地優先級0。

[SwitchA] qos map-table dot1p-lp

[SwitchA-maptbl-dot1p-lp] import 3 export 1

[SwitchA-maptbl-dot1p-lp] import 0 1 2 4 5 6 7 export 0

[SwitchA-maptbl-dot1p-lp] quit

# 在以太網接口Ten-GigabitEthernet1/0/3和Ten-GigabitEthernet1/0/4上開啟並配置WRR隊列,使FCoE流量和普通LAN流量各占50%帶寬。

[SwitchA] interface range ten-gigabitethernet 1/0/3 to ten-gigabitethernet 1/0/4

[SwitchA-if-range] qos wrr byte-count

[SwitchA-if-range] qos wrr af1 group 1 byte-count 1

[SwitchA-if-range] qos wrr be group 1 byte-count 1

# 在以太網接口Ten-GigabitEthernet1/0/3和Ten-GigabitEthernet1/0/4上配置其它的隊列為SP調度方式。

[SwitchA-if-range] qos wrr af2 group sp

[SwitchA-if-range] qos wrr af3 group sp

[SwitchA-if-range] qos wrr af4 group sp

[SwitchA-if-range] qos wrr ef group sp

[SwitchA-if-range] qos wrr cs6 group sp

[SwitchA-if-range] qos wrr cs7 group sp

[SwitchA-if-range] quit

(5)     配置FCoE功能

# 配置交換機模式為FCF模式。

[SwitchA] fcoe-mode fcf

# 創建VSAN 1。

[SwitchA] vsan 1

# 配置交換機的優先級為1,使Switch A成為主交換機。

[SwitchA-vsan1] priority 1

[SwitchA-vsan1] quit

# 創建VFC1接口,配置VFC1接口工作在E模式,將VFC1接口綁定到以太網接口Ten-GigabitEthernet1/0/1上,並將VFC1接口以Trunk方式加入VSAN 1。

[SwitchA] interface vfc 1

[SwitchA-Vfc1] fc mode e

[SwitchA-Vfc1] bind interface ten-gigabitethernet 1/0/1

[SwitchA-Vfc1] port trunk vsan 1

[SwitchA-Vfc1] quit

# 創建VFC2接口,配置VFC2接口工作在E模式,將VFC2接口綁定到以太網接口Ten-GigabitEthernet1/0/2上,並將VFC2接口以Trunk方式加入VSAN 1。

[SwitchA] interface vfc 2

[SwitchA-Vfc2] fc mode e

[SwitchA-Vfc2] bind interface ten-gigabitethernet 1/0/2

[SwitchA-Vfc2] port trunk vsan 1

[SwitchA-Vfc2] quit

# 創建VFC3接口,將VFC3接口綁定到以太網接口Ten-GigabitEthernet1/0/3上,並將VFC3接口以Trunk方式加入VSAN 1。

[SwitchA] interface vfc 3

[SwitchA-Vfc3] bind interface ten-gigabitethernet 1/0/3

[SwitchA-Vfc3] port trunk vsan 1

[SwitchA-Vfc3] quit

# 創建VFC4接口,將VFC4接口綁定到以太網接口Ten-GigabitEthernet1/0/4上,並將VFC4接口以Trunk方式加入VSAN 1。

[SwitchA] interface vfc 4

[SwitchA-Vfc4] bind interface ten-gigabitethernet 1/0/4

[SwitchA-Vfc4] port trunk vsan 1

[SwitchA-Vfc4] quit

# 配置以太網接口Ten-GigabitEthernet1/0/1~Ten-GigabitEthernet1/0/4允許VLAN 10的報文通過。

[SwitchA] interface range ten-gigabitethernet 1/0/1 to ten-gigabitethernet 1/0/4

[SwitchA-if-range] port link-type trunk

[SwitchA-if-range] port trunk permit vlan 10

[SwitchA-if-range] quit

# 開啟VLAN 10的FCoE功能,並將其與VSAN 1進行映射。

[SwitchA] vlan 10

[SwitchA-vlan10] fcoe enable vsan 1

[SwitchA-vlan10] quit

6.5.2  Switch B的配置

(1)     開啟高級模式

# 配置設備工作模式為高級模式(如果已經配置設備為高級模式此步驟可略)。

<SwitchB> system-view

[SwitchB] system-working-mode advance

Do you want to change the system working mode? [Y/N]:y

The system working mode is changed, please save the configuration and reboot the

 system to make it effective.

# 保存配置。

[SwitchB] save

The current configuration will be written to the device. Are you sure? [Y/N]:y

Please input the file name(*.cfg)[flash:/startup.cfg]

(To leave the existing filename unchanged, press the enter key):

Validating file. Please wait...

Saved the current configuration to mainboard device successfully.

[SwitchB] quit

# 重啟設備。

<SwitchB> reboot

Start to check configuration with next startup configuration file, please wait.........DONE!

This command will reboot the device. Continue? [Y/N]:y

Now rebooting, please wait...

(2)     部署PFC

# 在以太網接口Ten-GigabitEthernet1/0/1和Ten-GigabitEthernet1/0/2上配置強製開啟PFC功能,且設置對802.1p優先級3開啟PFC功能,並配置信任報文自帶的802.1p優先級。

<SwitchB> system-view

[SwitchB] interface range ten-gigabitethernet 1/0/1 to ten-gigabitethernet 1/0/2

[SwitchB-if-range] priority-flow-control enable

[SwitchB-if-range] priority-flow-control no-drop dot1p 3

[SwitchB-if-range] qos trust dot1p

[SwitchB-if-range] quit

(3)     配置FCoE功能

# 配置交換機模式為FCF模式。

[SwitchB] fcoe-mode fcf

# 開啟Fabric配置功能(缺省已開啟,此步驟可選)。

[SwitchB] vsan 1

[SwitchB-vsan1] domain configure enable

# 配置域ID為2。

[SwitchB-vsan1] domain-id 2 preferred

Non-disruptive reconfiguration or isolating the switch may be performed. Continue? [Y/N]:y

[SwitchB-vsan1] quit

# 創建VFC1接口,配置VFC1接口工作在E模式,將VFC1接口綁定到以太網接口Ten-GigabitEthernet1/0/1上,並將VFC1接口以Trunk方式加入VSAN 1。

[SwitchB] interface vfc 1

[SwitchB-Vfc1] fc mode e

[SwitchB-Vfc1] bind interface ten-gigabitethernet 1/0/1

[SwitchB-Vfc1] port trunk vsan 1

[SwitchB-Vfc1] quit

# 創建VFC2接口,配置VFC2接口工作在E模式,將VFC2接口綁定到以太網接口Ten-GigabitEthernet1/0/2上,並將VFC2接口以Trunk方式加入VSAN 1。

[SwitchB] interface vfc 2

[SwitchB-Vfc2] fc mode e

[SwitchB-Vfc2] bind interface ten-gigabitethernet 1/0/2

[SwitchB-Vfc2] port trunk vsan 1

[SwitchB-Vfc2] quit

# 配置以太網接口Ten-GigabitEthernet1/0/1和Ten-GigabitEthernet1/0/2允許VLAN 10的報文通過。

[SwitchB] interface range ten-gigabitethernet 1/0/1 to ten-gigabitethernet 1/0/2

[SwitchB-if-range] port link-type trunk

[SwitchB-if-range] port trunk permit vlan 10

[SwitchB-if-range] quit

# 開啟VLAN 10的FCoE功能,並將其與VSAN 1進行映射。

[SwitchB] vlan 10

[SwitchB-vlan10] fcoe enable vsan 1

[SwitchB-vlan10] quit

6.5.3  Switch C的配置

(1)     開啟高級模式

# 配置設備工作模式為高級模式(如果已經配置設備為高級模式此步驟可略)。

<SwitchC> system-view

[SwitchC] system-working-mode advance

Do you want to change the system working mode? [Y/N]:y

The system working mode is changed, please save the configuration and reboot the

 system to make it effective.

# 保存配置。

[SwitchC] save

The current configuration will be written to the device. Are you sure? [Y/N]:y

Please input the file name(*.cfg)[flash:/startup.cfg]

(To leave the existing filename unchanged, press the enter key):

Validating file. Please wait...

Saved the current configuration to mainboard device successfully.

[SwitchC] quit

# 重啟設備。

<SwitchC> reboot

Start to check configuration with next startup configuration file, please wait.........DONE!

This command will reboot the device. Continue? [Y/N]:y

Now rebooting, please wait...

(2)     部署DCBX

# 全局開啟LLDP功能。

<SwitchC> system-view

[SwitchC] lldp global enable

# 在以太網接口Ten-GigabitEthernet1/0/3~Ten-GigabitEthernet1/0/5上開啟LLDP功能,並允許發布DCBX TLV。

[SwitchC] interface range ten-gigabitethernet 1/0/3 to ten-gigabitethernet 1/0/5

[SwitchC-if-range] lldp enable

[SwitchC-if-range] lldp tlv-enable dot1-tlv dcbx

[SwitchC-if-range] quit

# 創建名為DCBX的二層ACL,並為其創建規則來匹配FCoE報文(協議號為0x8906)和FIP報文(協議號為0x8914)。

[SwitchC] acl mac name DCBX

[SwitchC-acl-ethernetframe-DCBX] rule 0 permit type 8906 ffff

[SwitchC-acl-ethernetframe-DCBX] rule 5 permit type 8914 ffff

[SwitchC-acl-ethernetframe-DCBX] quit

# 定義名為DCBX的類,其下各規則間的關係為邏輯或,並定義其匹配名為DCBX的ACL。

[SwitchC] traffic classifier DCBX operator or

[SwitchC-classifier-DCBX] if-match acl mac name DCBX

[SwitchC-classifier-DCBX] quit

# 定義名為DCBX的流行為,並配置標記報文的802.1p優先級為3。

[SwitchC] traffic behavior DCBX

[SwitchC-behavior-DCBX] remark dot1p 3

[SwitchC-behavior-DCBX] quit

# 定義名為DCBX的策略,為類DCBX指定采用的流行為是DCBX,並指定該策略為DCBX模式。

[SwitchC] qos policy DCBX

[SwitchC-qospolicy-DCBX] classifier DCBX behavior DCBX mode dcbx

[SwitchC-qospolicy-DCBX] quit

# 在以太網接口Ten-GigabitEthernet1/0/3~Ten-GigabitEthernet1/0/5的出方向上應用策略DCBX。

[SwitchC] interface range ten-gigabitethernet 1/0/3 to ten-gigabitethernet 1/0/5

[SwitchC-if-range] qos apply policy DCBX outbound

(3)     部署PFC

# 在以太網接口Ten-GigabitEthernet1/0/3~Ten-GigabitEthernet1/0/5上配置PFC功能的開啟模式為自動協商模式,且設置對802.1p優先級3開啟PFC功能,並配置信任報文自帶的802.1p優先級。

[SwitchC-if-range] priority-flow-control auto

[SwitchC-if-range] priority-flow-control no-drop dot1p 3

[SwitchC-if-range] qos trust dot1p

[SwitchC-if-range] quit

# 在以太網接口Ten-GigabitEthernet1/0/1~Ten-GigabitEthernet1/0/2上配置強製開啟PFC功能,且設置對802.1p優先級3開啟PFC功能,並配置信任報文自帶的802.1p優先級。

[SwitchC] interface range ten-gigabitethernet 1/0/1 to ten-gigabitethernet 1/0/2

[SwitchC-if-range] priority-flow-control enable

[SwitchC-if-range] priority-flow-control no-drop dot1p 3

[SwitchC-if-range] qos trust dot1p

[SwitchC-if-range] quit

(4)     配置FCoE功能

# 配置交換機模式為FCF模式。

[SwitchC] fcoe-mode fcf

# 創建VSAN 1。

[SwitchC] vsan 1

# 配置域ID為3。

[SwitchC-vsan1] domain-id 3 preferred

Non-disruptive reconfiguration or isolating the switch may be performed. Continue? [Y/N]:y

[SwitchC-vsan1] quit

# 創建VFC1接口,配置VFC1接口工作在E模式,將VFC1接口綁定到以太網接口Ten-GigabitEthernet1/0/1上,並將VFC1接口以Trunk方式加入VSAN 1。

[SwitchC] interface vfc 1

[SwitchC-Vfc1] fc mode e

[SwitchC-Vfc1] bind interface ten-gigabitethernet 1/0/1

[SwitchC-Vfc1] port trunk vsan 1

[SwitchC-Vfc1] quit

# 創建VFC2接口,配置VFC2接口工作在E模式,將VFC2接口綁定到以太網接口Ten-GigabitEthernet1/0/2上,並將VFC2接口以Trunk方式加入VSAN 1。

[SwitchC] interface vfc 2

[SwitchC-Vfc2] fc mode e

[SwitchC-Vfc2] bind interface ten-gigabitethernet 1/0/2

[SwitchC-Vfc2] port trunk vsan 1

[SwitchC-Vfc2] quit

# 創建VFC3接口,將VFC3接口綁定到以太網接口Ten-GigabitEthernet1/0/3上,並將VFC3接口以Trunk方式加入VSAN 1。

[SwitchC] interface vfc 3

[SwitchC-Vfc3] bind interface ten-gigabitethernet 1/0/3

[SwitchC-Vfc3] port trunk vsan 1

[SwitchC-Vfc3] quit

# 創建VFC4接口,將VFC4接口綁定到以太網接口Ten-GigabitEthernet1/0/4上,並將VFC4接口以Trunk方式加入VSAN 1。

[SwitchC] interface vfc 4

[SwitchC-Vfc4] bind interface ten-gigabitethernet 1/0/4

[SwitchC-Vfc4] port trunk vsan 1

[SwitchC-Vfc4] quit

# 創建VFC5接口,將VFC5接口綁定到以太網接口Ten-GigabitEthernet1/0/5上,並將VFC5接口以Trunk方式加入VSAN 1。

[SwitchC] interface vfc 5

[SwitchC-Vfc5] bind interface ten-gigabitethernet 1/0/5

[SwitchC-Vfc5] port trunk vsan 1

[SwitchC-Vfc5] quit

# 配置以太網接口Ten-GigabitEthernet1/0/1~Ten-GigabitEthernet1/0/5允許VLAN 10的報文通過。

[SwitchC] interface range ten-gigabitethernet 1/0/1 to ten-gigabitethernet 1/0/5

[SwitchC-if-range] port link-type trunk

[SwitchC-if-range] port trunk permit vlan 10

[SwitchC-if-range] quit

# 開啟VLAN 10的FCoE功能,並將其與VSAN 1進行映射。

[SwitchC] vlan 10

[SwitchC-vlan10] fcoe enable vsan 1

[SwitchC-vlan10] quit

6.5.4  獲取FC SAN網絡建立情況及各節點注冊的相關信息

(1)     在Switch A上獲取FC SAN網絡建立情況

# 獲取VSAN 1內的域信息。

[SwitchA] display fc domain vsan 1

Domain Information of VSAN 1:

 

  Running time information:

    State: Stable

    Switch WWN:  10:00:00:e0:fc:00:c5:18

    Fabric name: 10:00:00:e0:fc:00:c5:18

    Priority: 1

    Domain ID: 1

  Configuration information:

    Domain configure: Enabled

    Domain auto-reconfigure: Disabled

    Fabric name: 10:00:00:e0:fc:00:c5:18

    Priority: 1

    Domain ID: 1 (preferred)

  Principal switch running time information:

Priority: 1

 

    Path               Interface

    Downstream         Vfc1

    Downstream         Vfc2

上述信息表明,域配置已經結束,Switch A是主交換機,給自己分配的域ID是1。

# 獲取Switch A上的節點注冊的相關信息。

[SwitchA] display fc login vsan 1

Interface VSAN FCID     Node WWN                Port WWN

Vfc3      1    0x010000 21:01:00:1a:32:a0:fa:12 21:01:00:1a:32:a0:fa:11

Vfc4      1    0x010001 21:01:00:1b:32:b0:fb:12 21:01:00:1b:32:b0:fb:11

上述信息表明,Switch A為Server A、Server B分配的FC地址分別為0x010000、0x010001。

# 獲取VSAN 1內的名稱服務數據庫的簡要信息。

[SwitchA] display fc name-service database vsan 1

VSAN 1:

  FCID     Type               PWWN(vendor)                      FC4-type:feature

  0x010000 0x01(N)            21:01:00:1a:32:a0:fa:11           SCSI-FCP:Initiator

  0x010001 0x01(N)            21:01:00:1b:32:b0:fb:11           SCSI-FCP:Initiator

  0x030000 0x01(N)            10:00:00:05:30:00:25:a1           SCSI-FCP:Target

  0x030001 0x01(N)            10:00:00:05:30:00:25:c1           SCSI-FCP:Target

  0x030002 0x01(N)            10:00:00:05:30:00:25:b1           SCSI-FCP:Target

上述信息表明,所有節點設備均成功完成名稱服務注冊。

(2)     在Switch C上獲取FC SAN網絡建立情況

# 獲取VSAN 1內的域信息。

[SwitchC] display fc domain vsan 1

Domain Information of VSAN 1:

 

  Running time information:

    State: Stable

    Switch WWN:  10:00:74:25:8a:02:4c:00

    Fabric name: 10:00:00:e0:fc:00:c5:18

    Priority: 128

    Domain ID: 3

  Configuration information:

    Domain configure: Enabled

    Domain auto-reconfigure: Disabled

    Fabric name: 10:00:00:e0:fc:00:c5:18

    Priority: 128

    Domain ID: 3 (preferred)

  Principal switch running time information:

    Priority: 1

 

    Path          Interface

    Upstream      Vfc2

上述信息表明,域配置已經結束,主交換機給Switch C的分配的域ID是3。

# 獲取Switch C上的節點注冊的相關信息。

[SwitchC] display fc login vsan 1

Interface VSAN FCID     Node WWN                Port WWN

Vfc3      1    0x030000 10:00:00:05:30:00:25:a1 10:00:00:05:30:00:25:a2

Vfc4      1    0x030001 10:00:00:05:30:00:25:c1 10:00:00:05:30:00:25:c2

Vfc5      1    0x030002 10:00:00:05:30:00:25:b1 10:00:00:05:30:00:25:b2

上述信息表明,Switch C為Disk A、Disk C、Disk B分配的FC地址分別為0x030000、0x030001、0x030002。

# 獲取VSAN 1內的名稱服務數據庫的簡要信息。

[SwitchC] display fc name-service database vsan 1

VSAN 1:

  FCID     Type               PWWN(vendor)                      FC4-type:feature

  0x010000 0x01(N)            21:01:00:1a:32:a0:fa:11           SCSI-FCP:Initiator

  0x010001 0x01(N)            21:01:00:1b:32:b0:fb:11           SCSI-FCP:Initiator

  0x030000 0x01(N)            10:00:00:05:30:00:25:a1           SCSI-FCP:Target

  0x030001 0x01(N)            10:00:00:05:30:00:25:c1           SCSI-FCP:Target

  0x030002 0x01(N)            10:00:00:05:30:00:25:b1           SCSI-FCP:Target

上述信息表明,所有節點設備均成功完成名稱服務注冊。

6.5.5  配置FC Zone

# 配置VSAN 1工作在增強Zone模式。

[SwitchA-vsan1] zone mode enhanced

The zoning database in this switch would be distributed throughout the fabric. Continue? [Y/N]:y

# 創建Zone1,開啟其Pairwise特性,添加FC ID為010000的成員,角色為Initiator,添加FC ID為030000和030001的成員,角色為Target。

[SwitchA-vsan1] zone name Zone1

[SwitchA-vsan1-zone-Zone1] pairwise-zoning enable

[SwitchA-vsan1-zone-Zone1] member fcid 010000 initiator

[SwitchA-vsan1-zone-Zone1] member fcid 030000 target

[SwitchA-vsan1-zone-Zone1] member fcid 030001 target

[SwitchA-vsan1-zone-Zone1] quit

# 創建Zone2,開啟其Pairwise特性,添加FC地址為010001的成員,角色為Initiator,添加FC ID為030001和030002的成員,角色為Target。

[SwitchA-vsan1] zone name Zone2

[SwitchA-vsan1-zone-Zone2] pairwise-zoning enable

[SwitchA-vsan1-zone-Zone2] member fcid 010001 initiator

[SwitchA-vsan1-zone-Zone2] member fcid 030001 target

[SwitchA-vsan1-zone-Zone2] member fcid 030002 target

[SwitchA-vsan1-zone-Zone2] quit

# 創建Zone set Zoneset1,添加Zone1、Zone2為其成員。

[SwitchA-vsan1] zoneset name Zoneset1

[SwitchA-vsan1-zoneset-Zoneset1] member Zone1

[SwitchA-vsan1-zoneset-Zoneset1] member Zone2

[SwitchA-vsan1-zoneset-Zoneset1] quit

# 配置擴散和合並類型為完全擴散和完全合並,即攜帶完整數據庫信息進行數據同步。

[SwitchA-vsan1] zoneset distribute full

# 激活Zone set並發起向全網的擴散過程。

[SwitchA-vsan1] zoneset activate name Zoneset1

[SwitchA-vsan1] quit

6.6  驗證配置

在Switch A、Switch B、Switch C上通過顯示命令都能夠觀察到Zone配置結果和數據同步結果。下麵以Switch C上的顯示為例:

# 查看VSAN 1內的Zone set相關信息。

<SwitchC> display zoneset vsan 1

VSAN 1:

  zoneset name Zoneset1

    zone name Zone1

      fcid 0x010000 initiator

      fcid 0x030000 target

      fcid 0x030001 target

    zone name Zone2

      fcid 0x010001 initiator

      fcid 0x030001 target

      fcid 0x030002 target

上述信息表明,已完成兩個Zone的劃分。

# 查看FC地址類型成員030001所屬於的Zone。

<SwitchC> display zone member fcid 030001

fcid 0x030001

VSAN 1:

    zone Zone1

    zone Zone2

上述信息表明,Disk C同時屬於Zone1和Zone2,即Server A和Server B都能夠訪問Disk C。

# 查看VSAN 1內的Active Zone set相關信息。

<SwitchC> display zoneset active vsan 1

VSAN 1:

  zoneset name Zoneset1

    zone name Zone1

      *fcid 0x010000

      *fcid 0x030000

      *fcid 0x030001

    zone name Zone2

      *fcid 0x010001

      *fcid 0x030001

      *fcid 0x030002

以上信息表明,Zoneset1已被激活即成為VSAN 1內的Active Zone set。

6.7  配置文件

·     Switch A:

#

 lldp global enable

#

 system-working-mode advance

#

 fcoe-mode fcf

#

vsan 1

 priority 1

 zone mode enhanced

 zone name Zone1

 pairwise-zoning enable

  member fcid 010000 initiator

  member fcid 030000 target

  member fcid 030001 target

 zone name Zone2

  member fcid 010001 initiator

  member fcid 030001 target

  member fcid 030002 target

 zoneset name Zoneset1

  member Zone1

  member Zone2

 zoneset activate name Zoneset1

#

vlan 10

 fcoe enable vsan 1

#

qos map-table dot1p-lp

 import 0 export 0

 import 2 export 0

 import 3 export 1

 import 4 export 0

 import 5 export 0

 import 6 export 0

 import 7 export 0

#

traffic classifier DCBX operator or

 if-match acl mac name DCBX

#

traffic behavior DCBX

 remark dot1p 3

#

qos policy DCBX

 classifier DCBX behavior DCBX mode dcbx

#

interface Ten-GigabitEthernet1/0/1

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 1 10

 priority-flow-control enable

 priority-flow-control no-drop dot1p 3

#

interface Ten-GigabitEthernet1/0/2

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 1 10

 priority-flow-control enable

 priority-flow-control no-drop dot1p 3

#

interface Ten-GigabitEthernet1/0/3

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 1 10

 priority-flow-control auto

 priority-flow-control no-drop dot1p 3

 lldp tlv-enable dot1-tlv dcbx

 qos wrr byte-count

 qos wrr af1 group 1 byte-count 1

 qos wrr af2 group sp

 qos wrr af3 group sp

 qos wrr af4 group sp

 qos wrr ef group sp

 qos wrr cs6 group sp

 qos wrr cs7 group sp

 qos apply policy DCBX outbound

#

interface Ten-GigabitEthernet1/0/4

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 1 10

 priority-flow-control auto

 priority-flow-control no-drop dot1p 3

 lldp tlv-enable dot1-tlv dcbx

 qos wrr byte-count

 qos wrr af1 group 1 byte-count 1

 qos wrr af2 group sp

 qos wrr af3 group sp

 qos wrr af4 group sp

 qos wrr ef group sp

 qos wrr cs6 group sp

 qos wrr cs7 group sp

 qos apply policy DCBX outbound

#

interface Vfc1

 fc mode e

 port trunk vsan 1

 bind interface Ten-GigabitEthernet1/0/1

#

interface Vfc2

 fc mode e

 port trunk vsan 1

 bind interface Ten-GigabitEthernet1/0/2

#

interface Vfc3

 port trunk vsan 1

 bind interface Ten-GigabitEthernet1/0/3

#

interface Vfc4

 port trunk vsan 1

 bind interface Ten-GigabitEthernet1/0/4

#

acl mac name DCBX

 rule 0 permit type 8906 ffff

 rule 5 permit type 8914 ffff

#

·     Switch B:

#

 system-working-mode advance

#

 fcoe-mode fcf

#

vsan 1

 domain-id 2 preferred

#

vlan 10

 fcoe enable vsan 1

#

interface Ten-GigabitEthernet1/0/1

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 1 10

 priority-flow-control enable

 priority-flow-control no-drop dot1p 3

#

interface Ten-GigabitEthernet1/0/2

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 1 10

 priority-flow-control enable

 priority-flow-control no-drop dot1p 3

#

interface Vfc1

 fc mode e

 port trunk vsan 1

 bind interface Ten-GigabitEthernet1/0/1

#

interface Vfc2

 fc mode e

 port trunk vsan 1

 bind interface Ten-GigabitEthernet1/0/2

#

·     Swtich C:

#

 lldp global enable

#

 system-working-mode advance

#

 fcoe-mode fcf

#

vsan 1

 domain-id 3 preferred

#

vlan 10

 fcoe enable vsan 1

#

traffic classifier DCBX operator or

 if-match acl mac name DCBX

#

traffic behavior DCBX

 remark dot1p 3

#

qos policy DCBX

 classifier DCBX behavior DCBX mode dcbx

#

interface Ten-GigabitEthernet1/0/1

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 1 10

 priority-flow-control enable

 priority-flow-control no-drop dot1p 3

#

interface Ten-GigabitEthernet1/0/2

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 1 10

 priority-flow-control enable

 priority-flow-control no-drop dot1p 3

#

interface Ten-GigabitEthernet1/0/3

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 1 10

 priority-flow-control auto

 priority-flow-control no-drop dot1p 3

 lldp tlv-enable dot1-tlv dcbx

 qos apply policy DCBX outbound

#

interface Ten-GigabitEthernet1/0/4

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 1 10

 priority-flow-control auto

 priority-flow-control no-drop dot1p 3

 lldp tlv-enable dot1-tlv dcbx

 qos apply policy DCBX outbound

#

interface Ten-GigabitEthernet1/0/5

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 1 10

 priority-flow-control auto

 priority-flow-control no-drop dot1p 3

 lldp tlv-enable dot1-tlv dcbx

 qos apply policy DCBX outbound

#

interface Vfc1

 fc mode e

 port trunk vsan 1

 bind interface Ten-GigabitEthernet1/0/1

#

interface Vfc2

 fc mode e

 port trunk vsan 1

 bind interface Ten-GigabitEthernet1/0/2

#

interface Vfc3

 port trunk vsan 1

 bind interface Ten-GigabitEthernet1/0/3

#

interface Vfc4

 port trunk vsan 1

 bind interface Ten-GigabitEthernet1/0/4

#

interface Vfc5

 port trunk vsan 1

 bind interface Ten-GigabitEthernet1/0/5

#

acl mac name DCBX

 rule 0 permit type 8906 ffff

 rule 5 permit type 8914 ffff

#

7  FIP Snooping配置舉例

7.1  組網需求

圖4所示,Switch A是Fabric網絡邊緣設備,服務器Server A和Server B通過Switch B接入Fabric網絡。

現要求在Switch A和Switch B上配置FCoE功能,實現:

·     SAN網絡中的存儲數據流量能夠在以太網鏈路上無損傳輸;

·     隻有成功注冊的Server才能訪問Fabric內的存儲資源;

·     Server A和Server B不能互相訪問,提高網絡安全性。

圖4 配置FIP Snooping組網圖

 

7.2  配置思路

·     為了實現SAN網絡中的存儲數據流量能夠在無損以太網鏈路上傳輸,H3C建議用戶在交換機和服務器連接的以太網接口上配置DCBX、自動協商模式的PFC、ETS功能;在交換機和磁盤設備連接的以太網接口上配置DCBX、自動協商模式的PFC功能;在交換機與交換機連接的以太網接口上強製開啟PFC功能。

·     為了能夠實現Server能夠訪問Fabric內的存儲資源,需要配置允許默認Zone內的成員互相訪問。

·     為了能夠實現隻有成功注冊的Server才能訪問Fabric內的存儲資源,且Server A和Server B不能互相訪問,需要在Switch B上配置FIP Snooping功能。

7.3  使用版本

本舉例是在S6890-CMW710-R2712版本上進行配置和驗證的。

7.4  配置注意事項

缺省情況下,S6890係列交換機的接口處於ADM(Administratively Down)狀態,請根據實際需要在對應接口視圖下使用undo shutdown命令開啟接口。

7.5  配置步驟

7.5.1  Switch A的配置

(1)     開啟高級模式

# 配置設備工作模式為高級模式(如果已經配置設備為高級模式此步驟可略)。

<SwitchA> system-view

[SwitchA] system-working-mode advance

Do you want to change the system working mode? [Y/N]:y

The system working mode is changed, please save the configuration and reboot the

 system to make it effective.

# 保存配置。

[SwitchA] save

The current configuration will be written to the device. Are you sure? [Y/N]:y

Please input the file name(*.cfg)[flash:/startup.cfg]

(To leave the existing filename unchanged, press the enter key):

Validating file. Please wait...

Saved the current configuration to mainboard device successfully.

[SwitchA] quit

# 重啟設備。

<SwitchA> reboot

Start to check configuration with next startup configuration file, please wait.........DONE!

This command will reboot the device. Continue? [Y/N]:y

Now rebooting, please wait...

(2)     部署PFC

# 在以太網接口Ten-GigabitEthernet1/0/1上配置強製開啟PFC功能,且設置對802.1p優先級3開啟PFC功能,並配置信任報文自帶的802.1p優先級。

<SwitchA> system-view

[SwitchA] interface ten-gigabitethernet 1/0/1

[SwitchA-Ten-GigabitEthernet1/0/1] priority-flow-control enable

[SwitchA-Ten-GigabitEthernet1/0/1] priority-flow-control no-drop dot1p 3

[SwitchA-Ten-GigabitEthernet1/0/1] qos trust dot1p

[SwitchA-Ten-GigabitEthernet1/0/1] quit

(3)     配置FCoE功能

# 配置交換機模式為FCF模式。

[SwitchA] fcoe-mode fcf

# 配置FC-MAP值為0x0efc01。

[SwitchA] fcoe fcmap 0efc01

Changing the FC-MAP will flap all VFC interfaces. Continue? [Y/N]:y

# 開啟Fabric配置功能(缺省已開啟,此步驟可選)。

[SwitchA] vsan 1

[SwitchA-vsan1] domain configure enable

# 配置交換機的優先級為10,使Switch A參與動態建立Fabric網絡。

[SwitchA-vsan1] priority 10

[SwitchA-vsan1] quit

# 創建VFC1接口用於連接Transit交換機,配置VFC1接口工作在F模式,將VFC1接口綁定到以太網接口Ten-GigabitEthernet1/0/1上,並將VFC1接口以Trunk方式加入VSAN 1。

[SwitchA] interface vfc 1

[SwitchA-Vfc1] fc mode f

[SwitchA-Vfc1] bind interface ten-gigabitethernet 1/0/1

[SwitchA-Vfc1] port trunk vsan 1

[SwitchA-Vfc1] quit

# 創建VFC2接口用於連接Fabric網絡中其它FCF交換機,配置VFC1接口工作在E模式,將VFC1接口綁定到以太網接口Ten-GigabitEthernet1/0/2上,並將VFC1接口以Trunk方式加入VSAN 1。

[SwitchA] interface vfc 2

[SwitchA-Vfc2] fc mode e

[SwitchA-Vfc2] bind interface ten-gigabitethernet 1/0/2

[SwitchA-Vfc2] port trunk vsan 1

[SwitchA-Vfc2] quit

# 配置以太網接口Ten-GigabitEthernet1/0/1允許VLAN 10的報文通過。

[SwitchA] interface ten-gigabitethernet 1/0/1

[SwitchA-Ten-GigabitEthernet1/0/1] port link-type trunk

[SwitchA-Ten-GigabitEthernet1/0/1] port trunk permit vlan 10

[SwitchA-Ten-GigabitEthernet1/0/1] quit

# 開啟VLAN 10FCoE功能並將其與VSAN 1進行映射。

[SwitchA] vlan 10

[SwitchA-vlan10] fcoe enable vsan 1

[SwitchA-vlan10] quit

# 配置允許默認Zone內的成員互相訪問。

[SwitchA] vsan 1

[SwitchA-vsan1] zone default-zone permit

[SwitchA-vsan1] quit

7.5.2  Switch B的配置

(1)     開啟高級模式

# 配置設備工作模式為高級模式(如果已經配置設備為高級模式此步驟可略)。

<SwitchB> system-view

[SwitchB] system-working-mode advance

Do you want to change the system working mode? [Y/N]:y

The system working mode is changed, please save the configuration and reboot the

 system to make it effective.

# 保存配置。

[SwitchB] save

The current configuration will be written to the device. Are you sure? [Y/N]:y

Please input the file name(*.cfg)[flash:/startup.cfg]

(To leave the existing filename unchanged, press the enter key):

Validating file. Please wait...

Saved the current configuration to mainboard device successfully.

[SwitchB] quit

# 重啟設備。

<SwitchB> reboot

Start to check configuration with next startup configuration file, please wait.........DONE!

This command will reboot the device. Continue? [Y/N]:y

Now rebooting, please wait...

(2)     部署DCBX

# 全局開啟LLDP功能。

<SwitchB> system-view

[SwitchB] lldp global enable

# 在以太網接口Ten-GigabitEthernet1/0/2和Ten-GigabitEthernet1/0/3上開啟LLDP功能,並允許發布DCBX TLV。

[SwitchB] interface range ten-gigabitethernet 1/0/2 to ten-gigabitethernet 1/0/3

[SwitchB-if-range] lldp enable

[SwitchB-if-range] lldp tlv-enable dot1-tlv dcbx

[SwitchB-if-range] quit

# 創建名為DCBX的二層ACL,並為其創建規則來匹配FCoE報文(協議號為0x8906)和FIP報文(協議號為0x8914)。

[SwitchB] acl mac name DCBX

[SwitchB-acl-ethernetframe-DCBX] rule 0 permit type 8906 ffff

[SwitchB-acl-ethernetframe-DCBX] rule 5 permit type 8914 ffff

[SwitchB-acl-ethernetframe-DCBX] quit

# 定義名為DCBX的類,其下各規則間的關係為邏輯或,並定義其匹配名為DCBX的ACL。

[SwitchB] traffic classifier DCBX operator or

[SwitchB-classifier-DCBX] if-match acl mac name DCBX

[SwitchB-classifier-DCBX] quit

# 定義名為DCBX的流行為,並配置標記報文的802.1p優先級為3。

[SwitchB] traffic behavior DCBX

[SwitchB-behavior-DCBX] remark dot1p 3

[SwitchB-behavior-DCBX] quit

# 定義名為DCBX的策略,為類DCBX指定采用的流行為是DCBX,並指定該策略為DCBX模式。

[SwitchB] qos policy DCBX

[SwitchB-qospolicy-DCBX] classifier DCBX behavior DCBX mode dcbx

[SwitchB-qospolicy-DCBX] quit

# 在以太網接口Ten-GigabitEthernet1/0/2和Ten-GigabitEthernet1/0/3的出方向上應用策略DCBX。

[SwitchB] interface range ten-gigabitethernet 1/0/2 to ten-gigabitethernet 1/0/3

[SwitchB-if-range] qos apply policy DCBX outbound

(3)     部署PFC

# 在以太網接口Ten-GigabitEthernet1/0/2和Ten-GigabitEthernet1/0/3上配置PFC功能的開啟模式為自動協商模式,且設置對802.1p優先級3開啟PFC功能,並配置信任報文自帶的802.1p優先級。

[SwitchB-if-range] priority-flow-control auto

[SwitchB-if-range] priority-flow-control no-drop dot1p 3

[SwitchB-if-range] qos trust dot1p

[SwitchB-if-range] quit

# 在以太網接口Ten-GigabitEthernet1/0/1上配置強製開啟PFC功能,且設置對802.1p優先級3開啟PFC功能,並配置信任報文自帶的802.1p優先級。

[SwitchB] interface ten-gigabitethernet 1/0/1

[SwitchB-Ten-GigabitEthernet1/0/1] priority-flow-control enable

[SwitchB-Ten-GigabitEthernet1/0/1] priority-flow-control no-drop dot1p 3

[SwitchB-Ten-GigabitEthernet1/0/1] qos trust dot1p

[SwitchB-Ten-GigabitEthernet1/0/1] quit

(4)     部署ETS

# 配置802.1p優先級到本地優先級的映射,將802.1p優先級3映射到本地優先級1,配置其它的802.1p優先級映射到本地優先級0。

[SwitchB] qos map-table dot1p-lp

[SwitchB-maptbl-dot1p-lp] import 3 export 1

[SwitchB-maptbl-dot1p-lp] import 0 1 2 4 5 6 7 export 0

[SwitchB-maptbl-dot1p-lp] quit

# 在以太網接口Ten-GigabitEthernet1/0/2和Ten-GigabitEthernet1/0/3上開啟並配置WRR隊列,使FCoE流量和普通LAN流量各占50%帶寬。

[SwitchB] interface range ten-gigabitethernet 1/0/2 to ten-gigabitethernet 1/0/3

[SwitchB-if-range] qos wrr byte-count

[SwitchB-if-range] qos wrr af1 group 1 byte-count 1

[SwitchB-if-range] qos wrr be group 1 byte-count 1

# 在以太網接口Ten-GigabitEthernet1/0/2和Ten-GigabitEthernet1/0/3上配置其它的隊列為SP調度方式。

[SwitchB-if-range] qos wrr af2 group sp

[SwitchB-if-range] qos wrr af3 group sp

[SwitchB-if-range] qos wrr af4 group sp

[SwitchB-if-range] qos wrr ef group sp

[SwitchB-if-range] qos wrr cs6 group sp

[SwitchB-if-range] qos wrr cs7 group sp

[SwitchB-if-range] quit

(5)     配置FCoE功能

# 配置交換機模式為Transit模式。

[SwitchB] fcoe-mode transit

# 開啟VLAN 10的FIP Snooping功能。

[SwitchB] vlan 10

[SwitchB-vlan10] fip-snooping enable

# 配置VLAN 10的FC-MAP值為0x0efc01。

[SwitchB-vlan10] fip-snooping fc-map 0efc01

Changing the FC-MAP will flap all interfaces. Continue? [Y/N]:y

[SwitchB-vlan10] quit

# 配置以太網接口Ten-GigabitEthernet1/0/1允許VLAN 10的報文通過,並將該接口配置為FCF模式。

[SwitchB] interface ten-gigabitethernet 1/0/1

[SwitchB-Ten-GigabitEthernet1/0/1] port link-type trunk

[SwitchB-Ten-GigabitEthernet1/0/1] port trunk permit vlan 10

[SwitchB-Ten-GigabitEthernet1/0/1] fip-snooping port-mode fcf

[SwitchB-Ten-GigabitEthernet1/0/1] quit

# 配置以太網接口Ten-GigabitEthernet1/0/2~Ten-GigabitEthernet1/0/3允許VLAN 10的報文通過,並將該接口配置為ENode模式。

[SwitchB] interface range ten-gigabitethernet 1/0/2 to ten-gigabitethernet 1/0/3

[SwitchB-if-range] port link-type trunk

[SwitchB-if-range] port trunk permit vlan 10

[SwitchB-if-range] fip-snooping port-mode enode

[SwitchB-if-range] quit

7.6  驗證配置

# 顯示Switch A上VSAN 1內的域信息。

[SwitchA] display fc domain vsan 1

Domain Information of VSAN 1:

 

    Running time information:

        State: Stable

        Switch WWN: 20:01:ac:2d:57:97:07:00

        Fabric name: 48:33:43:2d:46:43:1B:1B

        Priority: 25

        Domain ID: 11

    Configuration information:

        Domain configure: Enabled

        Domain auto-reconfigure: Disabled

        Fabric name: 48:33:43:2d:46:43:1B:1B

        Priority: 10

        Domain ID: 0 (preferred)

    Principal switch running time information:

        Priority: 25

 

    Path          Interface

    Upstream      Vfc2

從上述信息可以看出,Switch A的配置已經結束,主交換機為Switch A分配的域ID為11。

# 顯示Switch B交換機獲取到的ENode信息。

[SwitchB] display fip-snooping enode

VLAN 10:

Interface   ENode WWN                  ENode MAC

XGE1/0/2    10:00:00:11:22:00:0d:01    0000-1234-0e01

XGE1/0/3    11:00:00:11:22:00:0d:02    0000-1234-0f01

# 顯示Switch B交換機獲取到的FCF交換機信息。

[SwitchB] display fip-snooping fcf

VLAN 10:

Interface   FCF MAC          FCF WWN                 Fabric Name                ENode

XGE1/0/1    0000-1234-0d01   20:01:ac:2d:57:97:07:00 48:33:43:2d:46:43:1B:1B    2

# 顯示FIP Snooping的會話信息。

[SwitchB] display fip-snooping sessions

VLAN 10:

FCF MAC          ENode MAC         VN_Port MAC     VN_Port WWN

0000-1234-0d01   0000-1234-0e01    0efc-0001-0000  af:10:01:11:22:00:0e:01

0000-1234-0d01   0000-1234-0f01    0efc-0002-0001  af:11:01:11:22:00:0f:01

# 顯示已經下刷的FIP Snooping規則。

[SwitchB] display fip-snooping rules

Slot 1:

  VLAN 10:

    FCF rules information:

      Interface   Source MAC/Mask     Destination MAC/Mask   Context

      XGE1/0/1    0000-1234-0d01/48   0efc-0000-0000/24      ffffffff

    ENode rules information:

      Interface   Source MAC/Mask     Destination MAC/Mask   Context

      XGE1/0/2    0efc-0001-0000/48   0000-1234-0d01/48      ffffffff

      XGE1/0/3    0efc-0002-0000/48   0000-1234-0d01/48      ffffffff

7.7  配置文件

·     Switch A:

#

 system-working-mode advance

#

 fcoe-mode fcf

#

 fcoe fcmap 0efc01

#

vsan 1

 priority 10

 zone default-zone permit

#

vlan 10

 fcoe enable vsan 1

#

interface Ten-GigabitEthernet1/0/1

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 1 10

 priority-flow-control enable

 priority-flow-control no-drop dot1p 3

#

interface Vfc1

 port trunk vsan 1

 bind interface Ten-GigabitEthernet1/0/1

#

·     Switch B:

#

 lldp global enable

#

 system-working-mode advance

#

 fcoe-mode transit

#

vlan 10

 fip-snooping enable

 fip-snooping fc-map 0efc01

#

qos map-table dot1p-lp

 import 0 export 0

 import 2 export 0

 import 3 export 1

 import 4 export 0

 import 5 export 0

 import 6 export 0

 import 7 export 0

#

traffic classifier DCBX operator or

 if-match acl mac name DCBX

#

traffic behavior DCBX

 remark dot1p 3

#

qos policy DCBX

 classifier DCBX behavior DCBX mode dcbx

#

interface Ten-GigabitEthernet1/0/1

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 1 10

 priority-flow-control enable

 priority-flow-control no-drop dot1p 3

 fip-snooping port-mode fcf

#

interface Ten-GigabitEthernet1/0/2

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 1 10

 priority-flow-control auto

 priority-flow-control no-drop dot1p 3

 lldp tlv-enable dot1-tlv dcbx

 qos wrr byte-count

 qos wrr af1 group 1 byte-count 1

 qos wrr af2 group sp

 qos wrr af3 group sp

 qos wrr af4 group sp

 qos wrr ef group sp

 qos wrr cs6 group sp

 qos wrr cs7 group sp

 qos apply policy DCBX outbound

#

interface Ten-GigabitEthernet1/0/3

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 1 10

 priority-flow-control auto

 priority-flow-control no-drop dot1p 3

 lldp tlv-enable dot1-tlv dcbx

 qos wrr byte-count

 qos wrr af1 group 1 byte-count 1

 qos wrr af2 group sp

 qos wrr af3 group sp

 qos wrr af4 group sp

 qos wrr ef group sp

 qos wrr cs6 group sp

 qos wrr cs7 group sp

 qos apply policy DCBX outbound

#

acl mac name DCBX

 rule 0 permit type 8906 ffff

 rule 5 permit type 8914 ffff

#

相關資料

·     H3C S6890係列交換機 FCoE配置指導(R27xx)

·     H3C S6890係列交換機 FCoE命令參考(R27xx)

不同款型規格的資料略有差異, 詳細信息請向具體銷售和400谘詢。H3C保留在沒有任何通知或提示的情況下對資料內容進行修改的權利!

BOB登陆
官網
聯係我們