H3C S6800&S6860&S6861產品CFD典型配置舉例

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

本文檔中的信息可能變動，恕不另行通知。

目  錄

1 簡介

2 配置前提

3 配置舉例

3.1 組網需求

3.2 配置思路

3.3 適用產品及版本

3.4 配置注意事項

3.5 配置步驟

3.5.1 開啟CFD功能

3.5.2 配置VLAN與接口

3.5.3 配置服務實例

3.5.4 配置MEP

3.5.5 配置MIP的創建規則

3.5.6 啟用MEP的連續性檢測功能

3.6 驗證配置

3.7 配置文件

4 相關資料

 

1  簡介

本文檔介紹通過在網絡中使用CFD功能，可以實現在二層網絡中檢測鏈路連通性，確認故障並確定故障發生的位置。

2  配置前提

本文檔中的配置均是在實驗室環境下進行的配置和驗證，配置前設備的所有參數均采用出廠時的缺省配置。如果您已經對設備進行了配置，為了保證配置效果，請確認現有配置和以下舉例中的配置不衝突。

本文檔假設您已了解CFD特性。

3  配置舉例

3.1  組網需求

某公司網絡如圖1所示，設備Device B、Device C位於中央機房，設備Device A、Device D、Device E分布在其它區域。VLAN 20內的用戶（研發部）分別通過Device A和Device D接入公司網絡，VLAN 30內的用戶（市場部）分別通過Device A和Device E接入公司網絡。

現要求在該網絡中配置CFD功能，實現當某條鏈路發生故障，CFD功能能夠確認故障並對故障進行定位。

圖1 組網示意圖

 

3.2  配置思路

·            為了較好的規劃CFD功能所作用的區域，可以根據設備所在的位置來劃分MD（便於故障定位）。根據各MD的範圍來確定MD的級別，確保低級別MD嵌套於高級別MD中。本案例將公司整個網絡劃分為MD_A（level 5），將中央機房的網絡劃分為MD_B（level 3）。

·            為了較好的規劃CFD功能所作用的區域，可以根據業務流量所屬的VLAN來劃分MA。本案例中將MD_A的VLAN 20劃分為MA_A_1，MD_A的VLAN 30劃分為MA_A_2；將MD_B的VLAN 20劃分為MA_B_1，MD_B的VLAN 30劃分為MA_B_2。

·            為了實現CFD能夠檢測網絡的鏈路連通性的功能，需要在位於MA邊界的接口上配置MEP，並根據該接口對CFD協議報文的發送情況確定MEP的類型。

¡  例如，MA_B_1所對應的VLAN為VLAN 20，位於MA_B_1允許VLAN 20通過的接口有Device B的接口XGE1/0/1和XGE1/0/2、Device C的接口XGE1/0/1和XGE1/0/2、Device D的接口XGE1/0/1。可以看出MA_B_1的邊界的接口分別為Device B的接口XGE1/0/1和Device D的接口XGE1/0/1，因此我們需要在這兩個接口上配置MEP；

¡  由於Device B的接口XGE1/0/1發送的CFD協議報文需要從本設備其他接口轉發出去，因此該接口需配置為內向MEP；而Device D的XGE1/0/1發送的CFD協議報文直接從該接口發送出去，該接口需配置為外向MEP。

·            由於Device C為MD_B的中間設備，為了準確定位Device B和Device D之間鏈路故障，需要在Device C上配置MIP，並選擇合適的MIP生成規則。本例中，將Device C作為MIP，創建規則為default規則。

·            為了檢測各MA內的MEP之間的連通狀態，需要開啟連續性檢測功能。

·            當CFD的連續性檢測功能檢測到鏈路故障時，可以使用環回功能進行故障確認，並在獲取到整個組網的狀態後，使用鏈路跟蹤功能進行路徑查找或故障定位。

綜合以上配置思路，配置CFD功能示意圖如圖2所示。

圖2 CFD功能示意圖

 

3.3  適用產品及版本

表1 適用產品及版本

產品	軟件版本
S6800係列 S6860係列 S6861係列	Release 2702

 

3.4  配置注意事項

·            在創建MEP時，該MEP的ID必須已包含在對應服務實例的MEP列表中，否則不能創建成功。

·            一個MD內可以有多個MA，但一個MA隻能與一個檢測VLAN進行關聯。

·            同一MA中所有MEP發送的CCM報文中時間間隔域的值必須相同。本案例中不對MEP發送的CCM報文中時間間隔域進行修改，即均采用缺省配置。

3.5  配置步驟

3.5.1  開啟CFD功能

# 在Device A上開啟CFD功能。

<DeviceA> system-view

[DeviceA] cfd enable

Device B～Device E的配置與Device A相同，配置過程略。

3.5.2  配置VLAN與接口

1. Device A的配置

[DeviceA] vlan 20

[DeviceA-vlan20] quit

[DeviceA] vlan 30

[DeviceA-vlan30] quit

[DeviceA] interface ten-gigabitethernet 1/0/1

[DeviceA-Ten-GigabitEthernet1/0/1] port access vlan 20

[DeviceA-Ten-GigabitEthernet1/0/1] quit

[DeviceA] interface ten-gigabitethernet 1/0/2

[DeviceA-Ten-GigabitEthernet1/0/2] port access vlan 30

[DeviceA-Ten-GigabitEthernet1/0/2] quit

[DeviceA] interface ten-gigabitethernet 1/0/3

[DeviceA-Ten-GigabitEthernet1/0/3] port link-type trunk

[DeviceA-Ten-GigabitEthernet1/0/3] port trunk permit vlan 20 30

[DeviceA-Ten-GigabitEthernet1/0/3] quit

2. Device B的配置

[DeviceB] vlan 20

[DeviceB-vlan20] quit

[DeviceB] vlan 30

[DeviceB-vlan30] quit

[DeviceB] interface ten-gigabitethernet 1/0/1

[DeviceB-Ten-GigabitEthernet1/0/1] port link-type trunk

[DeviceB-Ten-GigabitEthernet1/0/1] port trunk permit vlan 20 30

[DeviceB-Ten-GigabitEthernet1/0/1] quit

[DeviceB] interface ten-gigabitethernet 1/0/2

[DeviceB-Ten-GigabitEthernet1/0/2] port link-type trunk

[DeviceB-Ten-GigabitEthernet1/0/2] port trunk permit vlan 20

[DeviceB-Ten-GigabitEthernet1/0/2] quit

[DeviceB] interface ten-gigabitethernet 1/0/3

[DeviceB-Ten-GigabitEthernet1/0/3] port link-type trunk

[DeviceB-Ten-GigabitEthernet1/0/3] port trunk permit vlan 30

[DeviceB-Ten-GigabitEthernet1/0/3] quit

3. Device C的配置

[DeviceC] vlan 20

[DeviceC-vlan20] quit

[DeviceC] interface ten-gigabitethernet 1/0/1

[DeviceC-Ten-GigabitEthernet1/0/1] port link-type trunk

[DeviceC-Ten-GigabitEthernet1/0/1] port trunk permit vlan 20

[DeviceC-Ten-GigabitEthernet1/0/1] quit

[DeviceC] interface ten-gigabitethernet 1/0/2

[DeviceC-Ten-GigabitEthernet1/0/2] port link-type trunk

[DeviceC-Ten-GigabitEthernet1/0/2] port trunk permit vlan 20

[DeviceC-Ten-GigabitEthernet1/0/2] quit

4. Device D的配置

[DeviceD] vlan 20

[DeviceD-vlan20] quit

[DeviceD] interface ten-gigabitethernet 1/0/1

[DeviceD-Ten-GigabitEthernet1/0/1] port link-type trunk

[DeviceD-Ten-GigabitEthernet1/0/1] port trunk permit vlan 20

[DeviceD-Ten-GigabitEthernet1/0/1] quit

[DeviceD] interface ten-gigabitethernet 1/0/2

[DeviceD-Ten-GigabitEthernet1/0/2] port access vlan 20

[DeviceD-Ten-GigabitEthernet1/0/2] quit

5. Device E的配置

[DeviceE] vlan 30

[DeviceE-vlan30] quit

[DeviceE] interface ten-gigabitethernet 1/0/1

[DeviceE-Ten-GigabitEthernet1/0/1] port access vlan 30

[DeviceE-Ten-GigabitEthernet1/0/1] quit

[DeviceE] interface ten-gigabitethernet 1/0/2

[DeviceE-Ten-GigabitEthernet1/0/2] port link-type trunk

[DeviceE-Ten-GigabitEthernet1/0/2] port trunk permit vlan 30

[DeviceE-Ten-GigabitEthernet1/0/2] quit

3.5.3  配置服務實例

根據CFD功能示意圖中每台設備上的接點所屬的MD中的MA，共需要完成表1配置。

表1 關係對應表

設備	MD	MD級別	MA	VLAN	服務實例
Device A	MD_A	5	MA_A_1	20	1
			MA_A_2	30	2
Device B	MD_B	3	MA_B_1	20	3
			MA_B_2	30	4
Device C	MD_B	3	MA_B_1	20	3
Device D	MD_A	5	MA_A_1	20	1
	MD_B	3	MA_B_1	20	3
Device E	MD_A	5	MA_A_2	30	2
	MD_B	3	MA_B_2	30	4

 

1. Device A的配置

# 在Device A上創建級別為5的MD，MD名稱為MD_A。

[DeviceA] cfd md MD_A level 5

# 創建服務實例1，該服務實例的MA名稱為MA_A_1，且服務於VLAN 20。

[DeviceA] cfd service-instance 1 ma-id string MA_A_1 md MD_A vlan 20

# 創建服務實例2，該服務實例的MA名稱為MA_A_2，且服務於VLAN 30。

[DeviceA] cfd service-instance 2 ma-id string MA_A_2 md MD_A vlan 30

Device B～Device E的配置與Device A相似。

2. Device B的配置

[DeviceB] cfd md MD_B level 3

[DeviceB] cfd service-instance 3 ma-id string MA_B_1 md MD_B vlan 20

[DeviceB] cfd service-instance 4 ma-id string MA_B_2 md MD_B vlan 30

3. Device C的配置

[DeviceC] cfd md MD_B level 3

[DeviceC] cfd service-instance 3 ma-id string MA_B_1 md MD_B vlan 20

4. Device D的配置

[DeviceD] cfd md MD_A level 5

[DeviceD] cfd service-instance 1 ma-id string MA_A_1 md MD_A vlan 20

[DeviceD] cfd md MD_B level 3

[DeviceD] cfd service-instance 3 ma-id string MA_B_1 md MD_B vlan 20

5. Device E的配置

[DeviceE] cfd md MD_A level 5

[DeviceE] cfd service-instance 2 ma-id string MA_A_2 md MD_A vlan 30

[DeviceE] cfd md MD_B level 3

[DeviceE] cfd service-instance 4 ma-id string MA_B_2 md MD_B vlan 30

3.5.4  配置MEP

MEP ID分配如表2所示。

表2 MEP ID分配表

服務實例	設備	接口	MEP ID	MEP類型
1	DeviceA	Ten-GigabitEthernet1/0/1	1001	內向MEP
	DeviceD	Ten-GigabitEthernet1/0/2	1002	內向MEP
2	DeviceA	Ten-GigabitEthernet1/0/2	2001	內向MEP
	DeviceE	Ten-GigabitEthernet1/0/1	2002	內向MEP
3	DeviceB	Ten-GigabitEthernet1/0/1	3001	內向MEP
	DeviceD	Ten-GigabitEthernet1/0/1	3002	外向MEP
4	DeviceB	Ten-GigabitEthernet1/0/1	4001	內向MEP
	DeviceE	Ten-GigabitEthernet1/0/2	4002	外向MEP

 

1. Device A的配置

# 在Device A的服務實例1和2內分別配置MEP列表。

[DeviceA] cfd meplist 1001 1002 service-instance 1

[DeviceA] cfd meplist 2001 2002 service-instance 2

# 在接口Ten-GigabitEthernet1/0/1上創建服務實例1內的內向MEP 1001。

[DeviceA] interface ten-gigabitethernet 1/0/1

[DeviceA-Ten-GigabitEthernet1/0/1] cfd mep 1001 service-instance 1 inbound

[DeviceA-Ten-GigabitEthernet1/0/1] quit

# 在接口Ten-GigabitEthernet1/0/2上創建服務實例2內的內向MEP 2001。

[DeviceA] interface ten-gigabitethernet 1/0/2

[DeviceA-Ten-GigabitEthernet1/0/2] cfd mep 2001 service-instance 2 inbound

[DeviceA-Ten-GigabitEthernet1/0/2] quit

Device B、Device D和Device E的配置與Device A相似。

2. Device B的配置

[DeviceB] cfd meplist 3001 3002 service-instance 3

[DeviceB] cfd meplist 4001 4002 service-instance 4

[DeviceB] interface ten-gigabitethernet 1/0/1

[DeviceB-Ten-GigabitEthernet1/0/1] cfd mep 3001 service-instance 3 inbound

[DeviceB-Ten-GigabitEthernet1/0/1] cfd mep 4001 service-instance 4 inbound

[DeviceB-Ten-GigabitEthernet1/0/1] quit

3. Device D的配置

[DeviceD] cfd meplist 1001 1002 service-instance 1

[DeviceD] cfd meplist 3001 3002 service-instance 3

[DeviceD] interface ten-gigabitethernet 1/0/2

[DeviceD-Ten-GigabitEthernet1/0/2] cfd mep 1002 service-instance 1 inbound

[DeviceD-Ten-GigabitEthernet1/0/2] quit

[DeviceD] interface ten-gigabitethernet 1/0/1

[DeviceD-Ten-GigabitEthernet1/0/1] cfd mep 3002 service-instance 3 outbound

[DeviceD-Ten-GigabitEthernet1/0/1] quit

4. Device E的配置

[DeviceE] cfd meplist 2001 2002 service-instance 2

[DeviceE] cfd meplist 4001 4002 service-instance 4

[DeviceE] interface ten-gigabitethernet 1/0/1

[DeviceE-Ten-GigabitEthernet1/0/1] cfd mep 2002 service-instance 2 inbound

[DeviceE-Ten-GigabitEthernet1/0/1] quit

[DeviceE] interface ten-gigabitethernet 1/0/2

[DeviceE-Ten-GigabitEthernet1/0/2] cfd mep 4002 service-instance 4 outbound

[DeviceE-Ten-GigabitEthernet1/0/2] quit

3.5.5  配置MIP的創建規則

# 在Device C的服務實例3內配置MIP的創建規則為Default規則。

[DeviceC] cfd mip-rule default service-instance 3

3.5.6  啟用MEP的連續性檢測功能

1. Device A的配置

# 在接口Ten-GigabitEthernet1/0/1上開啟服務實例1內MEP 1001的CCM報文發送功能。

[DeviceA] interface ten-gigabitethernet 1/0/1

[DeviceA-Ten-GigabitEthernet1/0/1] cfd cc service-instance 1 mep 1001 enable

[DeviceA-Ten-GigabitEthernet1/0/1] quit

# 在接口Ten-GigabitEthernet1/0/2上開啟服務實例2內MEP 2001的CCM報文發送功能。

[DeviceA] interface ten-gigabitethernet 1/0/2

[DeviceA-Ten-GigabitEthernet1/0/2] cfd cc service-instance 2 mep 2001 enable

[DeviceA-Ten-GigabitEthernet1/0/2] quit

Device B、Device D和Device E的配置與Device A相似。

2. Device B的配置

[DeviceB] interface ten-gigabitethernet 1/0/1

[DeviceB-Ten-GigabitEthernet1/0/1] cfd cc service-instance 3 mep 3001 enable

[DeviceB-Ten-GigabitEthernet1/0/1] cfd cc service-instance 4 mep 4001 enable

[DeviceB-Ten-GigabitEthernet1/0/1] quit

3. Device D的配置

[DeviceD] interface ten-gigabitethernet 1/0/1

[DeviceD-Ten-GigabitEthernet1/0/1] cfd cc service-instance 3 mep 3002 enable

[DeviceD-Ten-GigabitEthernet1/0/1] quit

[DeviceD] interface ten-gigabitethernet 1/0/2

[DeviceD-Ten-GigabitEthernet1/0/2] cfd cc service-instance 1 mep 1002 enable

[DeviceD-Ten-GigabitEthernet1/0/2] quit

4. Device E的配置

[DeviceE] interface ten-gigabitethernet 1/0/1

[DeviceE-Ten-GigabitEthernet1/0/1] cfd cc service-instance 2 mep 2002 enable

[DeviceE-Ten-GigabitEthernet1/0/1] quit

[DeviceE] interface ten-gigabitethernet 1/0/2

[DeviceE-Ten-GigabitEthernet1/0/2] cfd cc service-instance 4 mep 4002 enable

[DeviceE-Ten-GigabitEthernet1/0/2] quit

3.6  驗證配置

 

(1)       網絡鏈路正常時

# 在Device A上查看服務實例1內MEP 1001的遠端MEP的信息。

[DeviceA] display cfd remote-mep service-instance 1 mep 1001

MEP ID   MAC address      State        Time                  MAC status

1002     0010-fc04-6514   OK           2018/07/26 12:54:52   UP

結果顯示遠端MEP運行狀態正常。

# 在Device A上啟用環回功能，檢查服務實例1內MEP 1001到MEP 1002的鏈路狀況。

[DeviceA] cfd loopback service-instance 1 mep 1001 target-mep 1002

Loopback to MEP 1002 with the sequence number start from 1001-43404:

Reply from 0010-fc04-6514: sequence number=1001-43404 Time=5ms

Reply from 0010-fc04-6514: sequence number=1001-43405 Time=5ms

Reply from 0010-fc04-6514: sequence number=1001-43406 Time=5ms

Reply from 0010-fc04-6514: sequence number=1001-43407 Time=5ms

Reply from 0010-fc04-6514: sequence number=1001-43408 Time=5ms

Sent: 5        Received: 5        Lost: 0

結果顯示服務實例1內的MEP 1001和MEP 1002間的鏈路無故障。

(2)       網絡鏈路故障時

# 在Device A上查看服務實例1內MEP 1001的遠端MEP的信息。

[DeviceA] display cfd remote-mep service-instance 1 mep 1001

MEP ID   MAC address      State        Time                  MAC status

1002     0010-fc04-6514   FAILED       2018/07/26 13:01:52   DOWN

結果顯示遠端MEP運行狀態不正常。

# 在Device A上啟用環回功能，檢查服務實例1內MEP 1001到MEP 1002的鏈路狀況。

[DeviceA] cfd loopback service-instance 1 mep 1001 target-mep 1002

Loopback to MEP 1002 with the sequence number start from 1001-43904:

Sent: 5        Received: 0        Lost: 5

結果顯示服務實例1內的MEP 1001和MEP 1002間的鏈路存在故障。

# 先從小區域內排查故障位置，在Device B上開啟鏈路跟蹤功能，查找服務實例3內的MEP 3001到MEP 3002的路徑。

[DeviceB] cfd linktrace service-instance 3 mep 3001 target-mep 3002

Linktrace to MEP 3002 with the sequence number 3001-43862:

MAC address               TTL     Last MAC         Relay action

0010-fc03-6513            63      0010-fc02-6512   MPDB

結果顯示服務實例3內的MEP 3001僅收到MIP反饋的LTR報文，而未收到MEP3002（DeviceD的XGE1/0/1）反饋的LTR，從而可以初步判斷Device C和Device D之間的鏈路發生故障。MD_B之外的網絡就不用再進行故障檢查，減少了故障定位的時間。

3.7  配置文件

·            Device A：

#

 cfd enable

 cfd md MD_A index 1 level 5

 cfd service-instance 1 ma-id string MA_A_1 ma-index 1 md MD_A vlan 20

 cfd meplist 1001 to 1002 service-instance 1

 cfd service-instance 2 ma-id string MA_A_2 ma-index 1 md MD_A vlan 30

 cfd meplist 2001 to 2002 service-instance 2

#

vlan 20

#

vlan 30

#

interface Ten-GigabitEthernet1/0/1

 port link-mode bridge

 port access vlan 20

 cfd mep 1001 service-instance 1 inbound

 cfd cc service-instance 1 mep 1001 enable

#

interface Ten-GigabitEthernet1/0/2

 port link-mode bridge

 port access vlan 30

 cfd mep 2001 service-instance 2 inbound

 cfd cc service-instance 2 mep 2001 enable

#

interface Ten-GigabitEthernet1/0/3

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 20 30

·            Device B：

#

 cfd enable

 cfd md MD_B index 1 level 3

 cfd service-instance 3 ma-id string MA_B_1 ma-index 1 md MD_B vlan 20

 cfd meplist 3001 to 3002 service-instance 3

 cfd service-instance 4 ma-id string MA_B_2 ma-index 2 md MD_B vlan 30

 cfd meplist 4001 to 4002 service-instance 4

#

vlan 20

#

vlan 30

#

interface Ten-GigabitEthernet1/0/1

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 20 30

 cfd mep 3001 service-instance 3 inbound

 cfd cc service-instance 3 mep 3001 enable

 cfd mep 4001 service-instance 4 inbound

 cfd cc service-instance 4 mep 4001 enable

#

interface Ten-GigabitEthernet1/0/2

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 20

#

interface Ten-GigabitEthernet1/0/3

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 30

·            Device C：

#

 cfd enable

 cfd md MD_B index 1 level 3

 cfd service-instance 3 ma-id string MA_B_1 ma-index 1 md MD_B vlan 20

 cfd mip-rule default service-instance 3

#

vlan 20

#

interface Ten-GigabitEthernet1/0/1

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 20

#

interface Ten-GigabitEthernet1/0/2

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 20

·            Device D：

#

 cfd enable

 cfd md MD_A index 1 level 5

 cfd md MD_B index 2 level 3

 cfd service-instance 1 ma-id string MA_A_1 ma-index 1 md MD_A vlan 20

 cfd meplist 1001 to 1002 service-instance 1

 cfd service-instance 3 ma-id string MA_B_1 ma-index 1 md MD_B vlan 20

 cfd meplist 3001 to 3002 service-instance 3

#

vlan 20

#

interface Ten-GigabitEthernet1/0/1

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 20

 cfd mep 3002 service-instance 3 outbound

 cfd cc service-instance 3 mep 3002 enable

#

interface Ten-GigabitEthernet1/0/2

 port link-mode bridge

 port access vlan 20

 cfd mep 1002 service-instance 1 inbound

 cfd cc service-instance 1 mep 1002 enable

·            Device E：

#

 cfd enable

 cfd md MD_A index 1 level 5

 cfd md MD_B index 2 level 3

 cfd service-instance 2 ma-id string MA_A_2 ma-index 1 md MD_A vlan 30

 cfd meplist 2001 to 2002 service-instance 2

 cfd service-instance 4 ma-id string MA_B_2 ma-index 2 md MD_B vlan 30

 cfd meplist 4001 to 4002 service-instance 4

#

vlan 30

#

interface Ten-GigabitEthernet1/0/1

 port link-mode bridge

 port access vlan 30

 cfd mep 2002 service-instance 2 inbound

 cfd cc service-instance 2 mep 2002 enable

#

interface Ten-GigabitEthernet1/0/2

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 30

 cfd mep 4002 service-instance 4 outbound

 cfd cc service-instance 4 mep 4002 enable

4  相關資料

·            H3C S6800[60][61](R27xx) & S6820(R630x)係列以太網交換機 可靠性配置指導

·            H3C S6800[60][61](R27xx) & S6820(R630x)係列以太網交換機 可靠性命令參考