万兆业务接入 - 2

设备编码：SHDXYQB4-108-C-07_C-07-ASW-RGS6250-M1-01U40_37
带外地址：10.30.0.44

hostname SHDXYQB4-108-C-07_C-07-ASW-RGS6250-M1-01U40_37

no vrf global-vrf
!
vrf definition NET-manage
description For_NetworkManage
rd 1:1
address-family ipv4
exit-address-family
address-family ipv6
exit-address-family
exit

interface m0
description For_management
vrf forwarding NET-manage
ip address 10.30.0.44 255.255.254.0

创建vlan
vlan range 200 300-302
199

配置静态路由
ip route vrf NET-manage 0.0.0.0 0.0.0.0 10.30.1.254

开启lldp
lldp enable
lldp management-address-tlv 10.30.0.44

开启ntp
ntp server vrf NET-manage 10.30.1.254 source Mgmt 0

配置时区
clock timezone beijing +8 0

开启svi应用的acl
svi acl enable

关闭telnet
no enable services telnet-server

关闭web
no enable services web-server

SNMP 配置

snmp-server system-shutdown
snmp-server host 10.30.1.240 traps version 2c Ragga0ck3rd0M
snmp-server community 7 06343f04281442240e415809713f view GNCVIEW ro 65

snmp-server trap-source mgmt 0
snmp-server user yundiao SNMPGROUP v3 auth sha yundiao*&COC2016 priv aes128 yundiao*&COC2016
snmp-server group SNMPGROUP v3 priv read default write default access 2000
snmp-server host 10.10.0.136 vrf NET-manage traps version 2c priv yundiao
snmp-server host 10.10.0.137 vrf NET-manage traps version 2c priv yundiao
snmp-server host 10.10.0.136 traps version 3 priv yundiao
snmp-server host 10.10.0.137 traps version 3 priv yundiao
snmp-server enable traps
snmp-server community yundiao*&COC2016 ro 2000

账号密码配置l
!
username sdnadmin password Pr@ject2018
username sdnadmin privilege 15
username openstackadmin password Pr@ject2018
username openstackadmin privilege 15
username COC_operator password Pr@ject2018
username COC_operator privilege 15
username COC_monitor password Pr@ject94
username COC_monitor privilege 1
username yundiao_read password yundiao*&COC2016
username yundiao_read privilege 1
!
vty
!
line vty 0 9
exec-timeout 10 0
session-timeout 10
transport input ssh
access-class 2001 in
logging synchronous
login local
width 256

配置 M - lag
vap domain 1
no fast-convergence
recover up-delay 120 none-vap 60
priority 10
data-sync local 1.1.1.4 neighbor 1.1.1.3
peer-keepalive local 1.1.1.2 neighbor 1.1.1.1
dual-active auto recovery
!
interface HundredGigabitEthernet 0/55
description PT:SHDXYQB4-108-C-07-ASW-RGS6250-01U40:10.30.0.43.100GE0/55.M-LAG_PeerLink
carrier-delay up 2 down 0
port-group 255 mode active
!
interface HundredGigabitEthernet 0/56
description PT:SHDXYQB4-108-C-07-ASW-RGS6250-01U40:10.30.0.43.100GE0/56.M-LAG_PeerLink
carrier-delay up 2 down 0
port-group 255 mode active
!

interface AggregatePort 255
description PT:SHDXYQB4-108-C-07-ASW-RGS6250-01U40:10.30.0.43.BAGG255
no mac-address-learning
switchport mode trunk
peer-link
!
interface TFGigabitEthernet 0/47
description pT:SHDXYQB4-108-C-07-ASW-RGS6250-01U40:10.30.0.43.10GE0/47_M-LAG KeepA1ive
no switchport
port-group 254 mode active
interface TFGigabitEthernet 0/48
description pT:SHDXYQB4-108-C-07-ASW-RGS6250-01U40:10.30.0.43.10GE0/47_M-LAG KeepA1ive
no switchport
port-group 254 mode active
!
interface AggregatePort 254
description pT:SHDXYQB4-108-C-07-ASW-RGS6250-01U40:10.30.0.43.BAGG254
no switchport
ip add 1.1.1.2 255.255.255.252
vap error-down except
!
vlan 4094
name vap
interface vlan 4094
description For_VAP
ip add 1.1.1.4 255.255.255.252

配置上联接口
!
interface HundredGigabitEthernet 0/49
escription uT:SHDXYQB4-108-C-06-CSW-RGS6250-01U40.10.30.0.41.100GE0/49
carrier-delay up 2 down 0
port-group 255 mode active
!
interface HundredGigabitEthernet 0/50
escription uT:SHDXYQB4-108-C-06-CSW-RGS6250-01U40.10.30.0.41.100GE0/50
carrier-delay up 2 down 0
port-group 255 mode active
!

interface AggregatePort 1
description uT:SHDXYQB4-108-C-06-CSW-RGS6250-01U40.10.30.0.41/10.30.0.42.Bagg11
switchport mode trunk
switchport mode trunk
switchport trunk allowed vlan only 199 200 300 301 302
vap 1
!

创建聚合组
inter agg11
inter agg12

inter agg16
inter agg17
inter agg18

inter agg33
inter agg34

inter agg38
inter agg39
inter agg40

将端口加入聚合组

int Te0/1
port-group 11 mode active
int Te0/2
port-group 12 mode active

int Te0/6
port-group 16 mode active
int Te0/7
port-group 17 mode active
int Te0/8
port-group 18 mode active

int Te0/23
port-group 33 mode active
int Te0/24
port-group 34 mode active

int Te0/28
port-group 38 mode active
int Te0/29
port-group 39 mode active
int Te0/30
port-group 40 mode active

 

端口基础配置
int Te0/1
description dT:Jisuan:SHDXYQB4-108-C-07-SEV-ZXR5300-02U06.10GSlot.1/1
storm-control broadcast level 10
lacp short-timeout
panning-tree bpduguard enable
spanning-tree portfa
int Te0/2
description dT:Jisuan:SHDXYQB4-108-C-07-SEV-ZXR5300-02U03.10GSlot.1/1
storm-control broadcast level 10
lacp short-timeout
panning-tree bpduguard enable
spanning-tree portfa
int Te0/3
description dT:Jisuan:SHDXYQB4-108-C-06-SEV-ZXR5300-02U09.10GSlot.1/1
storm-control broadcast level 10
lacp short-timeout
panning-tree bpduguard enable
spanning-tree portfa

switchport mode access
switchport access vlan 301
!

int Te0/4
description dT:Jisuan:SHDXYQB4-108-C-06-SEV-ZXR5300-02U06.10GSlot.1/1
storm-control broadcast level 10
lacp short-timeout
panning-tree bpduguard enable
spanning-tree portfa

switchport mode access
switchport access vlan 301
!

int Te0/5
description dT:Jisuan:SHDXYQB4-108-C-06-SEV-ZXR5300-02U03.10GSlot.1/1
storm-control broadcast level 10
lacp short-timeout
panning-tree bpduguard enable
spanning-tree portfa

switchport mode access
switchport access vlan 301
!

int Te0/6
description dT:CUnchu:SHDXYQB4-108-C-07-SEV-ZXR5300-02U15.10GSlot.1/1
storm-control broadcast level 10
lacp short-timeout
panning-tree bpduguard enable
spanning-tree portfa
int Te0/7
description dT:Cunchu:SHDXYQB4-108-C-07-SEV-ZXR5300-02U12.10GSlot.1/1
storm-control broadcast level 10
lacp short-timeout
panning-tree bpduguard enable
spanning-tree portfa
int Te0/8
description dT:CUnchu:SHDXYQB4-108-C-07-SEV-ZXR5300-02U09.10GSlot.1/1
storm-control broadcast level 10
lacp short-timeout
panning-tree bpduguard enable
spanning-tree portfa

int Te0/23
description dT:Jisuan:SHDXYQB4-108-C-07-SEV-ZXR5300-02U06.10GSlot.2/1
storm-control broadcast level 10
lacp short-timeout
panning-tree bpduguard enable
spanning-tree portfa
int Te0/24
description dT:Jisuan:SHDXYQB4-108-C-07-SEV-ZXR5300-02U03.10GSlot.2/1
storm-control broadcast level 10
lacp short-timeout
panning-tree bpduguard enable
spanning-tree portfa
int Te0/25
description dT:Jisuan:SHDXYQB4-108-C-06-SEV-ZXR5300-02U15.10GSlot.2/1
storm-control broadcast level 10
lacp short-timeout
panning-tree bpduguard enable
spanning-tree portfa

switchport mode access
switchport access vlan 300
!

int Te0/26
description dT:Jisuan:SHDXYQB4-108-C-06-SEV-ZXR5300-02U12.10GSlot.2/1
storm-control broadcast level 10
lacp short-timeout
panning-tree bpduguard enable
spanning-tree portfa

switchport mode access
switchport access vlan 300
!

int Te0/27
description dT:Jisuan:SHDXYQB4-108-C-06-SEV-ZXR5300-02U03.10GSlot.2/1
storm-control broadcast level 10
lacp short-timeout
panning-tree bpduguard enable
spanning-tree portfa

switchport mode access
switchport access vlan 300
!

int Te0/28
description dT:Cunchu:SHDXYQB4-108-C-07-SEV-ZXR5300-02U15.10GSlot.2/1
storm-control broadcast level 10
lacp short-timeout
panning-tree bpduguard enable
spanning-tree portfa
int Te0/29
description dT:Cunchu:SHDXYQB4-108-C-07-SEV-ZXR5300-02U12.10GSlot.2/1
storm-control broadcast level 10
lacp short-timeout
panning-tree bpduguard enable
spanning-tree portfa
int Te0/30
storm-control broadcast level 10
lacp short-timeout
panning-tree bpduguard enable
spanning-tree portfa description
dT:Cunchu:SHDXYQB4-108-C-07-SEV-ZXR5300-02U09.10GSlot.2/1

 

配置聚合组
inter agg11
description dT:Jisuan:SHDXYQB4-108-C-07-SEV-ZXR5300-02U06.bond1
storm-control broadcast level 10
panning-tree bpduguard enable
spanning-tree portfa
vap 11
switchport mode trunk
switchport trunk allowed vlan only 301

inter agg12
description dT:Jisuan:SHDXYQB4-108-C-07-SEV-ZXR5300-02U03.bond1
storm-control broadcast level 10
panning-tree bpduguard enable
spanning-tree portfa
vap 12
switchport mode trunk
switchport trunk allowed vlan only 301

inter agg16
description dT:Cunchu:SHDXYQB4-108-C-07-SEV-ZXR5300-02U15.bond1
storm-control broadcast level 10
panning-tree bpduguard enable
spanning-tree portfa
vap 16
switchport mode trunk
switchport trunk allowed vlan only 302

inter agg17
description dT:Cunchu:SHDXYQB4-108-C-07-SEV-ZXR5300-02U12.bond1
storm-control broadcast level 10
panning-tree bpduguard enable
spanning-tree portfa
vap 17
switchport mode trunk
switchport trunk allowed vlan only 302

inter agg18
description dT:Cunchu:SHDXYQB4-108-C-07-SEV-ZXR5300-02U09.bond1
storm-control broadcast level 10
panning-tree bpduguard enable
spanning-tree portfa
vap 18
switchport mode trunk
switchport trunk allowed vlan only 302

 

inter agg33
description dT:Jisuan:SHDXYQB4-108-C-07-SEV-ZXR5300-02U06.bond2
storm-control broadcast level 10
panning-tree bpduguard enable
spanning-tree portfa
vap 33
switchport mode trunk
switchport trunk allowed vlan only 300

inter agg34
description dT:Jisuan:SHDXYQB4-108-C-07-SEV-ZXR5300-02U03.bond2
storm-control broadcast level 10
panning-tree bpduguard enable
spanning-tree portfa
vap 34
switchport mode trunk
switchport trunk allowed vlan only 300

inter agg38
description dT:Cunchu:SHDXYQB4-108-C-07-SEV-ZXR5300-02U15.bond2
storm-control broadcast level 10
panning-tree bpduguard enable
spanning-tree portfa
vap 38
switchport mode trunk
switchport trunk allowed vlan only 300

inter agg39
description dT:Cunchu:SHDXYQB4-108-C-07-SEV-ZXR5300-02U12.bond2
storm-control broadcast level 10
panning-tree bpduguard enable
spanning-tree portfa
vap 39
switchport mode trunk
switchport trunk allowed vlan only 300

inter agg40
description dT:Cunchu:SHDXYQB4-108-C-07-SEV-ZXR5300-02U09.bond2
storm-control broadcast level 10
panning-tree bpduguard enable
spanning-tree portfa
vap 40
switchport mode trunk
switchport trunk allowed vlan only 300

 

!
interface HundredGigabitEthernet 0/51
description NO-USE
shutdown
!
interface HundredGigabitEthernet 0/52
description NO-USE
shutdown
!
interface HundredGigabitEthernet 0/53
description NO-USE
shutdown
!
interface HundredGigabitEthernet 0/54
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/31
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/32
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/33
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/34
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/35
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/36
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/37
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/38
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/39
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/40
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/41
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/42
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/43
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/44
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/45
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/46
description NO-USE
shutdown
!

interface TenGigabitEthernet 0/9
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/10
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/11
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/12
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/13
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/14
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/15
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/16
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/17
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/18
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/19
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/20
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/21
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/22
description NO-USE
shutdown
!