H3C 10506X
1.1 VLAN建置
[H3C]sysname MIS-D3F-MDF-S10506X-01&02
[MIS-D3F-MDF-S10506X-01&02]vlan 2
………..Create VLAN 2
[MIS-D3F-MDF-S10506X-01&02-vlan2]description ServerFarm-A
………..Description ServerFarm-A
[MIS-D3F-MDF-S10506X-01&02-vlan2]vlan 3
………..Create VLAN 3
[MIS-D3F-MDF-S10506X-01&02-vlan3] description ServerFarm-B
……….. Description ServerFarm-B
以此操作类推增加VLAN 2 to 3，6 ，8 to 11，32，34，36，38，48，50，52，54，64，66，68，70，96 to 119，254，4000。
1.2 IRF建置
H3C S10506X-01 配置：
[H3C]sysname MIS-D3F-MDF-S10506X-01
[MIS-D3F-MDF-S10506X-01]irf member 1 priority 4
[MIS-D3F-MDF-S10506X-01]interface range Ten-GigabitEthernet1/0/0/47 to Ten-GigabitEthernet1/0/0/48
[MIS-D3F-MDF-S10506X-01-if-range]shutdown
[MIS-D3F-MDF-S10506X-01-if-range]irf-port 1/1
[MIS-D3F-MDF-S10506X-01-irf-port1/1]port group interface Ten-GigabitEthernet1/0/0/47
[MIS-D3F-MDF-S10506X-01-irf-port1/1]port group interface Ten-GigabitEthernet1/0/0/48
[MIS-D3F-MDF-S10506X-01-irf-port1/1]quit
[MIS-D3F-MDF-S10506X-01]irf-port-configuration active
[MIS-D3F-MDF-S10506X-01]save
[MIS-D3F-MDF-S10506X-01]interface range Ten-GigabitEthernet1/0/0/47 to Ten-GigabitEthernet1/0/0/48
[MIS-D3F-MDF-S10506X-01-if-range]undo shutdow
[MIS-D3F-MDF-S10506X-01-if-range]quit
[MIS-D3F-MDF-S10506X-01]save
H3C S10506X-02 配置：
[H3C]sysname MIS-D3F-MDF-S10506X-02
[MIS-D3F-MDF-S10506X-02]irf member 2 priority 3
[MIS-D3F-MDF-S10506X-02]interface range Ten-GigabitEthernet2/0/0/47 to Ten-GigabitEthernet2/0/0/48
[MIS-D3F-MDF-S10506X-02-if-range]shutdown
[MIS-D3F-MDF-S10506X-02-if-range]irf-port 2/2
[MIS-D3F-MDF-S10506X-02-irf-port1/1]port group interface Ten-GigabitEthernet2/0/0/47
[MIS-D3F-MDF-S10506X-02-irf-port1/1]port group interface Ten-GigabitEthernet2/0/0/48
[MIS-D3F-MDF-S10506X-02-irf-port1/1]quit
[MIS-D3F-MDF-S10506X-02]irf-port-configuration active
[MIS-D3F-MDF-S10506X-02]save
[MIS-D3F-MDF-S10506X-02]interface range Ten-GigabitEthernet2/0/0/47 to Ten-GigabitEthernet2/0/0/48
[MIS-D3F-MDF-S10506X-02-if-range]undo shutdown
[MIS-D3F-MDF-S10506X-02-if-range]quit
[MIS-D3F-MDF-S10506X-02]save
<MIS-D3F-MDF-S10506X-01&02>dis irf configuration
<MIS-D3F-MDF-S10506X-01&02>dis irf link
1.3 BFD MAD配置
<MIS-D3F-MDF-S10506X-01&02>
[MIS-D3F-MDF-S10506X-01&02]irf domain 1
[MIS-D3F-MDF-S10506X-01&02]interface route-aggregation 1024
[MIS-D3F-MDF-S10506X-01&02-Route-Aggregation1024]quit
[MIS-D3F-MDF-S10506X-01&02]interface range GigabitEthernet1/1/0/48 GigabitEthernet2/1/0/48
[MIS-D3F-MDF-S10506X-01&02-if-range]port link-mode route
[MIS-D3F-MDF-S10506X-01&02-if-range]port link-aggregation group 1024
[MIS-D3F-MDF-S10506X-01&02-if-range]quit
[MIS-D3F-MDF-S10506X-01&02]interface route-aggregation 1024
[MIS-D3F-MDF-S10506X-01&02-Route-Aggregation1024]mad bfd enable
[MIS-D3F-MDF-S10506X-01&02-Route-Aggregation1024]mad ip address 100.100.100.2 30 me
mber 1
[MIS-D3F-MDF-S10506X-01&02-Route-Aggregation1024]mad ip address 100.100.100.2 30 me
mber 2
[MIS-D3F-MDF-S10506X-01&02-Route-Aggregation1024]quit
[MIS-D3F-MDF-S10506X-01&02]save
<MIS-D3F-MDF-S10506X-01&02>display mad verbose
1.4 Link Aggregation Trunk Port建置
[MIS-D3F-MDF-S10506X-01&02]int Bridge-Aggregation 1
[MIS-D3F-MDF-S10506X-01&02]int GigabitEthernet1/5/0/1
[MIS-D3F-MDF-S10506X-01&02-GigabitEthernet1/5/0/1]port link-aggregation group 1
[MIS-D3F-MDF-S10506X-01&02-GigabitEthernet1/5/0/1]quit
[MIS-D3F-MDF-S10506X-01&02]
[MIS-D3F-MDF-S10506X-01&02]int GigabitEthernet2/5/0/1
[MIS-D3F-MDF-S10506X-01&02-GigabitEthernet2/5/0/1]port link-aggregation group 1
[MIS-D3F-MDF-S10506X-01&02-GigabitEthernet2/5/0/1]quit
[MIS-D3F-MDF-S10506X-01&02]
[MIS-D3F-MDF-S10506X-01&02]interface Bridge-Aggregation 1
[MIS-D3F-MDF-S10506X-02-Bridge-Aggregation1]port link-type trunk
[MIS-D3F-MDF-S10506X-02-Bridge-Aggregation1]port trunk permit vlan all
[MIS-D3F-MDF-S10506X-02-Bridge-Aggregation1]quit
[MIS-D3F-MDF-S10506X-01&02]save
以此操作类推增加BAGG2、BAGG3 、BAGG4、……、BAGG77、BAGG78。
1.5 VLAN Trunk 建置
[MIS-D3F-MDF-S10506X-01&02]interface GigabitEthernet1/1/0/1
[MIS-D3F-MDF-S10506X-01&02-GigabitEthernet1/1/0/1]port link-type trunk
[MIS-D3F-MDF-S10506X-01&02-GigabitEthernet1/1/0/1]port trunk permit vlan all
[MIS-D3F-MDF-S10506X-01&02-GigabitEthernet1/1/0/1]quit
[MIS-D3F-MDF-S10506X-01&02]interface GigabitEthernet1/1/0/2
[MIS-D3F-MDF-S10506X-01&02-GigabitEthernet1/1/0/2]port link-type trunk
[MIS-D3F-MDF-S10506X-01&02-GigabitEthernet1/1/0/2]port trunk permit vlan all
[MIS-D3F-MDF-S10506X-01&02-GigabitEthernet1/1/0/2]quit
[MIS-D3F-MDF-S10506X-01&02]int GigabitEthernet1/1/0/36
[MIS-D3F-MDF-S10506X-01&02-GigabitEthernet1/1/0/36]port access vlan 8
[MIS-D3F-MDF-S10506X-01&02-GigabitEthernet1/1/0/36]quit
以此操作类推增加1、2、5、6板卡的VLAN Trunk设置，具体Port – VLAN对照，参考附表2。
1.6 Routing建置
[MIS-D3F-MDF-S10506X-01&02] ip route-static 0.0.0.0 0 10.20.6.251
……默认路由指向MIS Firewall
[MIS-D3F-MDF-S10506X-01&02] ip route-static 192.168.254.0 24 192.168.8.9
……路由将本网段192.168.254.0/24网段指向Netscreen-VPN:192.168.8.9
[MIS-D3F-MDF-S10506X-01&02] ip route-static 10.10.0.0 16 10.20.8.251
……路由将CIM网段10.10.0.0/16网段指向CIM-Firewall:10.20.8.251
[MIS-D3F-MDF-S10506X-01&02] ip route-static 172.24.100.0 24 192.168.8.8
[MIS-D3F-MDF-S10506X-01&02] ip route-static 172.30.0.0 16 192.168.8.8
[MIS-D3F-MDF-S10506X-01&02] ip route-static 192.168.2.0 24 10.20.2.240
[MIS-D3F-MDF-S10506X-01&02] ip route-static 192.168.3.0 24 10.20.2.240
1.7 MSTP建置
[MIS-D3F-MDF-S10506X-01&02]stp mode mstp
……………将STP模式设置为MSTP
[MIS-D3F-MDF-S10506X-01&02]stp global enable
……………全局状态下开启STP
[MIS-D3F-MDF-S10506X-01&02]stp priority 0
……………STP优先等级设置为0(最高)
＊改变Spanning Tree Priority值，让MIS-D3F-MDF-S10506X-01&02为Root， Default H3C S10506X Spanning not Enable，缺省情况下，生成树的工作模式为MSTP模式，缺省情况下，设备的优先级为32768。
浙公网安备 33010602011771号