Benutzer-Werkzeuge

Webseiten-Werkzeuge


omniswitch-spb-network-debian

Unterschiede

Hier werden die Unterschiede zwischen zwei Versionen angezeigt.

Link zu dieser Vergleichsansicht

Nächste Überarbeitung
Vorhergehende Überarbeitung
Letzte ÜberarbeitungBeide Seiten der Revision
omniswitch-spb-network-debian [2019/06/19 08:03] – angelegt bennyomniswitch-spb-network-debian [2019/06/19 08:30] benny
Zeile 1: Zeile 1:
 ====== Einfaches SPB-Netz mit Debian Workstations (VMs) ====== ====== Einfaches SPB-Netz mit Debian Workstations (VMs) ======
  
 +Dieses Beispielnetz verwendet die ALE "Intelligent Fabric" (Auto-Fabric) und ist weitestgehend automatisch konfiguriert worden.
 +
 +<WRAP center round tip 60%>
 +An diesem Artikel wird noch gearbeitet. :)
 +</WRAP>
 +
 +
 +===== Netzwerkdiagramm =====
 +{{::screen_shot_2019-06-19_at_10.05.09.png?direct|}}
 +
 +===== Konsolenausgaben =====
 +Die virtuellen Debian-basierten Systeme sind an folgenden Ports angeschlossen:
 +
 +  * Debian9-WS1 -> OS6900-Oben 1/1/3
 +  * Debian9-WS2 -> OS6900-Unten 1/1/5
 +  * Debian9-WS3 -> OS6860 1/1/7
 +
 +Die VMs haben die IPs 10.10.10.1 / 10.10.10.2 und 10.10.10.3 und verwenden den VLAN-Tag 55. Die Konfiguration auf den VMs erfolgt wie folgt.
 +
 +==== Debian9-WS1 ====
 +<code>
 +sudo ip link add link ens7 name ens7.55 type vlan id 55
 +sudo ip addr add 10.10.10.1/24 brd 10.10.10.255 dev ens7.55
 +sudo ip link set dev ens7 up
 +sudo ip link set dev ens7.55 up
 +</code>
 +
 +==== Debian9-WS2 ====
 +<code>
 +sudo ip link add link ens7 name ens7.55 type vlan id 55
 +sudo ip addr add 10.10.10.2/24 brd 10.10.10.255 dev ens7.55
 +sudo ip link set dev ens7 up
 +sudo ip link set dev ens7.55 up
 +</code>
 +
 +==== Debian9-WS3 ====
 +<code>
 +sudo ip link add link ens7 name ens7.55 type vlan id 55
 +sudo ip addr add 10.10.10.3/24 brd 10.10.10.255 dev ens7.55
 +sudo ip link set dev ens7 up
 +sudo ip link set dev ens7.55 up
 +</code>
 +
 +===== Stille Geräte (Silent Devices) =====
 +
 +Schön zu sehen ist dieser Effekt mit den Debian-VMs, die anders als Windows-Systeme, nicht regelmäßig vor sich herkommunizieren.
 +
 +<code>
 +OS6900-Oben-> show spb isis services 
 +Legend: * indicates locally configured ISID
 +SPB ISIS Services Info:
 +                      System                                             
 +    ISID      BVLAN   (Name : BMAC)                           MCAST(T/R) 
 +------------+-------+----------------------------------------+-----------
 +
 +ISIDs:     
 +
 +OS6900-Oben-> show mac
 +mac-learning   mac-range      mac-retention  
 +OS6900-Oben-> show mac-learning domain spb 
 +Legend: Mac Address: * = address not valid,
 +
 +        Mac Address: & = duplicate static address,
 +
 +   Domain    Vlan/SrvcId[ISId/vnId]     Mac Address           Type          Operation          Interface
 +------------+----------------------+-------------------+------------------+-------------+-------------------------
 +
 + Total number of Valid MAC addresses above = 0
 +</code>
 +
 +Setzt man nun einen Ping ab, werden die Dienste wieder "gelernt" oder man 
 +
 +===== Konfiguration OS6860 =====
 +<code>
 +! Chassis:
 +system name "OS6860"
 +
 +! Configuration:
 +configuration error-file-limit 2
 +
 +! Capability Manager:
 +hash-control extended
 +
 +! Virtual Flow Control:
 +! LFP: 
 +! Interface:
 +! Port_Manager: 
 +! Link Aggregate:
 +linkagg lacp agg 126 size 16 hash tunnel-protocol admin-state enable 
 +linkagg lacp agg 126 name "Created by Auto-Fabric on Tue Jun 18 19:32:57 2019"
 +linkagg lacp agg 126 actor admin-key 65534
 +linkagg lacp agg 127 size 16 hash tunnel-protocol admin-state enable 
 +linkagg lacp agg 127 name "Created by Auto-Fabric on Tue Jun 18 19:32:57 2019"
 +linkagg lacp agg 127 actor admin-key 65535
 +linkagg lacp port 1/1/25 actor admin-key 65535
 +linkagg lacp port 1/1/27 actor admin-key 65534
 +
 +! VLAN:
 +vlan 1 admin-state enable
 +vlan 100 admin-state enable
 +spb bvlan 4000 admin-state enable
 +spb bvlan 4000 name "AutoFabric 6/18/2019 19:33:16"
 +spb bvlan 4001-4015 admin-state enable
 +spb bvlan 4001-4015 name "AutoFabric 6/18/2019 19:33:16"
 +vlan 100 members port 1/1/17 untagged
 +
 +! PVLAN:
 +! Spanning Tree:
 +spantree mode flat 
 +spantree vlan 1 admin-state enable 
 +spantree vlan 100 admin-state enable 
 +spantree vlan 4000 admin-state disable 
 +spantree vlan 4001 admin-state disable 
 +spantree vlan 4002 admin-state disable 
 +spantree vlan 4003 admin-state disable 
 +spantree vlan 4004 admin-state disable 
 +spantree vlan 4005 admin-state disable 
 +spantree vlan 4006 admin-state disable 
 +spantree vlan 4007 admin-state disable 
 +spantree vlan 4008 admin-state disable 
 +spantree vlan 4009 admin-state disable 
 +spantree vlan 4010 admin-state disable 
 +spantree vlan 4011 admin-state disable 
 +spantree vlan 4012 admin-state disable 
 +spantree vlan 4013 admin-state disable 
 +spantree vlan 4014 admin-state disable 
 +spantree vlan 4015 admin-state disable 
 +
 +! DA-UNP:
 +unp profile "systemDefault10000000" 
 +unp profile "systemDefault10000055" 
 +unp profile "systemDefault10000000" map service-type spb tag-value 0 isid 10000000 bvlan 4000 multicast-mode headend vlan-xlation
 +unp profile "systemDefault10000055" map service-type spb tag-value 55 isid 10000055 bvlan 4007 multicast-mode headend vlan-xlation
 +unp port 1/1/17 port-type access
 +unp port 1/1/17 port-template accessDefaultPortTemplate
 +
 +! Bridging:
 +! Port Mirroring:
 +! Port Mapping:
 +! IP:
 +ip interface dhcp-client vlan 1 ifindex 1
 +ip interface dhcp-client option-60 OmniSwitch-OS6860E-P24
 +
 +! IPv6:
 +! IPSec:
 +! IPMS:
 +! AAA:
 +aaa authentication default "local" 
 +aaa authentication console "local" 
 +aaa authentication ssh "local" 
 +
 +aaa tacacs command-authorization disable
 +
 +! NTP:
 +ntp server clock0.ovcirrus.com
 +ntp server clock1.ovcirrus.com
 +ntp server clock2.ovcirrus.com
 +ntp server clock3.ovcirrus.com
 +ntp client admin-state enable
 +
 +! QOS:
 +! Policy Manager:
 +! VLAN Stacking:
 +! ERP:
 +! MVRP:
 +mvrp enable
 +
 +! LLDP:
 +! UDLD:
 +! Server Load Balance:
 +! High Availability Vlan:
 +! Session Manager:
 +session cli timeout 999
 +session prompt default "OS6860->"
 +
 +! Web:
 +! Trap Manager:
 +! Health Monitor:
 +! System Service:
 +ip domain-name home
 +ip name-server 192.168.2.1
 +ip domain-lookup
 +
 +! SNMP:
 +! BFD:
 +! IP Route Manager:
 +! VRRP:
 +! UDP Relay:
 +! RIP:
 +! OSPF:
 +! IP Multicast:
 +! DVMRP:
 +! IPMR:
 +! RIPng:
 +! OSPF3:
 +! BGP:
 +! ISIS:
 +! Module:
 +! LAN Power:
 +! RDP:
 +! DHL:
 +! Ethernet-OAM:
 +! SAA:
 +! SPB-ISIS:
 +spb isis bvlan 4000 ect-id 1
 +spb isis bvlan 4001 ect-id 2
 +spb isis bvlan 4002 ect-id 3
 +spb isis bvlan 4003 ect-id 4
 +spb isis bvlan 4004 ect-id 5
 +spb isis bvlan 4005 ect-id 6
 +spb isis bvlan 4006 ect-id 7
 +spb isis bvlan 4007 ect-id 8
 +spb isis bvlan 4008 ect-id 9
 +spb isis bvlan 4009 ect-id 10
 +spb isis bvlan 4010 ect-id 11
 +spb isis bvlan 4011 ect-id 12
 +spb isis bvlan 4012 ect-id 13
 +spb isis bvlan 4013 ect-id 14
 +spb isis bvlan 4014 ect-id 15
 +spb isis bvlan 4015 ect-id 16
 +spb isis control-bvlan 4000
 +spb isis interface linkagg 126-127
 +spb isis admin-state enable
 +
 +! SVCMGR:
 +! LDP:
 +! EVB:
 +! APP-FINGERPRINT:
 +! FCOE:
 +! QMR: 
 +! OPENFLOW:
 +! Dynamic auto-fabric:
 +auto-fabric admin-state enable
 +
 +! SIP Snooping:
 +! DHCP Server:
 +! DHCPv6 Relay:
 +! DHCPv6 Snooping:
 +! DHCPv6 Server:
 +! DHCP Message Service:
 +! DHCP Active Lease Service:
 +! Virtual Chassis Split Protection:
 +! DHCP Snooping:
 +! APP-MONITORING:
 +! Loopback Detection:
 +loopback-detection enable
 +
 +! VM-SNOOPING:
 +! PPPOE-IA:
 +! Security:
 +! Zero Configuration:
 +! MAC Security:
 +! OVC:
 +! EFM-OAM:
 +! ALARM-MANAGER:
 +! DEVICE-PROFILE:
 +! PTP:
 +! IP DHCP RELAY:
 +! TEST-OAM:
 +! LOOPBACK TEST:
 +! UDP6 RELAY:
 +! MGMT AGENT:
 +</code>
 +
 +===== Konfiguration OS6900-Oben =====
 +<code>
 +! Chassis:
 +system name "OS6900-Oben"
 +
 +! Configuration:
 +configuration error-file-limit 2
 +
 +! Capability Manager:
 +! Virtual Flow Control:
 +! LFP: 
 +! Interface:
 +! Port_Manager: 
 +! Link Aggregate:
 +linkagg lacp agg 126 size 16 hash tunnel-protocol admin-state enable 
 +linkagg lacp agg 126 name "Created by Auto-Fabric on Tue Jun 18 17:39:35 2019"
 +linkagg lacp agg 126 actor admin-key 65534
 +linkagg lacp agg 127 size 16 hash tunnel-protocol admin-state enable 
 +linkagg lacp agg 127 name "Created by Auto-Fabric on Tue Jun 18 17:32:58 2019"
 +linkagg lacp agg 127 actor admin-key 65535
 +linkagg lacp port 1/1/1 actor admin-key 65534
 +linkagg lacp port 1/1/13 actor admin-key 65535
 +
 +! VLAN:
 +vlan 1 admin-state enable
 +vlan 100 admin-state enable
 +spb bvlan 4000 admin-state enable
 +spb bvlan 4000 name "AutoFabric 6/18/2019 17:33:17"
 +spb bvlan 4001-4015 admin-state enable
 +spb bvlan 4001-4015 name "AutoFabric 6/18/2019 17:33:17"
 +vlan 100 members port 1/1/3 untagged
 +
 +! PVLAN:
 +! Spanning Tree:
 +spantree mode flat 
 +spantree vlan 1 admin-state enable 
 +spantree vlan 100 admin-state enable 
 +spantree vlan 4000 admin-state disable 
 +spantree vlan 4001 admin-state disable 
 +spantree vlan 4002 admin-state disable 
 +spantree vlan 4003 admin-state disable 
 +spantree vlan 4004 admin-state disable 
 +spantree vlan 4005 admin-state disable 
 +spantree vlan 4006 admin-state disable 
 +spantree vlan 4007 admin-state disable 
 +spantree vlan 4008 admin-state disable 
 +spantree vlan 4009 admin-state disable 
 +spantree vlan 4010 admin-state disable 
 +spantree vlan 4011 admin-state disable 
 +spantree vlan 4012 admin-state disable 
 +spantree vlan 4013 admin-state disable 
 +spantree vlan 4014 admin-state disable 
 +spantree vlan 4015 admin-state disable 
 +
 +! DA-UNP:
 +unp profile "systemDefault10000000" 
 +unp profile "systemDefault10000055" 
 +unp profile "systemDefault10000000" map service-type spb tag-value 0 isid 10000000 bvlan 4000 multicast-mode headend vlan-xlation
 +unp profile "systemDefault10000055" map service-type spb tag-value 55 isid 10000055 bvlan 4007 multicast-mode headend vlan-xlation
 +unp port 1/1/3 port-type access
 +unp port 1/1/3 port-template accessDefaultPortTemplate
 +
 +! Bridging:
 +! Port Mirroring:
 +! Port Mapping:
 +! IP:
 +ip interface dhcp-client vlan 1 ifindex 1
 +ip interface dhcp-client option-60 OmniSwitch-OS6900-X20
 +
 +! IPv6:
 +! IPSec:
 +! IPMS:
 +! AAA:
 +aaa authentication default "local" 
 +aaa authentication console "local" 
 +aaa authentication ssh "local" 
 +
 +aaa tacacs command-authorization disable
 +
 +! NTP:
 +ntp server clock0.ovcirrus.com
 +ntp server clock1.ovcirrus.com
 +ntp server clock2.ovcirrus.com
 +ntp server clock3.ovcirrus.com
 +ntp client admin-state enable
 +
 +! QOS:
 +! Policy Manager:
 +! VLAN Stacking:
 +! ERP:
 +! MVRP:
 +mvrp enable
 +
 +! LLDP:
 +! UDLD:
 +! Server Load Balance:
 +! High Availability Vlan:
 +! Session Manager:
 +session cli timeout 999
 +session prompt default "OS6900-Oben->"
 +
 +! Web:
 +! Trap Manager:
 +! Health Monitor:
 +! System Service:
 +ip domain-name home
 +ip name-server 192.168.2.1
 +ip domain-lookup
 +
 +! SNMP:
 +! BFD:
 +! IP Route Manager:
 +! VRRP:
 +! UDP Relay:
 +! RIP:
 +! OSPF:
 +! IP Multicast:
 +! DVMRP:
 +! IPMR:
 +! RIPng:
 +! OSPF3:
 +! BGP:
 +! ISIS:
 +! Module:
 +! LAN Power:
 +! RDP:
 +! DHL:
 +! Ethernet-OAM:
 +! SAA:
 +! SPB-ISIS:
 +spb isis bvlan 4000 ect-id 1
 +spb isis bvlan 4001 ect-id 2
 +spb isis bvlan 4002 ect-id 3
 +spb isis bvlan 4003 ect-id 4
 +spb isis bvlan 4004 ect-id 5
 +spb isis bvlan 4005 ect-id 6
 +spb isis bvlan 4006 ect-id 7
 +spb isis bvlan 4007 ect-id 8
 +spb isis bvlan 4008 ect-id 9
 +spb isis bvlan 4009 ect-id 10
 +spb isis bvlan 4010 ect-id 11
 +spb isis bvlan 4011 ect-id 12
 +spb isis bvlan 4012 ect-id 13
 +spb isis bvlan 4013 ect-id 14
 +spb isis bvlan 4014 ect-id 15
 +spb isis bvlan 4015 ect-id 16
 +spb isis control-bvlan 4000
 +spb isis interface linkagg 126-127
 +spb isis admin-state enable
 +
 +! SVCMGR:
 +! LDP:
 +! EVB:
 +! APP-FINGERPRINT:
 +! FCOE:
 +fibre-channel vsan 1 admin-state enable name DEFAULT
 +
 +! QMR: 
 +! OPENFLOW:
 +! Dynamic auto-fabric:
 +auto-fabric admin-state enable
 +
 +! SIP Snooping:
 +! DHCP Server:
 +! DHCPv6 Relay:
 +! DHCPv6 Snooping:
 +! DHCPv6 Server:
 +! DHCP Message Service:
 +! DHCP Active Lease Service:
 +! Virtual Chassis Split Protection:
 +! DHCP Snooping:
 +! APP-MONITORING:
 +! Loopback Detection:
 +loopback-detection enable
 +
 +! VM-SNOOPING:
 +! PPPOE-IA:
 +! Security:
 +! Zero Configuration:
 +! MAC Security:
 +! OVC:
 +! EFM-OAM:
 +! ALARM-MANAGER:
 +! DEVICE-PROFILE:
 +! PTP:
 +! IP DHCP RELAY:
 +! TEST-OAM:
 +! LOOPBACK TEST:
 +! UDP6 RELAY:
 +! MGMT AGENT:
 +</code>
 +
 +
 +===== Konfiguration OS6900-Unten =====
 +<code>
 +! Chassis:
 +system name "OS6900-Unten"
 +
 +! Configuration:
 +configuration error-file-limit 2
 +
 +! Capability Manager:
 +! Virtual Flow Control:
 +! LFP: 
 +! Interface:
 +! Port_Manager: 
 +! Link Aggregate:
 +linkagg lacp agg 126 size 16 hash tunnel-protocol admin-state enable 
 +linkagg lacp agg 126 name "Created by Auto-Fabric on Tue Jun 18 17:39:35 2019"
 +linkagg lacp agg 126 actor admin-key 65534
 +linkagg lacp agg 127 size 16 hash tunnel-protocol admin-state enable 
 +linkagg lacp agg 127 name "Created by Auto-Fabric on Tue Jun 18 17:32:58 2019"
 +linkagg lacp agg 127 actor admin-key 65535
 +linkagg lacp port 1/1/1 actor admin-key 65534
 +linkagg lacp port 1/1/13 actor admin-key 65535
 +
 +! VLAN:
 +vlan 1 admin-state enable
 +vlan 100 admin-state enable
 +spb bvlan 4000 admin-state enable
 +spb bvlan 4000 name "AutoFabric 6/18/2019 17:33:17"
 +spb bvlan 4001-4015 admin-state enable
 +spb bvlan 4001-4015 name "AutoFabric 6/18/2019 17:33:17"
 +vlan 100 members port 1/1/5 untagged
 +
 +! PVLAN:
 +! Spanning Tree:
 +spantree mode flat 
 +spantree vlan 1 admin-state enable 
 +spantree vlan 100 admin-state enable 
 +spantree vlan 4000 admin-state disable 
 +spantree vlan 4001 admin-state disable 
 +spantree vlan 4002 admin-state disable 
 +spantree vlan 4003 admin-state disable 
 +spantree vlan 4004 admin-state disable 
 +spantree vlan 4005 admin-state disable 
 +spantree vlan 4006 admin-state disable 
 +spantree vlan 4007 admin-state disable 
 +spantree vlan 4008 admin-state disable 
 +spantree vlan 4009 admin-state disable 
 +spantree vlan 4010 admin-state disable 
 +spantree vlan 4011 admin-state disable 
 +spantree vlan 4012 admin-state disable 
 +spantree vlan 4013 admin-state disable 
 +spantree vlan 4014 admin-state disable 
 +spantree vlan 4015 admin-state disable 
 +
 +! DA-UNP:
 +unp profile "systemDefault10000000" 
 +unp profile "systemDefault10000055" 
 +unp profile "systemDefault10000000" map service-type spb tag-value 0 isid 10000000 bvlan 4000 multicast-mode headend vlan-xlation
 +unp profile "systemDefault10000055" map service-type spb tag-value 55 isid 10000055 bvlan 4007 multicast-mode headend vlan-xlation
 +unp port 1/1/5 port-type access
 +unp port 1/1/5 port-template accessDefaultPortTemplate
 +
 +! Bridging:
 +! Port Mirroring:
 +! Port Mapping:
 +! IP:
 +ip interface dhcp-client vlan 1 ifindex 1
 +ip interface dhcp-client option-60 OmniSwitch-OS6900-X20
 +
 +! IPv6:
 +! IPSec:
 +! IPMS:
 +! AAA:
 +aaa authentication default "local" 
 +aaa authentication console "local" 
 +aaa authentication ssh "local" 
 +
 +aaa tacacs command-authorization disable
 +
 +! NTP:
 +ntp server clock0.ovcirrus.com
 +ntp server clock1.ovcirrus.com
 +ntp server clock2.ovcirrus.com
 +ntp server clock3.ovcirrus.com
 +ntp client admin-state enable
 +
 +! QOS:
 +! Policy Manager:
 +! VLAN Stacking:
 +! ERP:
 +! MVRP:
 +mvrp enable
 +
 +! LLDP:
 +! UDLD:
 +! Server Load Balance:
 +! High Availability Vlan:
 +! Session Manager:
 +session cli timeout 999
 +session prompt default "OS6900-Unten->"
 +
 +! Web:
 +! Trap Manager:
 +! Health Monitor:
 +! System Service:
 +ip domain-name home
 +ip name-server 192.168.2.1
 +ip domain-lookup
 +
 +! SNMP:
 +! BFD:
 +! IP Route Manager:
 +! VRRP:
 +! UDP Relay:
 +! RIP:
 +! OSPF:
 +! IP Multicast:
 +! DVMRP:
 +! IPMR:
 +! RIPng:
 +! OSPF3:
 +! BGP:
 +! ISIS:
 +! Module:
 +! LAN Power:
 +! RDP:
 +! DHL:
 +! Ethernet-OAM:
 +! SAA:
 +! SPB-ISIS:
 +spb isis bvlan 4000 ect-id 1
 +spb isis bvlan 4001 ect-id 2
 +spb isis bvlan 4002 ect-id 3
 +spb isis bvlan 4003 ect-id 4
 +spb isis bvlan 4004 ect-id 5
 +spb isis bvlan 4005 ect-id 6
 +spb isis bvlan 4006 ect-id 7
 +spb isis bvlan 4007 ect-id 8
 +spb isis bvlan 4008 ect-id 9
 +spb isis bvlan 4009 ect-id 10
 +spb isis bvlan 4010 ect-id 11
 +spb isis bvlan 4011 ect-id 12
 +spb isis bvlan 4012 ect-id 13
 +spb isis bvlan 4013 ect-id 14
 +spb isis bvlan 4014 ect-id 15
 +spb isis bvlan 4015 ect-id 16
 +spb isis control-bvlan 4000
 +spb isis interface linkagg 126-127
 +spb isis admin-state enable
 +
 +! SVCMGR:
 +! LDP:
 +! EVB:
 +! APP-FINGERPRINT:
 +! FCOE:
 +fibre-channel vsan 1 admin-state enable name DEFAULT
 +
 +! QMR: 
 +! OPENFLOW:
 +! Dynamic auto-fabric:
 +auto-fabric admin-state enable
 +
 +! SIP Snooping:
 +! DHCP Server:
 +! DHCPv6 Relay:
 +! DHCPv6 Snooping:
 +! DHCPv6 Server:
 +! DHCP Message Service:
 +! DHCP Active Lease Service:
 +! Virtual Chassis Split Protection:
 +! DHCP Snooping:
 +! APP-MONITORING:
 +! Loopback Detection:
 +loopback-detection enable
 +
 +! VM-SNOOPING:
 +! PPPOE-IA:
 +! Security:
 +! Zero Configuration:
 +! MAC Security:
 +! OVC:
 +! EFM-OAM:
 +! ALARM-MANAGER:
 +! DEVICE-PROFILE:
 +! PTP:
 +! IP DHCP RELAY:
 +! TEST-OAM:
 +! LOOPBACK TEST:
 +! UDP6 RELAY:
 +! MGMT AGENT:
 +</code>
omniswitch-spb-network-debian.txt · Zuletzt geändert: 2019/06/19 09:07 von benny

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki