龙空技术网

作为网络工程师,华为网络设备双线接入,一条出现故障如何切换?

网络系统技艺者 1599

前言:

此时我们对“华为怎么关闭网络切换提醒”大致比较重视,各位老铁们都需要了解一些“华为怎么关闭网络切换提醒”的相关知识。那么小编也在网络上网罗了一些对于“华为怎么关闭网络切换提醒””的相关文章,希望各位老铁们能喜欢,看官们快快来了解一下吧!

本篇文章是对之前发布的 微头条 《实现双出口路由 双线接入,当其中一条专线故障时,能够实现自动切换至另一条专线》 的后续配置。因时间关系整理比较慢,望大家见谅!

如果 需要网络实验环境,私信发你。

网络需求:

企业两条专线(电信和联通)接入,当一条专线故障时,实现自动切换至另一条专线,从而保障网络的畅通

网络拓扑:

配置思路:

1、通过ospf 打通内部网络

2、核心出口配置静态路由和NAT,实现与外网互通

3、通过bfd 的单臂回声,来检测网络的连通性,从而实现自动切换

配置文件:

1、出口路由器配置

core-1 配置

[core-1][core-1]dis cur[V200R003C00]# sysname core-1# snmp-agent local-engineid 800007DB03000000000000 snmp-agent # clock timezone China-Standard-Time minus 08:00:00#portal local-server load portalpage.zip# drop illegal-mac alarm# set cpu-usage threshold 80 restore 75#bfd#acl number 2000   rule 5 permit #aaa  authentication-scheme default authorization-scheme default accounting-scheme default domain default  domain default_admin  local-user admin password cipher %$%$K8m.Nt84DZ}e#<08bmE3Uw}%$%$ local-user admin service-type http#firewall zone Local priority 15#interface GigabitEthernet0/0/0 ip address 10.1.1.1 255.255.255.0  ospf enable 100 area 0.0.0.0#interface GigabitEthernet0/0/1#interface GigabitEthernet0/0/2 ip address 100.1.1.2 255.255.255.252  nat outbound 2000#interface NULL0#bfd lnwyf bind peer-ip 100.1.1.1 interface GigabitEthernet0/0/2 one-arm-echo discriminator local 1111 commit#ospf 1 #ospf 100  default-route-advertise area 0.0.0.0 #ip route-static 0.0.0.0 0.0.0.0 100.1.1.1 track bfd-session lnwyf#user-interface con 0 authentication-mode passworduser-interface vty 0 4user-interface vty 16 20#wlan ac#return[core-1]

core-2配置

<core-2><core-2>sysEnter system view, return user view with Ctrl+Z.[core-2][core-2]dis cur[V200R003C00]# sysname core-2# snmp-agent local-engineid 800007DB03000000000000 snmp-agent # clock timezone China-Standard-Time minus 08:00:00#portal local-server load portalpage.zip# drop illegal-mac alarm# set cpu-usage threshold 80 restore 75#acl number 2000   rule 5 permit #aaa  authentication-scheme default authorization-scheme default accounting-scheme default domain default  domain default_admin  local-user admin password cipher %$%$K8m.Nt84DZ}e#<08bmE3Uw}%$%$ local-user admin service-type http#firewall zone Local priority 15#interface GigabitEthernet0/0/0#interface GigabitEthernet0/0/1 ip address 30.1.1.1 255.255.255.0  ospf enable 100 area 0.0.0.0#interface GigabitEthernet0/0/2 ip address 200.1.1.2 255.255.255.252  nat outbound 2000#interface NULL0#ospf 100  default-route-advertise cost 110 area 0.0.0.0 #ip route-static 0.0.0.0 0.0.0.0 200.1.1.1#user-interface con 0 authentication-mode passworduser-interface vty 0 4user-interface vty 16 20#wlan ac#return[core-2]

2、汇聚交换机配置

AGG-1 配置

[AGG-1][AGG-1][AGG-1]dis cur#sysname AGG-1#undo info-center enable#vlan batch 10 20 30 100#cluster enablentdp enablendp enable#drop illegal-mac alarm#diffserv domain default#drop-profile default#aaa authentication-scheme default authorization-scheme default accounting-scheme default domain default domain default_admin local-user admin password simple admin local-user admin service-type http#interface Vlanif1#interface Vlanif10 ip address 192.168.1.1 255.255.255.0 ospf enable 100 area 0.0.0.0#interface Vlanif20 ip address 192.168.2.1 255.255.255.0 ospf enable 100 area 0.0.0.0#interface Vlanif30 ip address 30.1.1.2 255.255.255.0 ospf enable 100 area 0.0.0.0#interface Vlanif100 ip address 10.1.1.2 255.255.255.0 ospf enable 100 area 0.0.0.0#interface MEth0/0/1#interface GigabitEthernet0/0/1 port link-type access port default vlan 100#interface GigabitEthernet0/0/2 port link-type access port default vlan 30#interface GigabitEthernet0/0/9#interface GigabitEthernet0/0/10 port link-type trunk port trunk allow-pass vlan 10 20#interface GigabitEthernet0/0/11 port link-type trunk port trunk allow-pass vlan 10 20#interface NULL0#ospf 100 area 0.0.0.0#user-interface con 0user-interface vty 0 4#return[AGG-1]

3、接入交换机配置

acc-1配置

[acc-1][acc-1][acc-1]dis cur#sysname acc-1#undo info-center enable#vlan batch 10 20#cluster enablentdp enablendp enable#drop illegal-mac alarm#diffserv domain default#drop-profile default#aaa authentication-scheme default authorization-scheme default accounting-scheme default domain default domain default_admin local-user admin password simple admin local-user admin service-type http#interface Vlanif1#interface MEth0/0/1#interface GigabitEthernet0/0/1 port link-type access port default vlan 10#interface GigabitEthernet0/0/2 port link-type access port default vlan 20#interface GigabitEthernet0/0/10 port link-type trunk port trunk allow-pass vlan 10 20#interface NULL0#user-interface con 0user-interface vty 0 4#return[acc-1] 

acc-2配置

[Huawei]dis cur#sysname Huawei#undo info-center enable#vlan batch 10 20#cluster enablentdp enablendp enable#drop illegal-mac alarm#diffserv domain default#drop-profile default#aaa authentication-scheme default authorization-scheme default accounting-scheme default domain default domain default_admin local-user admin password simple admin local-user admin service-type http#interface Vlanif1#interface MEth0/0/1#interface GigabitEthernet0/0/1 port link-type access port default vlan 10#interface GigabitEthernet0/0/2 port link-type access port default vlan 20#interface GigabitEthernet0/0/11 port link-type trunk port trunk allow-pass vlan 10 20#return[Huawei] 
测试:

当电信一侧网络发生故障时,内网PC1仍然能够ping通 外网

此时我们查看汇聚AGG-1上的路由表,发现专线已经跳转到联通这条专线

我们将电信一侧恢复正常,发现PC1并没有闪断,并且仍然能够ping通外网,在查看AGG-1上的路由表,在等待40s 后,路由切换到电信

注意:

关于汇聚AGG-2及下联部分,这里省略,配置方式和上面相同

作者简介:

我是“网络系统技艺者”,系统运维工程师一枚,持续分享【网络技术+系统运维技术】干货。码字不易,如果您觉得文章还可以,就关注+收藏吧,也许在以后某个时间能够用得到。

标签: #华为怎么关闭网络切换提醒