- 积分
- 16844
在线时间 小时
最后登录1970-1-1
|
马上注册,结交更多好友,享用更多功能,让你轻松玩转社区。
您需要 登录 才可以下载或查看,没有账号?开始注册
x
H3C 交换机 OpenFlow 配置指南
3 y, v+ E, f- v/ f目录6 O* _8 h) p/ e3 g" o+ m
Console 连接交换机* F ~6 v: J& e6 f1 p: W v- N
配置 VLAN
, }+ A% C+ \9 g; k% j; Z; A创建实例并映射 VLAN
$ R0 t: f4 c) E( j* j' ?' u( ~配置控制器1的IP地址并激活实例, [3 n( m" j) E8 o9 K' l' M# r* Q5 ?
验证配置
) k$ a+ `2 R4 v, S5 [, m1. Console 连接交换机
1 c/ I c: K P0 S- C( ^# X笔记本连接需要一个 USB 转 RS232 串口线。+ U q2 Y- i5 k3 q' D5 Z6 b( i
MacOS
% l1 b5 }4 f0 \% j! z' L连接后,MacOS 下可以从终端查看设备状态4 g/ W& W3 C/ L+ R# A% s7 b
bash $ ls /dev/cu.usbserial-*
, L5 U4 {8 o/ `! I; k& N/dev/cu.usbserial-A106Z8ML
1 o6 t4 H9 T5 Q1 G9 z/ V6 @) c
! p% x* b% [- M
7 x K1 p5 e6 [: v8 J然后可以用 screen 连接。
4 {# P( [) ~; j" Z' {8 Cscreen /dev/cu.usbserial-A106Z8ML! O% A- N; k5 s2 r
/ V1 Y* Y# L( ~6 l5 `$ _7 wWindows
0 R+ `0 |7 b3 K: v5 f3 n2 i# G* j可以用 SecureCRT 或者串口精灵之类的程序通过串口连接。
2 M6 [: f2 F' M8 E5 o( W连接以后,按几次 Enter,输出大概是
- E4 @( _! Y* F/ M* K; V, [; ]<H3C>%Jan 1 21:20:28:599 2011 H3C SHELL/5/SHELL_LOGIN: TTY logged in from aux0.
/ j; a4 S$ i4 X! ^) {2 l: w4 Z: a, g<H3C>$ {3 L8 p6 G' p" C. V6 W2 _
Press ENTER to get started., n2 r1 B; B' T
<H3C>%Feb 21 14:09:42:051 2022 H3C SHELL/5/SHELL_LOGIN: Console logged in from con0.
1 a' H( H: U" m- |. x* T" ^$ {
2. 配置 VLAN6 }4 [9 I1 ^: K6 {! ^
创建VLAN 4092和4094( V7 Q' V; i% R! U8 z# x9 j0 W3 A
<H3C>system-view; j( h6 @ y8 U0 R Z
System View: return to User View with Ctrl+Z
8 `3 }) [2 T# j[H3C]vlan 4092
- H* I0 {( t V: C1 T[H3C-vlan4092]quit
# n# x+ ]" E* S+ t[H3C]vlan 40941 g, k: ^9 p6 k
[H3C-vlan4094]quit8 [0 w) k, t" E1 s# Y @
7 o- ?; C) f/ p
<H3C>system-view# L1 P' m! ]2 _. [8 u8 ~
System View: return to User View with Ctrl+Z.
5 a# g8 N' b% ?7 i4 j[H3C]vlan 4092
1 I$ | o5 p8 ?! M/ m[H3C-vlan4092]quit& a* p% @* z8 s9 ~# |
[H3C]vlan 4093
* O: Y6 k& `) j! Q0 ]; N% O[H3C-vlan4093]quit% J. b- D' J7 o8 M9 d; @4 o. x
[H3C]no# R% {) j( X$ B4 }% \& i% ?1 a5 g
[H3C]no vla
" s3 N( ~8 o O3 s+ u[H3C]no vlan 4093
* K/ E! f+ _8 k9 V+ T[H3C]vlan6 d8 J% q: @; Y9 c
[H3C]vlan 4094
: f0 C0 f# w) L5 F W[H3C-vlan4094]quit: E1 A6 e: I6 r1 T8 o% ?' `
[H3C]' I( {: j5 Z9 U; f
) B1 J1 k+ N$ ~+ r. R# l# r7 U
[H3C]display vlan
" A- h- q v3 s4 E1 O Total VLANs: 3
0 F/ b3 o* H6 j* | The VLANs include:7 N! g, f/ {6 M- `8 T
1(default), 4092, 4094
/ m. [9 Y s1 w; @4 H[H3C]
9 \0 r/ H5 `9 e3 J! Q8 p! b7 N
8 V- v8 M/ J; I8 O- R/ B+ f创建VLAN接口1并配置IP地址! r7 n9 U; u% i
上图是官方文档中的例子
9 z* L+ Y* x) C( J# m[H3C]interface Vlan-interface 1
7 w6 A% f+ S. n' ]9 i- ]
$ G g/ q0 M, f9 O! U9 m[H3C-Vlan-interface1]undo shutdown% T$ B4 T! `. Y8 O9 B
[H3C-Vlan-interface1]ip7 `6 r X3 [" \% I( E G# J
[H3C-Vlan-interface1]ip address 192.168.7.1 24) v% v: } b% l
[H3C-Vlan-interface1]quit# D, g% b f: i, H6 P! E
# d7 D) R; |1 O3 I- N9 Q Q; Q0 j# N5 N8 t
+ X+ g" E7 W( n* w1 \[H3C]interface Vlan-interface 1* B- e0 Y! Y) {9 Y3 t, O2 ^$ ~
4 e5 q: h, w- D# ^" H
1 t+ f- q1 `0 E7 u) f
' U4 A. v* _3 g+ P" e: G( Z" L* Q0 r
[H3C-Vlan-interface1]undo shutdown
$ |# E- _& l# {& `5 ^
% {, T9 e) N1 h[H3C-Vlan-interface1]ip address 192.168.7.1 24
s" J: E+ k3 D- P1 M[H3C-Vlan-interface1]quit
! _- r: l( _; G5 H. u[H3C]4 Y0 q8 `+ x" N" F) a" G7 \
/ n3 h, `/ Z) `& E& E: K
设置完以后,将控制器所在PC的IP地址设置为 192.168.49.49,可以通过 ping 测试是否连通。
. e; |% a1 u& i8 g4 K6 [+ c[H3C]ping 192.168.7.497 K2 v: _$ e" ]# X
Ping 192.168.49.49 (192.168.7.49): 56 data bytes, press CTRL_C to break
8 f* K" V. m4 m, e' Y56 bytes from 192.168.7.49: icmp_seq=0 ttl=64 time=1.897 ms
" P9 V, D1 B6 g$ b% x* O56 bytes from 192.168.7.49: icmp_seq=1 ttl=64 time=1.268 ms
- F7 {( Z+ {, F( Z m" _56 bytes from 192.168.7.49: icmp_seq=2 ttl=64 time=1.627 ms: H6 e' A& m2 w# T1 m
56 bytes from 192.168.7.49: icmp_seq=4 ttl=64 time=1.855 ms( U* m A- l I
--- Ping statistics for 192.168.7.49 ---4 L+ ?) `: O0 V: Y6 l- ?
5 packet(s) transmitted, 5 packet(s) received, 0.0% packet loss1 p/ E8 k# c+ Z# ]8 H- @0 Y
round-trip min/avg/max/std-dev = 1.170/1.563/1.897/0.297 ms: c: x/ k7 m/ L" S+ S% b; D( h$ X
8 x1 B# H8 Z( G/ [- `! }[H3C]%Jan 1 21:47:00:208 2011 H3C PING/6/PING_STATISTICS: Ping statistics for 192.168.7.49: 5 packet(s) transmitted, 5 packet(s) received, 0.0% packet loss, round-trip min/avg/max/std-dev = 1.170/1.563/1.897/0.297 ms.8 x+ p/ U8 f3 j* G
6 ~' Q) y) E' U; U- a7 ?0 \; f% V9 E6 m0 ^. H0 J
' [1 I) O3 Y& h2 y6 M- k- ^
3. 创建 OpenFlow 实例并映射 VLAN* D3 R1 a. q1 s) [) N8 Y
<H3C> system-view
9 a; Y b% |2 u/ B7 ^/ f7 ?1 q[H3C] openflow instance 1+ U" x8 x# V* X4 S
[H3C-of-inst-1] classification vlan 4092 mask 4093
t7 i$ U# {9 P+ |* z2 @, J8 l6 W" [ l- T" }- X
\$ {' V m1 t
" G9 c3 [- }8 u( i1 K, |/ J<H3C>system-view
# D2 `2 F) @0 I/ e" ESystem View: return to User View with Ctrl+Z.
4 j: {8 u" n8 s `4 Y: }2 M! v$ o* [9 r3 w; n, J* H
[H3C]openflow instance 1- s! ]# L9 Z2 }2 [' I- s+ W
, G) u! U7 U' z3 K: O
[H3C-of-inst-1]classification vlan 4093 mas
" b& }) g, c/ k: \+ C3 v9 u7 U[H3C-of-inst-1]classification vlan 4093 mask 40943 q' t7 {% C6 Z6 F. t, ]( `
[H3C-of-inst-1]classification vlan 4093 mask 4093' Z3 {# a; o+ v* e
5 E0 G8 k8 A% {1 X6 x7 h配置端口
( r" W7 U* ?+ t" P, E1 U6 p( a; U: p8 U: J5 \/ A" }# h6 x: m `
[H3C]interface Ten-GigabitEthernet 1/0/1
* v( e3 f' e7 X[H3C-Ten-GigabitEthernet1/0/1] port type trunk $ A. S7 ?& K5 |& a: S( v
[H3C-Ten-GigabitEthernet1/0/1] port trunk permit vlan 4092) }7 C# p8 I. {) p1 B& M$ X
[H3C-Ten-GigabitEthernet1/0/1] quit6 ~9 a2 R/ `. }/ e* V( N
* i/ ~0 w5 A/ c4 X8 Z8 q' \7 U$ W" s9 K! H; k V
我们需要把希望 OpenFlow 管理的端口加入 vlan 4092 中。
R8 ^3 h( X$ O& P2 j. H9 J! D其中 1/0/1 用于连接控制器,1/0/2 保留。! A6 u8 v1 p2 r( ], F
<H3C> system-view
. ]+ }" B$ O. a) M[H3C] vlan 4092
+ I. i0 ~+ F' t8 f[H3C-vlan4092] port Ten-GigabitEthernet 1/0/3 Ten-GigabitEthernet 1/0/4 ... Ten-GigabitEthernet 1/0/48
' Y3 R2 b# p- y- q" g, X[H3C-vlan4092] quit$ z; ?$ b' ^7 v. o
3 e7 E) Q+ [- k0 _6 F- O) C4. 配置控制器1的IP地址并激活实例) S; q; _# b% D# ^5 `
[H3C-of-inst-1] controller 1 address ip 192.168.7.49
4 N: i& V' T" b9 }' @" I[H3C-of-inst-1] active instance" y: a8 M' h4 o! n
/ k/ l2 w; h3 v. \5. 验证配置
" `- X& f- v3 ~6 U5 r: A<H3C-of-inst-1> display openflow instance 1
. D% E: Q6 Q* l7 Q8 v% UInstance 1 information:
8 _ U8 {0 l; z* d6 `+ Y \Configuration information:9 Z0 o. U' B9 |
Description : --
, o q, g& `0 w4 _0 B; N Active status : Active
$ ~: r2 X5 [! M8 b- p Inactive configuration:
9 F# t% k! B" r' T/ U None
; t0 n3 o" Q' Z0 ^0 I+ H Active configuration:
: T0 K6 A' {; D Classification: VLAN, total VLANs(1) M; M+ ?, ^; s, w! i* [
4092
' ? p) ~2 I9 S8 `9 A% D" U2 X In-band management VLAN, total VLANs(0)& o/ d- W" D4 l" z' @( N
Empty VLAN, K! ]) o5 B' R8 |6 \
Connect mode: Multiple
{/ t6 d2 U2 G( i' i MAC address learning: Enabled6 a F4 [ t6 S( k& R- N* L0 |" e
TCP DSCP value: 64; |7 l1 K' |+ [
Flow table:6 Z* W+ o8 A! i5 l
Table ID(type): 0(Extensibility), count: 95 `1 N$ M5 X1 l8 b. D6 n
Flow-entry max-limit: 65535- F' J: H: M c' S0 o
Datapath ID: 0x000188df9eeaaaaa; w0 F* Q2 z7 L/ d& o1 R6 J6 t
Default table-miss: Drop4 U: P/ h4 A, C% F8 o
Forbidden port: None
* M g' R; E5 i% R Qinq Network: Disabled
& {6 H9 I( Z9 p TCP connection backup: Enabled0 Z. O! P/ A( S: k1 Z- H B
Port information:2 M& u C, o4 L w
Ten-GigabitEthernet1/0/1) I4 p9 o" s7 v( G
Ten-GigabitEthernet1/0/3
) B& o) Z3 Q n; Q4 ~1 D7 K; F% v Ten-GigabitEthernet1/0/4
% G- y- R" v y- ^/ g ...% f, L: W( ]- l" N7 q
Ten-GigabitEthernet1/0/47
: P1 s2 P& X& M, |: r Ten-GigabitEthernet1/0/484 U! f* ^/ a; e' _; T
Active channel information:
/ W \* D9 C2 x; _( C9 ] Controller 1 IP address: 192.168.7.49 port: 66335 N Q& i8 N2 M
: ^+ F2 b5 j) A% h) _1 k0 N+ k" B然后就可以在 PC 上启动控制器,等待交换机连接。$ F5 h6 Z9 a3 j# ]- E A5 _. m3 l
- J0 {6 [5 T2 G1 [
1 j( }4 H9 U* `( K( y/ c8 o9 o[H3C]display openflow instance 14 x. L- z0 `8 M4 |
Instance 1 information:. D6 x6 @4 R2 O/ u& \0 _! s
Configuration information:
( c) p3 m7 `3 d" { Description : --6 a0 S+ m4 v+ t3 ~
Active status : Inactive/ x. N% I* ^# e6 _
Inactive configuration:4 ]" Z6 @+ @* A$ H/ C
Classification: VLAN, total VLANs(2)
0 b6 M6 Z6 | {6 U$ K 4092, 4094
8 M& w# e6 \* I3 D; \3 i8 J: k T) Y' o In-band management VLAN, total VLANs(0)
0 ^. @0 U/ ~( a0 O1 F L Empty VLAN4 q3 E8 \. d) {
Connect mode: Multiple
! @2 w! M( n5 v9 n- n p/ a MAC address learning: Enabled3 Q- v8 a6 ]# t) z) D4 B
TCP DSCP value: 106 C& e% l1 p6 a$ h$ n# M
Flow table: K6 _9 _* h' B4 j6 m# c
Table ID(type): 0(Extensibility)
: U% h4 {8 J+ P8 p1 Y4 E8 O: p Flow-entry max-limit: 65535
+ J9 f) i% r4 }3 p' n. ]5 x Datapath ID: 0x0001a699068a01008 s/ K; n9 x5 v' G( ]
Default table-miss: Drop
' S: m+ L+ T( Z* g* i Forbidden port: None) O* i1 M! E& {4 L4 w
Qinq Network: Disabled# E; l% y8 d- f I$ z
TCP connection backup: Enabled
: p. B ?8 u+ z# k Active configuration:) j8 d% \( F- q/ j
None
4 d d. x2 `! @8 |/ E1 r5 e+ T: \/ I( v. ]
+ G+ q) m, n/ f6 j, C$ ~% p
|
|