|
|
H3C 交换机 OpenFlow 配置指南
0 Q5 o- d% @' R目录
, M# q2 }) a7 c4 LConsole 连接交换机* x- E+ d% Q2 x5 ?
配置 VLAN
7 m) [. g% a+ @ V w, _2 \创建实例并映射 VLAN
2 {0 g: p- R5 R h: }: F4 j配置控制器1的IP地址并激活实例
7 i. O% \/ j+ k: e) k验证配置
' }6 Z0 K# ?% A& x1. Console 连接交换机5 ]+ p( k4 G z. W! J, g F
笔记本连接需要一个 USB 转 RS232 串口线。- L7 A+ {% `/ t# [- b
MacOS0 p* O/ G+ p& H, y* a' |
连接后，MacOS 下可以从终端查看设备状态
/ {% x; o3 l& d! h/ @ Obash $ ls /dev/cu.usbserial-*2 h1 ?$ x# Y @% A W2 d- n
/dev/cu.usbserial-A106Z8ML
& o9 o: D$ v# g& N1 y9 M' B# }! `1 n( L; F
3 |6 x2 F, K5 E- _$ t; S. a
然后可以用 screen 连接。
6 w4 U7 x- `5 k4 A$ i; Lscreen /dev/cu.usbserial-A106Z8ML
( p/ @2 F! ~3 X% C% L. {/ t6 O6 I6 k M# N/ O
Windows
/ f2 [ i6 P6 ?6 B/ K8 s9 ]0 s# f可以用 SecureCRT 或者串口精灵之类的程序通过串口连接。7 y f7 W( \$ ]" S4 s1 u0 h+ X% y6 u
连接以后，按几次 Enter，输出大概是6 {! J6 C8 \8 g4 J" i# l I* [7 e
<H3C>%Jan 1 21:20:28:599 2011 H3C SHELL/5/SHELL_LOGIN: TTY logged in from aux0.
! G3 J' A4 A# k4 [<H3C>. C( @# Y( i$ V0 Y/ O( k3 K7 L
Press ENTER to get started.( i+ \/ g2 x4 b8 s
<H3C>%Feb 21 14:09:42:051 2022 H3C SHELL/5/SHELL_LOGIN: Console logged in from con0.
& x: {! f! d! ~3 C; h! B+ E7 R7 u7 O# C+ L( i0 h
2. 配置 VLAN- r. _ M( ~$ H7 t
创建VLAN 4092和4094
- b; u* p) N( @1 g0 s<H3C>system-view
& b! K# X6 M1 _' d1 SSystem View: return to User View with Ctrl+Z, j9 S5 I8 I' C/ x6 a
[H3C]vlan 4092
+ R4 B$ d2 B2 p" Q[H3C-vlan4092]quit" q9 \$ S; t. R/ _% G
[H3C]vlan 4094+ ~' `/ V2 O; p! F1 c
[H3C-vlan4094]quit
) v8 y- P) G+ a. Y( E! K% [* l' {1 e9 {: s2 ^' w, ]
<H3C>system-view
$ D# k: b& I6 H9 jSystem View: return to User View with Ctrl+Z.
( ` T7 t/ s* b# @9 t% W[H3C]vlan 4092
0 _: \& ^+ @8 P! R9 m; j1 C[H3C-vlan4092]quit
' l, [ ~; y5 H. g[H3C]vlan 40939 ? a# e# i/ n) H3 V/ E6 t
[H3C-vlan4093]quit
# k L1 C+ H) \9 M4 A[H3C]no
5 D5 Y) x. m X$ d[H3C]no vla' w# f) K; u4 A6 q0 o0 e m
[H3C]no vlan 4093
, P0 v: |& a3 d! P[H3C]vlan3 g: \$ G/ H, ?+ |7 O; x# e: C! r- q
[H3C]vlan 4094+ D9 h, m5 s, ^( f- Q' N% k1 I
[H3C-vlan4094]quit* @4 O% n/ D3 V5 z; {! o
[H3C]
8 N6 K$ f+ V. c" V. h0 Q6 ~! P' l0 t! c6 M0 C
[H3C]display vlan, H- P* ?2 B$ [. N# n/ G
Total VLANs: 3
" B8 \9 V5 X5 T! Q The VLANs include:( p" N' `; p8 P X2 r
1(default), 4092, 4094( h# A; g) n0 r/ N7 Z- F
[H3C]5 J: }' l+ q! D3 n
8 h0 X+ x: E" `3 }5 ?
创建VLAN接口1并配置IP地址
/ n e" N: o$ q; M1 b: h上图是官方文档中的例子
# B+ n' B. F; v" b" p2 ~' o. s8 q[H3C]interface Vlan-interface 14 ], p5 d2 a& Y, A" N7 ^
, W: R$ P5 N1 F* C$ y[H3C-Vlan-interface1]undo shutdown& a* U1 y: w9 Y7 Y( S6 h% } U
[H3C-Vlan-interface1]ip
0 \0 t* |* e! I0 P z! [- ?[H3C-Vlan-interface1]ip address 192.168.7.1 24
& K$ y6 M9 d, i' ]" }[H3C-Vlan-interface1]quit
& h: q& r# O: r, R7 R; s$ k1 p1 f6 I7 e2 v' x, O0 [2 X* [
: y9 a. T8 a% s @- `/ v S. ^
$ c0 w1 _" b7 i P6 U9 B8 m
[H3C]interface Vlan-interface 1
" a8 ~/ p3 E9 K3 }/ P4 V, _0 [2 E3 J% z
" H4 k# S* H d7 Y2 R( }% [- t) G X) s
) w3 [1 N* n4 K% i0 ^" w7 n6 p[H3C-Vlan-interface1]undo shutdown
* H) b# o& K3 W ^) ]
7 u) B& s. u9 G, n[H3C-Vlan-interface1]ip address 192.168.7.1 24* |, p. p' f/ \9 }1 d, ^
[H3C-Vlan-interface1]quit! i) a; M2 D2 x; Q. I; \& _
[H3C]
$ g: p# V* x" E! M
S3 |% \2 L" h- c* r! s设置完以后，将控制器所在PC的IP地址设置为 192.168.49.49，可以通过 ping 测试是否连通。
, B& ~1 c/ X: f0 H/ _[H3C]ping 192.168.7.49- f' R) ?8 L% u! o; c
Ping 192.168.49.49 (192.168.7.49): 56 data bytes, press CTRL_C to break0 {1 ]8 E) `( M+ [7 i/ F
56 bytes from 192.168.7.49: icmp_seq=0 ttl=64 time=1.897 ms/ m' H* L; s# @7 A; f) ]2 u5 p
56 bytes from 192.168.7.49: icmp_seq=1 ttl=64 time=1.268 ms) g" m+ m! u U! Q8 A/ {
56 bytes from 192.168.7.49: icmp_seq=2 ttl=64 time=1.627 ms
) k" i) h7 ^% A( b- A7 N& j. u! s56 bytes from 192.168.7.49: icmp_seq=4 ttl=64 time=1.855 ms# {% Y7 w _# M4 M6 L1 T7 o: d
--- Ping statistics for 192.168.7.49 ---/ t1 K; D% K2 i4 Y5 e
5 packet(s) transmitted, 5 packet(s) received, 0.0% packet loss
& H! P7 g" a* Y' d: Lround-trip min/avg/max/std-dev = 1.170/1.563/1.897/0.297 ms
* ^6 L8 A6 Q5 d/ v
+ u! D# w1 \" z' A[H3C]%Jan 1 21:47:00:208 2011 H3C PING/6/PING_STATISTICS: Ping statistics for 192.168.7.49: 5 packet(s) transmitted, 5 packet(s) received, 0.0% packet loss, round-trip min/avg/max/std-dev = 1.170/1.563/1.897/0.297 ms.) k8 o% U8 S% }" k
* C$ t: P1 t" `3 ?* A- L' I1 x1 F$ l. e8 @$ w* O
1 v; V3 h( N, c6 a0 }4 b% h9 b4 L
3. 创建 OpenFlow 实例并映射 VLAN' p2 ]) K' Z# ^. } S0 D9 D
<H3C> system-view
- k$ Z& A$ a- i( s[H3C] openflow instance 1
. G- P- t5 _& x1 g+ G' k[H3C-of-inst-1] classification vlan 4092 mask 4093- Y" g) H; X9 h6 a: a8 x
" m$ `5 F6 H/ S/ R7 Y1 j
$ v0 H- Z4 u2 Q- C2 D6 W/ g& [" M
5 q& [$ r0 k7 v" }7 ]0 w) S) i1 G7 W<H3C>system-view
/ G, [8 ?% O+ y. }3 T: \System View: return to User View with Ctrl+Z.
0 w# u' k5 I8 `( [5 g' X: \9 L% V+ _+ M( K0 Z. e% W$ P* L" Y2 Z
[H3C]openflow instance 1) M5 W6 _2 j* |1 i6 {
: @) L4 p$ Q! K[H3C-of-inst-1]classification vlan 4093 mas9 D7 Z" E; Q& k! d& s: j+ a+ t
[H3C-of-inst-1]classification vlan 4093 mask 4094 X* f1 Q9 k) \4 K% O( I6 t
[H3C-of-inst-1]classification vlan 4093 mask 4093
4 ~/ d) A) n' p5 G7 }, [, u. q6 K& a' B5 Q7 u& H' }/ G
配置端口
' c9 `' d8 K3 Y
; \0 \4 o2 n! H2 b[H3C]interface Ten-GigabitEthernet 1/0/1$ {/ p: _6 N- t% ^( b* ]1 J
[H3C-Ten-GigabitEthernet1/0/1] port type trunk + @. y4 e1 H& E3 x
[H3C-Ten-GigabitEthernet1/0/1] port trunk permit vlan 40927 V! ]% p, K6 E% E6 `
[H3C-Ten-GigabitEthernet1/0/1] quit* G/ c& `+ `" R4 `- E* k7 F3 m
4 W0 y3 Z: e2 m; A
: c* M4 Y: r, [我们需要把希望 OpenFlow 管理的端口加入 vlan 4092 中。
% }2 K2 Y1 h& \1 k) r# m2 S其中 1/0/1 用于连接控制器，1/0/2 保留。
9 k6 @, \& Z% b, V7 V8 C5 K<H3C> system-view
7 C. p o! b$ v/ p[H3C] vlan 4092
1 E8 [/ h8 a0 ^[H3C-vlan4092] port Ten-GigabitEthernet 1/0/3 Ten-GigabitEthernet 1/0/4 ... Ten-GigabitEthernet 1/0/48% W' C# y! P& K6 o9 ?% U
[H3C-vlan4092] quit5 ~& k+ u7 t/ h9 U/ b+ P, n0 V* a
5 \+ i" m: P8 P2 @5 t8 z( U5 {
4. 配置控制器1的IP地址并激活实例% o' J0 u; G" Z5 A
[H3C-of-inst-1] controller 1 address ip 192.168.7.49
. d1 m4 Q6 Q5 t! v# s: h7 T0 v[H3C-of-inst-1] active instance
, N5 j1 D: U$ k0 S2 h- \1 A, x0 }* y& ^: I: I
5. 验证配置
8 [) ~7 l" H& L1 j4 Z& A% x<H3C-of-inst-1> display openflow instance 1
# T0 q/ k# A+ U5 r2 q1 o, RInstance 1 information:
+ o; q+ J8 w6 N1 \Configuration information:7 p% S- U, q+ m/ r
Description : --2 G9 U# Z; z# Y6 n0 _
Active status : Active! {, T/ V. X- N! G& S" d/ M
Inactive configuration:
+ [& \! V, i2 d7 J None
5 v: I6 b+ P& X( s+ [ Active configuration:4 B/ g3 @2 r' `! M* l* B0 R
Classification: VLAN, total VLANs(1)/ K, N7 q% I# g6 y4 {
4092" Z/ _) z$ o. h6 p: T2 A3 u$ p4 T
In-band management VLAN, total VLANs(0)! P5 C2 m; Z1 w
Empty VLAN& K8 a l& x H% P- l
Connect mode: Multiple
, U6 R$ y0 [- b# v MAC address learning: Enabled0 C8 ~. F1 e( z- B
TCP DSCP value: 64
* i0 V0 n0 {' t4 I. C Flow table:
2 H _9 Q: E, U& X( g1 K1 \- t' c Table ID(type): 0(Extensibility), count: 9) ~2 ]3 R- {# i+ V; b4 W
Flow-entry max-limit: 65535
" ]6 _+ X7 v1 ]) T+ E. c: O7 |' d! | Datapath ID: 0x000188df9eeaaaaa
* V% v$ i0 \0 v$ I$ `& c5 p& } Default table-miss: Drop$ |7 m! P! ]& F0 Y: ?; Z" e
Forbidden port: None
! z. t) J2 H0 z7 F Qinq Network: Disabled. Z8 u( Q$ j7 P- ?
TCP connection backup: Enabled) a0 |1 a, C, [ R
Port information:% |7 A/ T2 `8 N8 U# |* U- R% v b
Ten-GigabitEthernet1/0/1
7 U+ p' Q& D0 |' G) R2 i" D Ten-GigabitEthernet1/0/3
) _7 O3 S1 t+ d: k* A5 U/ X1 ] Ten-GigabitEthernet1/0/4! S, C; \2 Y9 {3 s$ D, a
...* R# ~; g S$ T( p- U' O- E' B
Ten-GigabitEthernet1/0/47
( T; n+ P& Y% s3 B2 Q$ ~ Ten-GigabitEthernet1/0/48& X; U7 t b$ }4 g- o6 \5 j
Active channel information:
! l4 D9 F' L% w$ n f Controller 1 IP address: 192.168.7.49 port: 6633
! S) _; y& k/ L0 J. t w0 ]. ~2 k5 a2 i& z, {* Z+ s+ D
然后就可以在 PC 上启动控制器，等待交换机连接。
, x( ~( T3 ~5 a% M% ~
& r9 ?! G+ T+ u4 G2 ~3 V$ c# l A q: _8 J9 a. O- r
[H3C]display openflow instance 1/ T! ?0 Y3 Y+ a E
Instance 1 information:) P! ]4 j% k* E. v
Configuration information:
) X+ G* L, t8 T# S) s Description : --( o8 J# c; c1 J% O* G
Active status : Inactive
0 W ?0 X. z5 e, q0 h' r Inactive configuration:
- D& B. j) I/ X4 `7 t" Y! h Classification: VLAN, total VLANs(2)1 {. \; B) L$ n5 {& U4 j
4092, 4094: E( X8 j+ ?" m% B W- M
In-band management VLAN, total VLANs(0)1 q6 H# G4 Z9 T5 T2 a7 j
Empty VLAN
; k9 \) f$ Q' | Connect mode: Multiple
" P) {) Y$ s2 m0 l! [! [, \& L MAC address learning: Enabled) v# O, H2 v) r2 t0 ^$ ?
TCP DSCP value: 10
8 }( r# @5 P$ G3 u3 @7 i' z Flow table:: _% q4 ]& s0 c7 E5 c2 D, u0 x
Table ID(type): 0(Extensibility)
( H! |( }5 Q* P) g0 o: I Flow-entry max-limit: 65535/ F/ ~3 r9 P5 E
Datapath ID: 0x0001a699068a0100( o7 y6 w) ?6 K" s- `* R
Default table-miss: Drop' F4 B7 {) E I# f
Forbidden port: None3 \9 m3 z5 Y0 h& ^# M; X0 L
Qinq Network: Disabled
4 q9 m8 \/ G7 M/ S0 p Q! n TCP connection backup: Enabled
$ q8 Z! I& W; Y# P: c Active configuration:
5 E6 n5 h, B* k- [; E& V; L None1 }' j' A8 n; t: o$ [7 A& S6 k z
8 ], q5 a* J* V1 e5 ]8 ]
+ y7 v4 r3 B( `* Q: i% s
|
|
发表于 2022-2-21 13:51:31