|
|
H3C 交换机 OpenFlow 配置指南
$ Z+ F4 ?- r+ W目录' u7 S& @" g% H& r" p7 ^) h' c' {0 o
Console 连接交换机
: g0 u8 l" [4 w, H- l配置 VLAN
, V5 k+ }! l! c) @7 H) Z3 M创建实例并映射 VLAN
, }9 V5 c. a. B配置控制器1的IP地址并激活实例" {0 `0 v; B- p9 F& @0 ^* [
验证配置
5 k0 G. \6 x, L9 N$ d! h' j$ E1. Console 连接交换机
! h9 U3 c4 `# r; o7 f j笔记本连接需要一个 USB 转 RS232 串口线。
% K' N# K2 @) Y- m8 AMacOS" q. v& N A, x. F6 D. Q
连接后，MacOS 下可以从终端查看设备状态
& W6 v. h v( @8 h9 A8 E `bash $ ls /dev/cu.usbserial-*6 S% A2 z# i& V$ V) }
/dev/cu.usbserial-A106Z8ML2 N; V' d. u8 z7 M/ \ i
' K. P: \# @- B' n" h7 C
1 ~6 Q: @ B: M5 E. B然后可以用 screen 连接。0 W$ Y! Q- E2 A" R) P
screen /dev/cu.usbserial-A106Z8ML
8 I% W( B6 ~: |( O- m3 }5 Z& v6 B" |) u
Windows4 B$ z+ v$ W0 C2 Y, E
可以用 SecureCRT 或者串口精灵之类的程序通过串口连接。
/ R3 c2 t7 I7 V) o连接以后，按几次 Enter，输出大概是
9 c0 k1 O7 i, c `( Y<H3C>%Jan 1 21:20:28:599 2011 H3C SHELL/5/SHELL_LOGIN: TTY logged in from aux0.
% d5 K; Z7 S) T. X<H3C>, J/ Z. m# B$ [/ G; ^* r5 Z
Press ENTER to get started.
& ~1 R1 Z2 @* Z) N2 @6 X( n C<H3C>%Feb 21 14:09:42:051 2022 H3C SHELL/5/SHELL_LOGIN: Console logged in from con0.
0 v; U1 V! K1 `, a( F+ G& v: O1 Z* J4 Q% _6 c7 T
2. 配置 VLAN4 N0 l5 m2 Z' d w3 C. W
创建VLAN 4092和4094
2 q, d) d1 w1 g% ^6 \% [4 }2 e<H3C>system-view2 @, l) x1 o6 D( ^
System View: return to User View with Ctrl+Z1 m3 u0 I/ |$ e* \1 Q* [' i
[H3C]vlan 40926 a/ M, R# r. H3 ^
[H3C-vlan4092]quit/ U; a& k8 i! a. e
[H3C]vlan 4094# P; J3 n- C$ [( \% ^2 x7 Y& A
[H3C-vlan4094]quit
2 }( l4 D9 S2 k( n; K. G! h: c( j7 S9 r
<H3C>system-view( @/ U; ~3 T; ]0 ~7 P
System View: return to User View with Ctrl+Z.
/ @: R/ ~2 E) M. W9 w& ~[H3C]vlan 4092
1 \1 Z; `# J5 \# r[H3C-vlan4092]quit9 t5 V1 R' O% F- a
[H3C]vlan 4093
# X3 \2 ^$ j- G8 V[H3C-vlan4093]quit
% m' L9 V. E7 I[H3C]no( g) _4 y. s. s
[H3C]no vla2 Z$ E( C% P6 L5 n. w
[H3C]no vlan 40937 f7 A/ ~7 C7 V* \. t
[H3C]vlan
, m# Z W( m2 s. Q6 ^[H3C]vlan 4094- Z4 ]9 n$ J( d1 ~# b3 k. T4 _
[H3C-vlan4094]quit
) E7 T9 U% g4 [1 w[H3C]9 I1 h& G. r) p1 ~4 ^* I
7 |* I0 I2 j8 F/ J[H3C]display vlan- C& f& l- s5 ?% |8 }; z+ ^
Total VLANs: 3
3 I) {% \1 t+ ~ The VLANs include:6 T$ k/ T8 H0 C- _8 p
1(default), 4092, 4094, ]7 t; r! ?. w% a! T% G! w! B% E
[H3C] B; M* z/ V- ~) I
- o" F: P c$ i" T+ K
创建VLAN接口1并配置IP地址6 b/ d2 I! O1 x. G
上图是官方文档中的例子8 e& }) g' E. d" @- N
[H3C]interface Vlan-interface 1
6 G6 c4 e9 a4 K! {/ e! z$ K
' a9 Q- C: X4 H P4 S[H3C-Vlan-interface1]undo shutdown
6 X& M4 f- g) L3 }[H3C-Vlan-interface1]ip
: A3 `. m/ R A: B& p4 H[H3C-Vlan-interface1]ip address 192.168.7.1 24! `3 n; d7 v4 s# b! h7 R0 S3 h% U0 r0 Q
[H3C-Vlan-interface1]quit' c1 G- H0 S" c" C: a% |
+ Z/ K' t* K* ^2 ?4 U
- f- u* C5 D8 {' Y1 I' D; ^
, E! G8 g1 I, i% b4 i$ e! s" r[H3C]interface Vlan-interface 15 L: T( E3 l: L. C* `' `0 p; I- |, n
, j, D. j8 O3 A) x" A# d. G' U8 e. Q; r$ o* T
) G3 J8 x! W8 y1 p6 L; E4 {5 z# ?2 G, A
[H3C-Vlan-interface1]undo shutdown p. ~5 }1 o5 l7 d& d
) C. P$ X1 z$ v ~7 ^[H3C-Vlan-interface1]ip address 192.168.7.1 24
8 N o$ ~+ X* N# ]/ l, X[H3C-Vlan-interface1]quit
5 i% U* L [4 N( H[H3C]
5 A* T( r1 { P6 O: Y# `& h5 q( g
% J7 ^- j# `8 d0 L6 `设置完以后，将控制器所在PC的IP地址设置为 192.168.49.49，可以通过 ping 测试是否连通。+ N$ D% |( p7 [' ?0 g7 o: D
[H3C]ping 192.168.7.49 H: p, Z* K2 C% x9 U
Ping 192.168.49.49 (192.168.7.49): 56 data bytes, press CTRL_C to break1 l% W3 [# r+ r+ y6 I4 y6 t( U
56 bytes from 192.168.7.49: icmp_seq=0 ttl=64 time=1.897 ms
6 x+ g* G% }9 c" j. @# R" x56 bytes from 192.168.7.49: icmp_seq=1 ttl=64 time=1.268 ms% C3 g" ^5 g% Y' h0 f( G4 |, l* E k
56 bytes from 192.168.7.49: icmp_seq=2 ttl=64 time=1.627 ms; C, V. n7 g* Z; G/ S a* s' b( t
56 bytes from 192.168.7.49: icmp_seq=4 ttl=64 time=1.855 ms
0 J! L! k8 I/ z4 P( Y; @( ~8 Y--- Ping statistics for 192.168.7.49 ---
7 m3 V m# @5 j8 E y5 packet(s) transmitted, 5 packet(s) received, 0.0% packet loss3 D( G* Y: ~! h: d8 U# x
round-trip min/avg/max/std-dev = 1.170/1.563/1.897/0.297 ms
9 K/ [: R) [( f) h' I/ G
0 o1 ~1 r9 G0 f7 m[H3C]%Jan 1 21:47:00:208 2011 H3C PING/6/PING_STATISTICS: Ping statistics for 192.168.7.49: 5 packet(s) transmitted, 5 packet(s) received, 0.0% packet loss, round-trip min/avg/max/std-dev = 1.170/1.563/1.897/0.297 ms.9 r: X2 ?2 g3 b: M
9 z; N) ^1 z# D% ^
! }, T: @* G* f3 c+ a
~+ w! G/ d, ]/ o3. 创建 OpenFlow 实例并映射 VLAN
- z1 }2 K9 F' P+ }/ n- @8 p<H3C> system-view% b* _- M; e5 H: |; R4 t3 M0 {0 b
[H3C] openflow instance 1
! x' ]; t4 p( {0 @0 x6 @3 N[H3C-of-inst-1] classification vlan 4092 mask 4093! Y& ]# M2 G. P) ^' y
$ ~4 k* M2 F2 I: p) T; R- p3 y. H. F5 G2 K# ]% T8 [
5 p( A V2 \/ O d& I
<H3C>system-view' ^. m5 V# R3 H! h1 F- `$ R8 {
System View: return to User View with Ctrl+Z.
' z" V' v8 Z7 e- F; Y/ C
n$ v$ N( i9 m! r4 X: C. F[H3C]openflow instance 1! X: k O2 r* o. a
* ~6 K# F2 A( y" x, J[H3C-of-inst-1]classification vlan 4093 mas9 o: {# Y6 s% I8 i
[H3C-of-inst-1]classification vlan 4093 mask 4094( O/ \$ A& [/ M) k1 T) j3 x7 l8 e
[H3C-of-inst-1]classification vlan 4093 mask 4093
6 C {$ i5 H* _0 }1 Q7 ]+ [: ]4 P- o3 P1 g) B) H, [5 s8 R
配置端口& F" g4 j( p% q+ x( h( `
' a S$ T! o" ]' C% P& K# c[H3C]interface Ten-GigabitEthernet 1/0/1
! Z! q! M' j+ V( ~( P3 D$ o9 _* X[H3C-Ten-GigabitEthernet1/0/1] port type trunk 0 p& m: t; S" v" q0 o7 m
[H3C-Ten-GigabitEthernet1/0/1] port trunk permit vlan 4092
# c& ?3 V) } o6 o, n, e$ K[H3C-Ten-GigabitEthernet1/0/1] quit
6 `/ v# w* Z' u4 m8 J
. I. _# l8 O0 D& P/ G% R' _& S% O& D! {5 m; g, W/ }+ ~! J
我们需要把希望 OpenFlow 管理的端口加入 vlan 4092 中。$ o6 N+ b5 Z. ~2 N
其中 1/0/1 用于连接控制器，1/0/2 保留。0 Q+ c& q* J- f" x2 G
<H3C> system-view
, h% i4 B8 E5 ?; U. H+ `[H3C] vlan 4092
# ~5 {) |- c: [* N! z[H3C-vlan4092] port Ten-GigabitEthernet 1/0/3 Ten-GigabitEthernet 1/0/4 ... Ten-GigabitEthernet 1/0/48/ U' }1 B3 l% E
[H3C-vlan4092] quit
* G; _$ |$ s! I% {0 Z- A. \4 ~. C( t) a& y4 g, y
4. 配置控制器1的IP地址并激活实例
3 c2 K7 q5 y2 W0 \6 \[H3C-of-inst-1] controller 1 address ip 192.168.7.49
' b. H' k1 K+ z: a) P. G3 T[H3C-of-inst-1] active instance
, A& V9 h2 _8 R4 P M0 h7 i
5 C3 h. C9 e$ ^. e( G1 V2 D+ d- ]5. 验证配置
' ^6 F9 f l1 H' V<H3C-of-inst-1> display openflow instance 1: C' [8 h, B$ ?5 s9 h: C7 p* r# y( I
Instance 1 information:
9 v" ^. O. W8 m2 n( |" H- QConfiguration information:
9 c- |+ H6 z$ E1 ~ Description : --
$ U( v- X5 h1 W% t8 J) d Active status : Active
e( L0 c- u8 I) ?: y' { Inactive configuration:
( R" n4 i8 |( C: A% a1 F% G None
3 u& s- O8 J0 J% V6 G Active configuration:
; ]3 E, B8 Y9 D- d2 o, t# L9 y! z$ \ Classification: VLAN, total VLANs(1)3 U5 v& R/ B. U
4092
! E1 i' {$ X; r2 t) L In-band management VLAN, total VLANs(0)
5 q& ?5 C- j* [" R+ o7 B Empty VLAN
- s5 P8 d a6 R! K3 a' D Connect mode: Multiple
/ o% R e, F* P5 R$ _- ] MAC address learning: Enabled
0 S$ ^0 q8 x3 [4 h9 C6 W TCP DSCP value: 64
4 y9 g7 E5 ^" K Flow table:+ w; F8 @( t* s9 ]* N/ n
Table ID(type): 0(Extensibility), count: 9! Y d- V5 Y- w3 v# d$ o
Flow-entry max-limit: 655353 O+ X# a0 X3 d! @
Datapath ID: 0x000188df9eeaaaaa5 k& d$ `& v/ G. \# n9 l+ W3 [0 a+ i
Default table-miss: Drop
* l: n1 H6 E. p0 n Forbidden port: None1 |0 M/ j+ M$ G, \/ F0 k/ b
Qinq Network: Disabled' ]8 X' V4 M/ k2 D0 A5 L/ J' {
TCP connection backup: Enabled
3 P, o: V7 y$ APort information:% G7 v' h; f/ W8 c7 [
Ten-GigabitEthernet1/0/1& C' ~0 z5 J! d( Z# H
Ten-GigabitEthernet1/0/33 e9 W) k2 @+ S4 \8 W
Ten-GigabitEthernet1/0/4
% B% u. I8 a2 x# W2 q1 M; M ...
* ~9 g! v) m. Q Ten-GigabitEthernet1/0/47
, t3 P {$ C& | Ten-GigabitEthernet1/0/487 _3 Z4 Q! v; I# d. F
Active channel information:0 p6 O3 _9 p4 @
Controller 1 IP address: 192.168.7.49 port: 66331 z) q* P5 M3 l6 a; N
3 d8 ]3 w' c8 Y5 G. R
然后就可以在 PC 上启动控制器，等待交换机连接。% q. L, e e7 c. M" a9 ~, H; {7 [
, d& h7 T$ n! i/ b* `
% S P$ f+ J( d[H3C]display openflow instance 1 D8 `: m7 ]; O c) H8 e0 r
Instance 1 information:- g2 e. D3 T5 E- k- c" ^
Configuration information:
2 b( `0 r; V; M" x+ d Description : --
' ?4 H5 F* J7 E Active status : Inactive$ d9 G( X7 o/ W f3 u1 t3 g/ v$ n
Inactive configuration:) ^4 H4 |& L! N: e3 h
Classification: VLAN, total VLANs(2)
B2 \- W) {. r5 m5 I8 z 4092, 40941 i1 Q4 c& H/ o/ U5 O+ M) U
In-band management VLAN, total VLANs(0)
- F1 `8 e- `2 Y I5 s$ t- { Empty VLAN2 }+ ]. v2 h. l' L: Z1 T
Connect mode: Multiple2 c | c% A: q, n$ Y
MAC address learning: Enabled( x; u+ l$ F* }1 X$ c) u5 c; T H# b
TCP DSCP value: 107 v# I/ R+ i, U5 J7 h
Flow table:8 J" q0 x4 F. A1 i! W6 j' u
Table ID(type): 0(Extensibility)! v& h0 S' `- f4 }+ g" m
Flow-entry max-limit: 655357 l* B6 @+ U# H" }4 q2 G( C G! O
Datapath ID: 0x0001a699068a0100
$ h* w2 h% {1 ^- E5 M. ^1 ] Default table-miss: Drop
5 [/ I9 v" [& o8 e8 d* y Forbidden port: None
6 _* P% R! i4 L, Y8 q* B Qinq Network: Disabled
2 u5 p" f* G4 X7 q. T9 r+ J8 p* C TCP connection backup: Enabled
. J2 R: ^, F4 d Active configuration:
7 Y) f5 ~8 w) p! @3 x None
! Q% u/ p) w" }: t ?9 ]1 j5 z; o$ M& I% ~, o2 ~/ D9 ^+ P+ t
: t6 I) m( ` F2 [7 c
|
|
发表于 2022-2-21 13:51:31