- 积分
- 16840
在线时间 小时
最后登录1970-1-1
|
马上注册，结交更多好友，享用更多功能，让你轻松玩转社区。
您需要 登录 才可以下载或查看，没有账号？开始注册
x
H3C 交换机 OpenFlow 配置指南; w* ^8 O3 }1 e L0 p
目录* m* C% L) |: N1 ^5 g+ ` B) P
Console 连接交换机4 T$ ~; ]* A' P y
配置 VLAN1 N7 u2 a/ x* H% R9 E3 V3 E8 z# W
创建实例并映射 VLAN
0 {: o$ X$ t$ f" B配置控制器1的IP地址并激活实例) Q& H6 h ]. U% P3 X
验证配置9 h( H: C$ g' ?4 o: `: @8 I
1. Console 连接交换机
8 h; K. O/ l+ i" q2 x* s1 [6 f笔记本连接需要一个 USB 转 RS232 串口线。( ^( _: `- N6 O
MacOS
) p' | ^2 \+ }" \连接后，MacOS 下可以从终端查看设备状态0 V: ^+ P' U3 M6 o' q- I
bash $ ls /dev/cu.usbserial-*) x- N- r, j) D9 N* j `( }) s. ]1 U
/dev/cu.usbserial-A106Z8ML' Z; |$ t7 ]9 f* Y5 I N7 y
" \3 B; |; A3 W" Y# K% K9 p
* z. }, p: K* l& @
然后可以用 screen 连接。! ^6 j2 h0 I" I/ T$ i7 g
screen /dev/cu.usbserial-A106Z8ML1 M# |2 A4 U" a) i+ R0 B% O$ _" U9 g
6 J! @; t1 ?6 {$ k3 W% Q7 G+ \ b% BWindows7 ^" o+ z0 Q8 r9 k" f
可以用 SecureCRT 或者串口精灵之类的程序通过串口连接。4 \' g4 R/ @3 O x
连接以后，按几次 Enter，输出大概是
5 L$ ^! E. Z/ z3 ]. @; B<H3C>%Jan 1 21:20:28:599 2011 H3C SHELL/5/SHELL_LOGIN: TTY logged in from aux0.! L2 _' _: q+ S: l8 E# P
<H3C>
5 f4 u$ h, h- l' ^Press ENTER to get started.1 D4 N: p d0 y& F, F/ y$ |
<H3C>%Feb 21 14:09:42:051 2022 H3C SHELL/5/SHELL_LOGIN: Console logged in from con0.' O1 q! n5 @4 e. c/ |* k3 G& ~
7 D5 ^1 q; s- w5 W) {! O
2. 配置 VLAN9 D2 R" z# n# B o' Q
创建VLAN 4092和4094
2 j* m7 v: h3 |" X7 ]8 m; Y5 J( J<H3C>system-view
0 m; o( i- j Y. e$ h$ B* r! U# {; iSystem View: return to User View with Ctrl+Z
: f; L8 t4 H& O& h( N& p[H3C]vlan 4092
: f2 b6 \9 _1 V9 M- A7 h" v5 k/ e[H3C-vlan4092]quit
|2 k; `4 B' U! U6 O( r[H3C]vlan 4094/ Z% {0 Z! h. ~ {$ w
[H3C-vlan4094]quit
# E- {5 v6 R' t
% G7 m- G/ W) R) n: ?9 S<H3C>system-view
, G0 r% o ?) _% }6 \! VSystem View: return to User View with Ctrl+Z.
0 y+ k' j. H0 q& ]' W2 p! y[H3C]vlan 4092; t8 L) v p0 a/ d$ Y5 }* }0 {
[H3C-vlan4092]quit3 ?1 {" P2 |5 s) A
[H3C]vlan 40937 Y" g5 U1 ]; p7 V$ D _
[H3C-vlan4093]quit. N& k# `. ~! w. D' i+ H, k
[H3C]no& Y4 d1 U+ \! b( w8 p# I5 g
[H3C]no vla
c6 M R1 [( x8 _8 \ [[H3C]no vlan 4093& s3 }' K# I& O- x9 E
[H3C]vlan
) D* [ p: P6 I9 n" {0 k, L[H3C]vlan 40945 C' ^7 p+ t! o y
[H3C-vlan4094]quit
6 w2 N" l/ w, q1 ?[H3C]( y+ S" j. e2 i }2 |# v
! e" t6 H5 L, f4 T$ ?$ c" J# D n[H3C]display vlan
6 P" J+ [; H: { Total VLANs: 3& ]5 Q% Q, ^$ E- i# p( W4 B
The VLANs include:) S2 E' {8 s3 {2 L7 q( u4 O7 U
1(default), 4092, 4094
" h* p0 o4 n3 f G" d* P5 `1 {4 ?: ^[H3C]
* P! V: b$ F' X* H; w/ t/ Q7 u, ^+ X W1 a" P; M
创建VLAN接口1并配置IP地址$ b0 f3 K7 H4 R
上图是官方文档中的例子, \9 ?* ?, B$ V
[H3C]interface Vlan-interface 1) p* q5 I: D2 Y
6 m9 @5 B$ F& j K[H3C-Vlan-interface1]undo shutdown
3 P, V6 V. }! `" G h" k) D; k! [[H3C-Vlan-interface1]ip! n3 [! ?6 K/ s2 T& K
[H3C-Vlan-interface1]ip address 192.168.7.1 24 u2 ~6 a' |0 l9 h
[H3C-Vlan-interface1]quit
7 x2 [- P0 F, B: i( ?7 l8 J
6 r# V4 f! M. B0 {+ C: ]& g; U) u$ E: p" y9 l
z- v# T# w/ D5 U% D" m% J: M[H3C]interface Vlan-interface 1
0 Y, h- s9 d' u0 M, D# o
0 `5 B! J' ^" N& c9 Q4 ~" P. Y) n& c4 h; e, }) v
/ o. A0 x9 Z9 L+ h; E( U s' a. k: P
3 `8 |) l' W) j. b[H3C-Vlan-interface1]undo shutdown& k) a- ^, d+ ?/ A" |
1 k1 K, E+ p* A. ?5 a- N
[H3C-Vlan-interface1]ip address 192.168.7.1 24
* P4 e' C! A; p6 W* D* `# X I. j[H3C-Vlan-interface1]quit
! B2 ?- w+ U9 l[H3C]8 g8 ~9 H; I9 m, m
+ {/ g0 ~- [! u+ ~4 U设置完以后，将控制器所在PC的IP地址设置为 192.168.49.49，可以通过 ping 测试是否连通。
* B. B# _5 a' Z0 {6 n[H3C]ping 192.168.7.49: W& G4 K |) U& {1 [; N3 Q* |
Ping 192.168.49.49 (192.168.7.49): 56 data bytes, press CTRL_C to break# o1 c3 g3 d5 O9 g
56 bytes from 192.168.7.49: icmp_seq=0 ttl=64 time=1.897 ms5 q% n5 }5 {' g! u6 n0 S
56 bytes from 192.168.7.49: icmp_seq=1 ttl=64 time=1.268 ms
( q1 a ]' z& l6 W- E. O6 ?56 bytes from 192.168.7.49: icmp_seq=2 ttl=64 time=1.627 ms
s7 c9 M6 K; N6 m& ~: a! o1 z56 bytes from 192.168.7.49: icmp_seq=4 ttl=64 time=1.855 ms# R! b( Z; i5 U! V; Z; X. Z. H8 |5 G
--- Ping statistics for 192.168.7.49 ---4 G6 `. {$ Z* G; Q% d
5 packet(s) transmitted, 5 packet(s) received, 0.0% packet loss
0 W# d+ Q! k5 Y9 l" F& B% Nround-trip min/avg/max/std-dev = 1.170/1.563/1.897/0.297 ms
6 O( X3 j& U5 V" r* R2 X: ?( O x
. z- r Z, b& X' E: d5 q[H3C]%Jan 1 21:47:00:208 2011 H3C PING/6/PING_STATISTICS: Ping statistics for 192.168.7.49: 5 packet(s) transmitted, 5 packet(s) received, 0.0% packet loss, round-trip min/avg/max/std-dev = 1.170/1.563/1.897/0.297 ms.9 Y* v3 f: F2 Y! P# @
% g9 B( ~" k" P9 H9 u% n. z& e/ s, E) i6 s' ~/ I
4 T0 H6 F# p' G4 Y( F; m
3. 创建 OpenFlow 实例并映射 VLAN; ] U. h& w1 N b
<H3C> system-view. P* O' J+ G5 N( b/ O
[H3C] openflow instance 1
! s" O0 {! b+ Y! P' q7 {[H3C-of-inst-1] classification vlan 4092 mask 4093
- F; j- P" N3 m- y w% }- i6 r3 j$ y/ r
, R8 n# q. Q" `9 v, M; \
! C( Y/ V; m! R! {* j7 [<H3C>system-view
7 Z! P$ k. C9 F( {; p0 BSystem View: return to User View with Ctrl+Z.
7 X! N! q& [0 ^8 E8 S! L4 B/ t
" j- d* b# X- A[H3C]openflow instance 1 d& V3 _" Z! c1 \# {2 ^5 i$ J: l
; k4 n- d* o p. a9 m& Q8 i5 H[H3C-of-inst-1]classification vlan 4093 mas
q- w+ M; K% O$ r8 M! m! F0 p) q8 B[H3C-of-inst-1]classification vlan 4093 mask 4094
{( k$ A$ P( g/ q[H3C-of-inst-1]classification vlan 4093 mask 4093& J3 r6 F( _, P
7 ~* L# Q i# H. ~( |# ]
配置端口
6 b% z# v) H" J2 Q( F- g" R1 O8 ?: d4 j8 T+ N1 a0 f
[H3C]interface Ten-GigabitEthernet 1/0/1: }7 f) q! N- t
[H3C-Ten-GigabitEthernet1/0/1] port type trunk ! i4 B( X4 p) N6 }, ]) h$ a
[H3C-Ten-GigabitEthernet1/0/1] port trunk permit vlan 40920 s; a s5 J: w' [2 h
[H3C-Ten-GigabitEthernet1/0/1] quit- H) o S; [1 y% f. s
$ o9 \3 |, ?1 q, _: d1 c" g
* q) ]2 V: O# z$ _0 ^ {3 L: z. L$ A
我们需要把希望 OpenFlow 管理的端口加入 vlan 4092 中。6 N1 C+ A9 B* a9 n
其中 1/0/1 用于连接控制器，1/0/2 保留。
, o3 \: W, L; y3 O. R8 \<H3C> system-view6 i- p" }; z. x5 }
[H3C] vlan 4092, G! O5 M; i; @
[H3C-vlan4092] port Ten-GigabitEthernet 1/0/3 Ten-GigabitEthernet 1/0/4 ... Ten-GigabitEthernet 1/0/48
; a, v: t2 E. e! r1 c' U[H3C-vlan4092] quit
4 m; Z) H# t7 ]: Q+ ~8 y$ _7 E5 O0 q8 P
4. 配置控制器1的IP地址并激活实例
$ F; I3 r+ G7 _1 M5 ~( L# W[H3C-of-inst-1] controller 1 address ip 192.168.7.490 y% b: i% ~# c1 U0 h& p& G; v& Z
[H3C-of-inst-1] active instance
6 _# L) J; C4 O6 ?1 K+ c4 q- u/ V
5. 验证配置5 r( o* _$ K3 c8 h7 |
<H3C-of-inst-1> display openflow instance 1& Q$ q+ w! @1 m: X, B/ X
Instance 1 information:
1 M& g* i2 q8 n9 Z0 q9 @* oConfiguration information:, { j5 F! o- ~" ?- d
Description : --; p/ J) }$ t \% T1 E
Active status : Active
5 q* t9 Z' N; b7 E' c/ z! X Inactive configuration:
$ w+ O, T/ u# t" l- d9 H( D None2 E# i$ _! _9 O( G0 T
Active configuration:
8 u' h/ Q; o& U* R, M. p6 C Classification: VLAN, total VLANs(1)" O1 ?. l+ Z( }* k: `
4092% O) v4 k5 o0 O
In-band management VLAN, total VLANs(0)3 E- e& j: n5 y: l3 z' @7 N
Empty VLAN
- F5 _$ w1 {% X) P: w/ @6 ]7 E" V Connect mode: Multiple+ M& c$ a/ [( L: n
MAC address learning: Enabled
4 e; I# D R9 U$ |+ n3 R3 F TCP DSCP value: 642 J( ^' Z0 |- I1 i0 f. P9 u
Flow table:. T3 j0 ^1 b/ L5 L& F! _
Table ID(type): 0(Extensibility), count: 9( [7 f. _9 i0 q1 g ^
Flow-entry max-limit: 65535
4 X3 g# j2 L% i( r Datapath ID: 0x000188df9eeaaaaa% b# U: v: {9 `3 Z: i. Y
Default table-miss: Drop9 i% e" S; q% z; L& p
Forbidden port: None
5 F( n: i) w7 a& D% N) X Qinq Network: Disabled* J7 I. @" U! M6 B# v, ^
TCP connection backup: Enabled
$ f' U% _2 O+ R. j* iPort information:' s+ p, w; h* k5 B& S
Ten-GigabitEthernet1/0/19 m8 t6 i; ?+ z
Ten-GigabitEthernet1/0/39 G6 f, l9 D; ~0 f2 o7 T% W, i7 E* o
Ten-GigabitEthernet1/0/4% H4 C( t; ]- m
...
0 s% j# G6 O# x0 ~* b# X Ten-GigabitEthernet1/0/47
9 m* R5 I' g+ p( @* t Ten-GigabitEthernet1/0/485 R5 v. c5 p( A+ o8 Y2 t
Active channel information:
* ]) N: ~# P& I* m' }0 k; K) |) C0 U Controller 1 IP address: 192.168.7.49 port: 6633
, ?# Q# h. x' j% h' G5 x
8 U7 S2 I: ]# f然后就可以在 PC 上启动控制器，等待交换机连接。" E# A7 U# q x5 W
: Y* P; A2 e7 f/ A$ t
. v; q. M1 G! G6 M' b9 \( A[H3C]display openflow instance 1
. Q- W S/ A( E/ _$ L F; s' YInstance 1 information:
1 a l I4 o/ y8 T6 z" ^Configuration information:
o8 f1 d0 x7 \' _( H* E Description : --2 g# d c& x% S
Active status : Inactive
) b+ p- s& o: V: W Inactive configuration:5 U r5 ~4 f6 r# x
Classification: VLAN, total VLANs(2)
3 g* ], w& ?! {$ {# l 4092, 4094
. i! t: e5 E4 s# u8 F+ p In-band management VLAN, total VLANs(0)) w: c4 d3 {, ?4 t2 c
Empty VLAN
5 h* M$ O: q0 H0 D- ~ Connect mode: Multiple4 J5 @+ W3 d6 p+ p' |
MAC address learning: Enabled
9 O& V7 ?* m) ]( y) Z TCP DSCP value: 107 ~& u1 @; | y+ P% ?
Flow table:
( u) f2 A7 R# |7 Y* G7 l Table ID(type): 0(Extensibility)
8 w7 w, D6 m0 i, Y Flow-entry max-limit: 65535! O3 E9 O. x: o( K, c$ _. E
Datapath ID: 0x0001a699068a0100
8 t L. m7 A+ C0 I. x Default table-miss: Drop% R3 h4 h5 S! t v# I( }" E
Forbidden port: None& _8 G1 O0 F. L
Qinq Network: Disabled
: M7 b- H7 H7 A TCP connection backup: Enabled2 _/ X2 S- T) [! c
Active configuration:
! _3 G1 t) I% J None
( X: `$ ]+ B5 D" o- q: ^5 O8 \+ e" L6 c( V
7 ]# U5 E; q3 U2 d- S* v; y |
|
/4 
窥视卡
雷达卡
发表于 2022-2-21 13:51:31
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
千斤顶
照妖镜
