Просмотр информации об ONU на Huawei SmartAX MA5600

Базовая настройка коммутаторов и маршрутизаторов huawei

Basic

вход в режим конфигурирования

system view

вернуться на уровень назад
quit

команда отрицания (аналогично no в cisco)

undo

настройка пароля доступа по консольному порту

user-interface console 0

authentication-mode password

set

authentication password cipher …

настройка пароля доступа через виртуальный терминал

VLAN Principles

создание

vlan batch <ID VLAN>

interface <тип порта> <идентификатор порта>

port link-type access

port

access default vlan …

interface <тип порта> <идентификатор порта>

port link-type trunk

port trunk allow-pass vlan <ID VLAN>

port link-type hybrid

port hybrid untagged vlan …

port hybrid tagged vlan …

port hybrid pvid vlan …

…

создание L3 интерфейса

interface Vlanif <ID VLAN>

ip address <IP-address> <netmask>

Link Aggregation

L2 LAG

interface Eth-trunk 1 – создали LAG группу

interface <тип порта> <идентификатор порта>

eth-trunk 1 -забиндили интерфейс

interface <тип порта> <идентификатор порта>

eth-trunk 1 -забиндили интерфейс

L3 LAG

interface Eth-trunk 1 – создали LAG группу

// переход интерфейса к L3

undo portswitch

ip address <IP-address> <netmask>

interface <тип порта> <идентификатор порта>

eth-trunk 1 -забиндили интерфейс

interface <тип порта> <идентификатор порта>

eth-trunk 1 -забиндили интерфейс

LACP(link aggregation control protocol)

system-view

lacp priority … (The smaller the LACP system priority value, the higher the LACP system priority.)

int Eth-trunk 1 – создали LAG группу

mode lacp-static -выбрали режим

lacp preference … (The smaller the LACP interface priority value, the higher the LACP interface priority)

STP

выбор стандарта

stp mode stp

активируется глобально и на интерфейсе

stp enable

вручную указываем корень в топологии

stp root primary

stp root secondary

вручную указываем bridge priority

stp priority 32768

на интерфейсе

stp disable

stp port priority …

display stp brief

display stp instance 0 brief

RSTP

выбор стандарта

stp mode rstp

выключает edge порт при получении bpdu

stp bpdu-protection

на интерфейсе:

stp root-protection (включается на портах корневого коммутатора, при получении лучшего bpdu порт переходит в состояние root-inconsistent – несогласованность корня)

используется на клиентских портах

stp edged-port enable

stp bpdu-filter enable (не отправляет и не принимает bpdu)

stp loop-protection (технология защиты от петель в моменты реконвергенции stp. если порт перестает получать bpdu он не переходит в состояние forwarding, а переходит в состояние loop-inconsistent)

MSTP

stp mode mstp

stp region-configuration

region-name parapampam

instance 1 vlan 2 to 10

instance 1 vlan 11 to 20

active region-configuration

display stp region-configuration

Static routing

создаем статический маршрут

ip route-static ipaddress { mask | mask-length } interface-type interface-number [ nexthopaddress ] preference …

создаем маршрут по умолчанию

ip route-static 0.0.0.0 0.0.0.0 nexthopaddress

RIP

basic:

rip 1

version 2 (по умолчанию version 1)

network 10.0.0.0

анонс маршрута по умолчанию через rip

default-route originate

выключаем автоматическую суммаризацию маршрутов

undo summary

суммаризация маршрутов на интерфейсе

int g0/0/0

rip summary-address 172.16.0.0 255.255.0.0.

debug

debugging rip 1,

disp debugging

terminal debugging

undo debugging rip 1 or undo debugging all !!!

RIP Metric

int g0/0/0

устанавливает cost на порту для входящих маршрутов

rip metricin

устанавливает cost на порту для исходящих маршрутов

rip metricout

rip poison-reverse

rip split horizon

Ограничение распространения маршрутной информации

int g0/0/0

undo rip output

undo rip input

интерфейс не передает маршрутную информацию, но принимает и заносит в routing table маршруты

rip 1

silent int g0/0/0 –

Authentification

int g0/0/0

rip authentification-mode simple ….

int g0/0/1

rip authentification-mode md5 usual ….

display

display rip <process_id> interface <interface> verbose

display rip 1 neighbor

OSPF

можно и без указания id. id учитывается при выборах DR, выбирается по наибольшему адресу

ospf 1 router-id 1.1.1.1

area 0

network ip address wildcard-mask

меняем расчет метрики

ospf 1

bandwidth-reference 10000

меняем cost, таймеры, dr-priority

int g0/0/0

ospf cost 20

ospf timer hello …

ospf timer dead …

ospf dr-priority …

Authentification OSPF

Simple authentication:

ospf authentication-mode { simple [ [ plain ] <plaintext> | cipher <cipher-text >] | null }

Cryptographic authentication:

ospf authentication-mode {md5 | hmac-md5 } [ key-id { plain <plain-text >| [ cipher ] <cipher-text >} ].

Выключаем OSPF на порту (restrict OSPF operation)

ospf 1

silent-int g0/0/0

Объявление маршрута последней надежды через OSPF

ip route-static 0.0.0.0 0.0.0.0 loopback 0

ospf 1

default-route-advertise

display

disp ospf peer (показывает очень полезную информацию: area, интерфейс и адрес интерфейса, статус соседства, рутер id, master or slave)

disp ospf peer brief

disp ospf 1 int g0/0/0

VRRP

На ip интерфейсе

vrrp vrid 20 virtual-ip 10.74.10.17

vrrp vrid 20 priority 50

Интерфейс с наибольшим значением priority выбирается в качестве Master (default priority 100).

Установка задержки обратного переключению с backup на master

vrrp vrid 1 preempt-mode timer delay 20

При падении интерфейса
GigabitEthernet1/0/0 vrrp приоритет интерфейса g0/0/0 уменьшается на 40

int g0/0/0

vrrp vrid 1 track interface GigabitEthernet1/0/0 reduced 40

VRP Basic and Operation, file system

Работа с файловой системой

Для создания директории

mkdir <полный путь и имя директории>

Для удаления директории

rmdir <полный путь и имя директории>

Для удаления и переименование файла

delete <полный путь и имя файла>

rename <полный путь и имя файла> <полный путь и имя файла>

Для удаления файла без возможности восстановления

delete /unreserved <полный путь и имя файла>

Для восстановления файла

undelete <имя файла>

Для очистки «корзины»

reset recycle-bin

Удаление файла с конфигурацией

delete <полный путь и имя файла>

Сброс сохранненой конфигурации

reset saved-configuration

Узнать версию софта

display version

display device slot

Работа с ftp

Подключиться по ftp

ftp x.x.x.x

скачать файл

get example.zip

Подключиться по tftp

tftp x.x.x.x get example.zip

Указываем файл startup config

startup system-software example.zip

HDLC

int s2/0/0

link-protocol hdlc

ip address x x x x xx

привязываем адрес loopback

ip unnambered int loopback 0

PPP

Настройка ppp c authentication-mode pap

sysname BRAS

sysname pap_client

Настройка ppp c authentication-mode chap

sysname BRAS

link-protocol ppp

ppp authentication-mode chap

sysname chap_client

int s1/0/0

PPPoE

display pppoe-server session all

sysname BRAS

int dialer 1

display nat server

diplay nat outbound

diplay nat address-group 1

DHCP

interface pool configuration

dhcp enable

int g0/0/0

dhcp select interface

dhcp server dns-list x.x.x.x

dhcp server excluded-ip-address x.x.x.x

dhcp server lease day x

global pool configuration

dhcp enable

ip pool pool1

network x.x.x.x mask xx

gateway-list x.x.x.x

lease day x

int g0/0/1

dhcp select global

dhcp relay

sysname dhcp server

dhcp enable

ip pool pool1

gateway-list 192.168.1.1

network 192.168.1.0 mask 255.255.255.0

interface GigabitEthernet0/0/0

ip address 10.10.10.1 255.255.255.252

dhcp select global

sysname dhcp relay

dhcp enable

dhcp server group 123

dhcp-server 10.10.10.1 0

interface GigabitEthernet0/0/1

ip address 192.168.1.1 255.255.255.0

dhcp select relay

dhcp relay server-select 123

ACL

basic

acl 2000

rule deny source x.x.x.x wildcard mask

rule permit source x.x.x.x wildcard mask

int g0/0/0

traffic-filter outbound acl 2000

advanced

acl 3000

rule deny tcp source x.x.x.x wildcard mask destination x.x.x.x wildcard mask destination-port eq 21

rule permit source x.x.x.x wildcard mask

int g0/0/0

traffic-filter inbound acl 3000

acl aplication nat

nat address-group 1 x.x.x.x y.y.y.y

acl 2000

rule permit source z.z.z.z wildcard mask

int g0/0/0

nat outbound 2000 address-group 1

AAA

настраиваем способ аутентификации

user-interface vty 0 4

authentication-mode aaa

aaa

создаем схему авторизации

authorization-scheme auth1

схема без сервера: radius…

authorization-mode local

создаем схему аутентификации

authentication-scheme auth2

схема без сервера: radius,diametr…

authentication-mode local

создаем домен и привязываем схемы аутентификации и авторизации

domain huawei

authentication-scheme auth2

authorization-scheme auth1

создаем пользователя в домене и указываем достпные сервисы и привилегии

local-user user1@huawei password cipher qwerty

local-user user1@huawei service-type telnet

Если оставить только telnet, то по консольному кабелю не будет доступа в случае аутентификации по AAA

user-int con 0

authentication aaa

local-user user1@huawei privilege level 0

display domain name huawei

Восстанавливаем конфиг с внешенй usb

<HUAWEI>dir flash:
Directory of flash:/ Idx Attr Size(Byte) Date Time FileName 0 dr-x - Oct 11 2021 14:48:26 $_checkpoint 1 dr-x - Jan 23 2021 10:45:28 $_install_mod 2 dr-x - Nov 03 2021 14:55:23 $_license 3 dr-x - Oct 11 2021 14:47:58 $_security_info 4 dr-x - Oct 11 2021 14:57:10 $_system 5 -rw- 128,772,300 Jan 04 2021 10:21:49 CE6810LI-V200R002C50SPC800.cc 6 -rw- 1,339,283 Nov 03 2021 14:57:13 CE6810LI-V200R002SPH016.PAT 7 -rw- 4,206,539 Sep 19 2021 09:50:14 CE6810LI-V200R002SPH022.PAT 8 -rw- 135,653,156 Sep 19 2021 10:35:20 CE6810LI-V200R005C10SPC800.cc 9 -rw- 2,826,131 Sep 19 2021 10:36:08 CE6810LI-V200R005SPH008.PAT 10 drwx - Nov 03 2021 14:52:09 POST 11 -rw- 97 Nov 03 2021 14:52:12 collect_diag_info.bat 12 -rw- 17,086 Oct 11 2021 14:51:52 device.sys 13 drwx - Oct 11 2021 14:57:15 logfile 14 -rw- 2,598 Oct 11 2021 13:42:27 vrpcfg-test.zip 15 -rw- 907 Oct 11 2021 14:51:51 vrpcfg.zip 16 -rw- 5,914 Mar 04 2021 17:00:29 ztp_20210304165135.log 17 -rw- 13,961 Mar 04 2021 16:58:59 ztp_20210304165135.log.1 18 -rw- 824 Mar 04 2021 16:54:19 ztp_20210304165135.log.2
269,168 KB total (11,028 KB free)
<HUAWEI>co
<HUAWEI>compare
<HUAWEI>configuration
<HUAWEI>dir usb:/
Directory of usb:/ Idx Attr Size(Byte) Date Time FileName 0 -rw- 155,216 Apr 21 2021 20:25:28 AFUDOSU.SMC
... 13 -rw- 2,588 Oct 11 2021 14:27:10 bup-conf.zip
1,951,992 KB total (1,899,400 KB free)
<HUAWEI>copy usb:/bup-conf.zip flash:/vrpcfg.zip
Error: flash:/vrpcfg.zip is protected.
<HUAWEI>copy usb:/bup-conf.zip flash:/vrpcfg-from-bup.zip
Info: Are you sure to copy usb:/bup-conf.zip to flash:/vrpcfg-from-bup.zip? [Y/N]:y
100% complete
Info: Copying file usb:/bup-conf.zip to flash:/vrpcfg-from-bup.zip...Done.
<HUAWEI>dir flash:
Directory of flash:/ Idx Attr Size(Byte) Date Time FileName 0 dr-x - Oct 11 2021 14:58:00 $_checkpoint 1 dr-x - Jan 23 2021 10:45:28 $_install_mod 2 dr-x - Nov 03 2021 14:55:23 $_license 3 dr-x - Oct 11 2021 14:47:58 $_security_info 4 dr-x - Oct 11 2021 14:57:10 $_system 5 -rw- 128,772,300 Jan 04 2021 10:21:49 CE6810LI-V200R002C50SPC800.cc 6 -rw- 1,339,283 Nov 03 2021 14:57:13 CE6810LI-V200R002SPH016.PAT 7 -rw- 4,206,539 Sep 19 2021 09:50:14 CE6810LI-V200R002SPH022.PAT 8 -rw- 135,653,156 Sep 19 2021 10:35:20 CE6810LI-V200R005C10SPC800.cc 9 -rw- 2,826,131 Sep 19 2021 10:36:08 CE6810LI-V200R005SPH008.PAT 10 drwx - Nov 03 2021 14:52:09 POST 11 -rw- 97 Nov 03 2021 14:52:12 collect_diag_info.bat 12 -rw- 17,086 Oct 11 2021 14:51:52 device.sys 13 drwx - Oct 11 2021 14:57:15 logfile 14 -rw- 2,588 Oct 11 2021 14:59:01 vrpcfg-from-bup.zip 15 -rw- 2,598 Oct 11 2021 13:42:27 vrpcfg-test.zip 16 -rw- 907 Oct 11 2021 14:51:51 vrpcfg.zip 17 -rw- 5,914 Mar 04 2021 17:00:29 ztp_20210304165135.log 18 -rw- 13,961 Mar 04 2021 16:58:59 ztp_20210304165135.log.1 19 -rw- 824 Mar 04 2021 16:54:19 ztp_20210304165135.log.2
269,168 KB total (11,020 KB free)
<HUAWEI>
<HUAWEI>dis startup
MainBoard: Configured startup system software: flash:/CE6810LI-V200R005C10SPC800.cc Startup system software: flash:/CE6810LI-V200R005C10SPC800.cc Next startup system software: flash:/CE6810LI-V200R005C10SPC800.cc Startup saved-configuration file: flash:/vrpcfg.zip Next startup saved-configuration file: flash:/vrpcfg.zip Startup paf file: default Next startup paf file: default Startup patch package: flash:/CE6810LI-V200R005SPH008.PAT Next startup patch package: flash:/CE6810LI-V200R005SPH008.PAT
<HUAWEI>sta
<HUAWEI>startup co
<HUAWEI>startup sa
<HUAWEI>startup saved-configuration fl
<HUAWEI>startup saved-configuration flash:/v
<HUAWEI>startup saved-configuration flash:/vrpcfg-
<HUAWEI>startup saved-configuration flash:/vrpcfg-from-bup.zip
Info: Operating, please wait for a moment......done.
Info: Succeeded in setting the configuration for booting system.
<HUAWEI>dis star
<HUAWEI>dis startup
MainBoard: Configured startup system software: flash:/CE6810LI-V200R005C10SPC800.cc Startup system software: flash:/CE6810LI-V200R005C10SPC800.cc Next startup system software: flash:/CE6810LI-V200R005C10SPC800.cc Startup saved-configuration file: flash:/vrpcfg.zip Next startup saved-configuration file: flash:/vrpcfg-from-bup.zip Startup paf file: default Next startup paf file: default Startup patch package: flash:/CE6810LI-V200R005SPH008.PAT Next startup patch package: flash:/CE6810LI-V200R005SPH008.PAT
<HUAWEI>
<HUAWEI>reboot
slot 1:
Next startup system software: flash:/CE6810LI-V200R005C10SPC800.cc
Next startup saved-configuration file: flash:/vrpcfg-from-bup.zip
Next startup paf file: default
Next startup patch package: flash:/CE6810LI-V200R005SPH008.PAT
Warning: The current configuration will be saved to the next startup saved-configuration file. Continue? [Y/N]:n
Warning: The system will reboot. Continue? [Y/N]:y
*************************************************************
* Copyright (C) <2021-2021> Huawei Technologies Co., Ltd. *
*************************************************************
CloudEngine BIOS Version: 433 (Oct 11 2021 - 20:19:17)
Board Name ..................................... CE6810-48S4Q-LI
SDRAM Memory Initializing ...................... BEGIN
SDRAM Memory Size .............................. 2 Gbytes
SDRAM Memory Initializing ...................... DONE
Press CTRL T for full memory test .............. skip
Starting ...
Press CTRL B to enter BIOS menu or CTRL E to boot DFX: 0
Boot Disk: flash
Startup File: CE6810LI-V200R005C10SPC800.cc
Try Times: 1
Check system software ........................................ DONE
Check APPDB .................................................. DONE
Set next bootfile ............................................ DONE
Load system software ......................................... DONE
Create file system ........................................... DONE
Now starting VRP ........
Configured switch mode ....................................... AUTO-NEGOTIATION
Current switch mode .......................................... STACK
Press CTRL Y to modify the switch mode ....................... skip
Initializing stack ........................................... DONE
Stack member ID .............................................. 1
Stack domain ID .............................................. INVALID
Stack priority ............................................... 100
Default MAC .................................................. 48-57-02-cc-ae-f0
Competing with other devices in the stack .................... DONE
Stack role ................................................... MASTER
User interface con0 is available
Please Press ENTER.
Password:
Info: The max number of VTY users is 5, the number of current VTY users online is 0, and total number of terminal users online is 1. The current login time is 2021-10-11 18:07:05 03:00.
<sw21>
<sw21>dis startup
MainBoard: Configured startup system software: flash:/CE6810LI-V200R005C10SPC800.cc Startup system software: flash:/CE6810LI-V200R005C10SPC800.cc Next startup system software: flash:/CE6810LI-V200R005C10SPC800.cc Startup saved-configuration file: flash:/vrpcfg-from-bup.zip Next startup saved-configuration file: flash:/vrpcfg-from-bup.zip Startup paf file: default Next startup paf file: default Startup patch package: flash:/CE6810LI-V200R005SPH008.PAT Next startup patch package: flash:/CE6810LI-V200R005SPH008.PAT
<slv-sw21>dir flash:
Directory of flash:/ Idx Attr Size(Byte) Date Time FileName 0 dr-x - Oct 11 2021 18:07:30 $_checkpoint 1 dr-x - Jan 23 2021 13:45:28 $_install_mod 2 dr-x - Nov 03 2021 17:55:23 $_license 3 dr-x - Oct 11 2021 18:07:01 $_security_info 4 dr-x - Oct 11 2021 18:07:01 $_system 5 -rw- 128,772,300 Jan 04 2021 13:21:49 CE6810LI-V200R002C50SPC800.cc 6 -rw- 1,339,283 Nov 03 2021 17:57:13 CE6810LI-V200R002SPH016.PAT 7 -rw- 4,206,539 Sep 19 2021 12:50:14 CE6810LI-V200R002SPH022.PAT 8 -rw- 135,653,156 Sep 19 2021 13:35:20 CE6810LI-V200R005C10SPC800.cc 9 -rw- 2,826,131 Sep 19 2021 13:36:08 CE6810LI-V200R005SPH008.PAT 10 drwx - Nov 03 2021 17:52:09 POST 11 -rw- 97 Nov 03 2021 17:52:12 collect_diag_info.bat 12 -rw- 17,086 Oct 11 2021 18:01:33 device.sys 13 drwx - Oct 11 2021 17:57:15 logfile 14 -rw- 2,588 Oct 11 2021 17:59:01 vrpcfg-from-bup.zip 15 -rw- 2,598 Oct 11 2021 16:42:27 vrpcfg-test.zip 16 -rw- 907 Oct 11 2021 17:51:51 vrpcfg.zip 17 -rw- 5,914 Mar 04 2021 20:00:29 ztp_20210304165135.log 18 -rw- 13,961 Mar 04 2021 19:58:59 ztp_20210304165135.log.1 19 -rw- 824 Mar 04 2021 19:54:19 ztp_20210304165135.log.2
269,168 KB total (11,020 KB free)
<slv-sw21>save
Warning: The current configuration will be written to the device. Continue? [Y/N]:y
Now saving the current configuration to the slot 1 .
Info: Save the configuration successfully.
<sw21>dir flash:
Directory of flash:/ Idx Attr Size(Byte) Date Time FileName 0 dr-x - Oct 11 2021 18:07:30 $_checkpoint 1 dr-x - Jan 23 2021 13:45:28 $_install_mod 2 dr-x - Nov 03 2021 17:55:23 $_license 3 dr-x - Oct 11 2021 18:07:01 $_security_info 4 dr-x - Oct 11 2021 18:07:01 $_system 5 -rw- 128,772,300 Jan 04 2021 13:21:49 CE6810LI-V200R002C50SPC800.cc 6 -rw- 1,339,283 Nov 03 2021 17:57:13 CE6810LI-V200R002SPH016.PAT 7 -rw- 4,206,539 Sep 19 2021 12:50:14 CE6810LI-V200R002SPH022.PAT 8 -rw- 135,653,156 Sep 19 2021 13:35:20 CE6810LI-V200R005C10SPC800.cc 9 -rw- 2,826,131 Sep 19 2021 13:36:08 CE6810LI-V200R005SPH008.PAT 10 drwx - Nov 03 2021 17:52:09 POST 11 -rw- 97 Nov 03 2021 17:52:12 collect_diag_info.bat 12 -rw- 17,510 Oct 11 2021 18:08:08 device.sys 13 drwx - Oct 11 2021 17:57:15 logfile 14 -rw- 2,612 Oct 11 2021 18:08:08 vrpcfg-from-bup.zip 15 -rw- 2,598 Oct 11 2021 16:42:27 vrpcfg-test.zip 16 -rw- 907 Oct 11 2021 17:51:51 vrpcfg.zip 17 -rw- 5,914 Mar 04 2021 20:00:29 ztp_20210304165135.log 18 -rw- 13,961 Mar 04 2021 19:58:59 ztp_20210304165135.log.1 19 -rw- 824 Mar 04 2021 19:54:19 ztp_20210304165135.log.2
269,168 KB total (11,016 KB free)
<sw21>
<sw21>dir flash:
Directory of flash:/ Idx Attr Size(Byte) Date Time FileName 0 dr-x - Oct 11 2021 18:07:30 $_checkpoint 1 dr-x - Jan 23 2021 13:45:28 $_install_mod 2 dr-x - Nov 03 2021 17:55:23 $_license 3 dr-x - Oct 11 2021 18:07:01 $_security_info 4 dr-x - Oct 11 2021 18:07:01 $_system 5 -rw- 128,772,300 Jan 04 2021 13:21:49 CE6810LI-V200R002C50SPC800.cc 6 -rw- 1,339,283 Nov 03 2021 17:57:13 CE6810LI-V200R002SPH016.PAT 7 -rw- 4,206,539 Sep 19 2021 12:50:14 CE6810LI-V200R002SPH022.PAT 8 -rw- 135,653,156 Sep 19 2021 13:35:20 CE6810LI-V200R005C10SPC800.cc 9 -rw- 2,826,131 Sep 19 2021 13:36:08 CE6810LI-V200R005SPH008.PAT 10 drwx - Nov 03 2021 17:52:09 POST 11 -rw- 97 Nov 03 2021 17:52:12 collect_diag_info.bat 12 -rw- 17,510 Oct 11 2021 18:18:10 device.sys 13 drwx - Oct 11 2021 17:57:15 logfile 14 -rw- 2,615 Oct 11 2021 18:18:10 vrpcfg-from-bup.zip 15 -rw- 2,598 Oct 11 2021 16:42:27 vrpcfg-test.zip 16 -rw- 907 Oct 11 2021 17:51:51 vrpcfg.zip 17 -rw- 5,914 Mar 04 2021 20:00:29 ztp_20210304165135.log 18 -rw- 13,961 Mar 04 2021 19:58:59 ztp_20210304165135.log.1 19 -rw- 824 Mar 04 2021 19:54:19 ztp_20210304165135.log.2
269,168 KB total (11,020 KB free)
<sw21>save ? STRING<5-64> The name of specific file(*.cfg, *.zip, *.dat) flash: Device name logfile Save logfile usb: Device name <cr>
<sw21>save vrpcfg.zip
Warning: Are you sure to save the configuration to flash:/vrpcfg.zip? [Y/N]:y
Warning: flash:/vrpcfg.zip exists,overwrite? [Y/N]:y
Now saving the current configuration to the slot 1
Info: Save the configuration successfully.
<sw21>dir flash:
Directory of flash:/ Idx Attr Size(Byte) Date Time FileName 0 dr-x - Oct 11 2021 18:07:30 $_checkpoint 1 dr-x - Jan 23 2021 13:45:28 $_install_mod 2 dr-x - Nov 03 2021 17:55:23 $_license 3 dr-x - Oct 11 2021 18:07:01 $_security_info 4 dr-x - Oct 11 2021 18:07:01 $_system 5 -rw- 128,772,300 Jan 04 2021 13:21:49 CE6810LI-V200R002C50SPC800.cc 6 -rw- 1,339,283 Nov 03 2021 17:57:13 CE6810LI-V200R002SPH016.PAT 7 -rw- 4,206,539 Sep 19 2021 12:50:14 CE6810LI-V200R002SPH022.PAT 8 -rw- 135,653,156 Sep 19 2021 13:35:20 CE6810LI-V200R005C10SPC800.cc 9 -rw- 2,826,131 Sep 19 2021 13:36:08 CE6810LI-V200R005SPH008.PAT 10 drwx - Nov 03 2021 17:52:09 POST 11 -rw- 97 Nov 03 2021 17:52:12 collect_diag_info.bat 12 -rw- 17,510 Oct 11 2021 18:18:37 device.sys 13 drwx - Oct 11 2021 17:57:15 logfile 14 -rw- 2,615 Oct 11 2021 18:18:10 vrpcfg-from-bup.zip 15 -rw- 2,598 Oct 11 2021 16:42:27 vrpcfg-test.zip 16 -rw- 2,598 Oct 11 2021 18:18:37 vrpcfg.zip 17 -rw- 5,914 Mar 04 2021 20:00:29 ztp_20210304165135.log 18 -rw- 13,961 Mar 04 2021 19:58:59 ztp_20210304165135.log.1 19 -rw- 824 Mar 04 2021 19:54:19 ztp_20210304165135.log.2
269,168 KB total (11,020 KB free)
<sw21>dis startup
MainBoard: Configured startup system software: flash:/CE6810LI-V200R005C10SPC800.cc Startup system software: flash:/CE6810LI-V200R005C10SPC800.cc Next startup system software: flash:/CE6810LI-V200R005C10SPC800.cc Startup saved-configuration file: flash:/vrpcfg-from-bup.zip Next startup saved-configuration file: flash:/vrpcfg-from-bup.zip Startup paf file: default Next startup paf file: default Startup patch package: flash:/CE6810LI-V200R005SPH008.PAT Next startup patch package: flash:/CE6810LI-V200R005SPH008.PAT
<sw21>startup saved-configuration vrpcfg.zip
Info: Operating, please wait for a moment......done.
Info: Succeeded in setting the configuration for booting system.
<sw21>dis startup
MainBoard: Configured startup system software: flash:/CE6810LI-V200R005C10SPC800.cc Startup system software: flash:/CE6810LI-V200R005C10SPC800.cc Next startup system software: flash:/CE6810LI-V200R005C10SPC800.cc Startup saved-configuration file: flash:/vrpcfg-from-bup.zip Next startup saved-configuration file: flash:/vrpcfg.zip Startup paf file: default Next startup paf file: default Startup patch package: flash:/CE6810LI-V200R005SPH008.PAT Next startup patch package: flash:/CE6810LI-V200R005SPH008.PAT
<sw21>reboot
slot 1:
Next startup system software: flash:/CE6810LI-V200R005C10SPC800.cc
Next startup saved-configuration file: flash:/vrpcfg.zip
Next startup paf file: default
Next startup patch package: flash:/CE6810LI-V200R005SPH008.PAT
Warning: The system will reboot. Continue? [Y/N]:y

Смена ip адресов на dad линках

MLAG-пару коммутаторов надо было переводить из песочницы в боевое окружение.
Надо было поменять vlan и ip адреса на Meth интерфейсах и в настройках dfs-group.
В документации описания такого процесса нет, но при этом известно, что коммутаторы через PL договариваются, в том числе и о адресах DAD линков.
Пожтому адреса решил не менять на живую, а сначала положить все порты на слейв ноде, тем самым изолировав ноды друг от друга, и только после этого менять адреса.

Распределение ролей коммутаторов в нормальном состоянии:

Последовательность действий коротко:

Положить MLAG порты на sw22.
Положить Meth порт c sw22.
Зайти на sw22 через консоль и положить PL порты.
На sw22 поменять адрес у meth0 интерфейса и в настройках dfs-group.
Перенести sw21/meth0 в другой vlan, поднять порт meth0 и проверить, что можно зайти по ssh.
Положить meth порт c sw21.
Зайти на sw21 через консоль и поменять адрес у meth0 интерфейса и в настройках dfs-group.
Поднять meth порт c sw21.
Поднять MLAG порты на sw22.

Последовательность действия подробнее.

Кладем MLAG порты на sw22
Кладем порт 10GE1/0/16 на sw22.
Делаем в режиме “system-view immediatly”.

[sw22-10GE1/0/16]shutdown
#25/active/linkDown/Major/occurredTime:2021-09-18 17:08:21/-/-/alarmID:0x08520003/CID=0x807a0404:The interface status changes. (ifName=Eth-Trunk16, AdminStatus=UP, OperStatus=DOWN, Reason=The conditions for the activation of the interface are not met, mainIfname=Eth-Trunk16)
#26/active/linkDown/Major/occurredTime:2021-09-18 17:08:21/-/-/alarmID:0x08520003/CID=0x807a0404:The interface status changes. (ifName=10GE1/0/16, AdminStatus=DOWN, OperStatus=DOWN, Reason=The interface is shut down, mainIfname=Eth-Trunk16)
[sw22-10GE1/0/16]
Sep 18 2021 17:08:21 sw22 %IFNET/2/linkDown_active(l):CID=0x807a0404-alarmID=0x08520003;The interface status changes. (ifName=Eth-Trunk16, AdminStatus=UP, OperStatus=DOWN, Reason=The conditions for the activation of the interface are not met, mainIfname=Eth-Trunk16)
Sep 18 2021 17:08:21 sw22 %IFNET/2/linkDown_active(l):CID=0x807a0404-alarmID=0x08520003;The interface status changes. (ifName=10GE1/0/16, AdminStatus=DOWN, OperStatus=DOWN, Reason=The interface is shut down, mainIfname=Eth-Trunk16)
#27/active/hwLacpTotalLinkLoss/Major/occurredTime:2021-09-18 17:08:22/-/-/alarmID:0x09360001/CID=0x807a0404:Link bandwidth lost totally. (TrunkIndex=2, TrunkIfIndex=60, TrunkId=16, TrunkName=Eth-Trunk16, Reason=No link is selected.)
#28/active/hwLacpNegotiateFailed/Major/occurredTime:2021-09-18 17:08:22/-/-/alarmID:0x09360000/CID=0x807a0404:The member of LAG negotiation failed. (TrunkIndex=2, PortIfIndex=20, TrunkId=16, TrunkName=Eth-Trunk16, PortName=10GE1/0/16, Reason=A link fault occurred or negotiation information synchronization failed.)
Sep 18 2021 17:08:22 sw22 %LACP/4/LACP_STATE_DOWN(l):CID=0x80480432;The LACP state is down. (PortName=10GE1/0/16, TrunkName=Eth-Trunk16, LastReceivePacketTime=[2021-09-18 17:08:05:720], Reason=The interface went down physically or flapped to down. Please check the interface's status, duplex mode, bandwidth, and so on.)
Sep 18 2021 17:08:22 sw22 %LACP/2/hwLacpTotalLinkLoss_active(l):CID=0x807a0404-alarmID=0x09360001;Link bandwidth lost totally. (TrunkIndex=2, TrunkIfIndex=60, TrunkId=16, TrunkName=Eth-Trunk16, Reason=No link is selected.)
Sep 18 2021 17:08:22 sw22 %LACP/2/hwLacpNegotiateFailed_active(l):CID=0x807a0404-alarmID=0x09360000;The member of LAG negotiation failed. (TrunkIndex=2, PortIfIndex=20, TrunkId=16, TrunkName=Eth-Trunk16, PortName=10GE1/0/16, Reason=A link fault occurred or negotiation information synchronization failed.)

Состояние MLAG со стороны sw21, все ок.

<sw21>dis dfs-group 1 m-lag
* : Local node
Heart beat state : OK
Node 1 * Dfs-Group ID : 1 Priority : 150 Address : ip address 10.70.70.32 vpn-instance VRF-DAD-1 State : Master Causation : - System ID : 4857-02cc-aef1 SysName : sw21 Version : V200R002C50SPC800 Device Type : CE6810LI
Node 2 Dfs-Group ID : 1 Priority : 120 Address : ip address 10.70.70.33 vpn-instance VRF-DAD-1 State : Backup Causation : - System ID : 4857-02cc-aea1 SysName : sw22 Version : V200R002C50SPC800 Device Type : CE6810LI
<sw21>

Состояниени MLAG портов, со стороны sw22 (node 2) порт лежит, все ок.

<sw21>dis dfs-group 1 node 1 m-lag
* - Local node
M-Lag ID : 16
Interface : Eth-Trunk 16
Port State : Up
Status : active(*)-inactive
<sw21>dis dfs-group 1 node 2 m-lag
* - Local node
M-Lag ID : 16
Interface : Eth-Trunk 16
Port State : Down
Status : inactive-active(*)

Кладем Meth порт с sw22
Логи со стороны sw22.

[sw22]
#30/active/linkDown/Major/occurredTime:2021-09-18 17:14:28/-/-/alarmID:0x08520003/CID=0x807a0404:The interface status changes. (ifName=MEth0/0/0, AdminStatus=UP, OperStatus=DOWN, Reason=Interface physical link is down, mainIfname=MEth0/0/0)
Sep 18 2021 17:14:28 sw22 %IFNET/2/linkDown_active(l):CID=0x807a0404-alarmID=0x08520003;The interface status changes. (ifName=MEth0/0/0, AdminStatus=UP, OperStatus=DOWN, Reason=Interface physical link is down, mainIfname=MEth0/0/0)
#29/active/L3V_TRAP_VRF_DOWN/Major/occurredTime:2021-09-18 17:14:28/-/-/alarmID:0x09110000/CID=0x806f2717:The interface bound to the VPN instance went Down. (VpnInstanceName=VRF-DAD-1, IfName=MEth0/0/0, IfCurRowStatus=2, VRFOperationStatus=2)
Sep 18 2021 17:14:28 sw22 %L3VPN/2/L3V_TRAP_VRF_DOWN_active(l):CID=0x806f2717-alarmID=0x09110000;The interface bound to the VPN instance went Down. (VpnInstanceName=VRF-DAD-1, IfName=MEth0/0/0, IfCurRowStatus=2, VRFOperationStatus=2)
#31/active/hwMLagHeartLost/Warning/occurredTime:2021-09-18 17:14:42/-/-/alarmID:0x0ae52002/CID=0x81de271c:The DFS dual-active detection message is lost. Check the source address configuration or link configuration of the local or remote switch.
Sep 18 2021 17:14:42 sw22 %ETRUNK/4/hwMLagHeartLost_active(l):CID=0x81de271c-alarmID=0x0ae52002;The DFS dual-active detection message is lost. Check the source address configuration or link configuration of the local or remote switch.

Кладем PL порты на sw22
Кладем порт 40GE1/0/3 на sw22. В песочнице был один PL порт.
Делаем в режиме “system-view immediatly”.

[sw22-40GE1/0/3]shutdown
Sep 18 2021 17:20:07 sw22 %LACP/4/LACP_STATE_DOWN(l):CID=0x80480432;The LACP state is down. (PortName=40GE1/0/3, TrunkName=Eth-Trunk0, LastReceivePacketTime=[2021-09-18 17:19:55:745], Reason=The interface went down physically or flapped to down. Please check the interface's status, duplex mode, bandwidth, and so on.)
[sw22-40GE1/0/3]
#32/active/linkDown/Major/occurredTime:2021-09-18 17:20:07/-/-/alarmID:0x08520003/CID=0x807a0404:The interface status changes. (ifName=Eth-Trunk0, AdminStatus=UP, OperStatus=DOWN, Reason=The conditions for the activation of the interface are not met, mainIfname=Eth-Trunk0)
#33/active/linkDown/Major/occurredTime:2021-09-18 17:20:07/-/-/alarmID:0x08520003/CID=0x807a0404:The interface status changes. (ifName=40GE1/0/3, AdminStatus=DOWN, OperStatus=DOWN, Reason=The interface is shut down, mainIfname=Eth-Trunk0)
#34/active/linkDown/Major/occurredTime:2021-09-18 17:20:07/-/-/alarmID:0x08520003/CID=0x807a0404:The interface status changes. (ifName=Vlanif350, AdminStatus=UP, OperStatus=DOWN, Reason=Interface physical link is down, mainIfname=Vlanif350)
#35/active/linkDown/Major/occurredTime:2021-09-18 17:20:07/-/-/alarmID:0x08520003/CID=0x807a0404:The interface status changes. (ifName=Vlanif360, AdminStatus=UP, OperStatus=DOWN, Reason=Interface physical link is down, mainIfname=Vlanif360)
#36/active/linkDown/Major/occurredTime:2021-09-18 17:20:07/-/-/alarmID:0x08520003/CID=0x807a0404:The interface status changes. (ifName=Vlanif370, AdminStatus=UP, OperStatus=DOWN, Reason=Interface physical link is down, mainIfname=Vlanif370)
Sep 18 2021 17:20:07 sw22 %IFNET/2/linkDown_active(l):CID=0x807a0404-alarmID=0x08520003;The interface status changes. (ifName=Eth-Trunk0, AdminStatus=UP, OperStatus=DOWN, Reason=The conditions for the activation of the interface are not met, mainIfname=Eth-Trunk0)
Sep 18 2021 17:20:07 sw22 %IFNET/2/linkDown_active(l):CID=0x807a0404-alarmID=0x08520003;The interface status changes. (ifName=40GE1/0/3, AdminStatus=DOWN, OperStatus=DOWN, Reason=The interface is shut down, mainIfname=Eth-Trunk0)
Sep 18 2021 17:20:07 sw22 %IFNET/2/linkDown_active(l):CID=0x807a0404-alarmID=0x08520003;The interface status changes. (ifName=Vlanif350, AdminStatus=UP, OperStatus=DOWN, Reason=Interface physical link is down, mainIfname=Vlanif350)
Sep 18 2021 17:20:07 sw22 %IFNET/2/linkDown_active(l):CID=0x807a0404-alarmID=0x08520003;The interface status changes. (ifName=Vlanif360, AdminStatus=UP, OperStatus=DOWN, Reason=Interface physical link is down, mainIfname=Vlanif360)
Sep 18 2021 17:20:07 sw22 %IFNET/2/linkDown_active(l):CID=0x807a0404-alarmID=0x08520003;The interface status changes. (ifName=Vlanif370, AdminStatus=UP, OperStatus=DOWN, Reason=Interface physical link is down, mainIfname=Vlanif370)
#37/active/hwLacpTotalLinkLoss/Major/occurredTime:2021-09-18 17:20:08/-/-/alarmID:0x09360001/CID=0x807a0404:Link bandwidth lost totally. (TrunkIndex=0, TrunkIfIndex=58, TrunkId=0, TrunkName=Eth-Trunk0, Reason=No link is selected.)
#38/active/hwLacpNegotiateFailed/Major/occurredTime:2021-09-18 17:20:08/-/-/alarmID:0x09360000/CID=0x807a0404:The member of LAG negotiation failed. (TrunkIndex=0, PortIfIndex=55, TrunkId=0, TrunkName=Eth-Trunk0, PortName=40GE1/0/3, Reason=A link fault occurred or negotiation information synchronization failed.)
Sep 18 2021 17:20:08 sw22 %LACP/2/hwLacpTotalLinkLoss_active(l):CID=0x807a0404-alarmID=0x09360001;Link bandwidth lost totally. (TrunkIndex=0, TrunkIfIndex=58, TrunkId=0, TrunkName=Eth-Trunk0, Reason=No link is selected.)
Sep 18 2021 17:20:08 sw22 %LACP/2/hwLacpNegotiateFailed_active(l):CID=0x807a0404-alarmID=0x09360000;The member of LAG negotiation failed. (TrunkIndex=0, PortIfIndex=55, TrunkId=0, TrunkName=Eth-Trunk0, PortName=40GE1/0/3, Reason=A link fault occurred or negotiation information synchronization failed.)

Физическая связь между коммутаторами отсутствует.
Оба коммутатора стали мастерами и оба себя считают нодой 1.
В выводе отсутствуе информация о ноде 2.

Вывод на sw21.

<sw21>dis dfs-group 1 m-lag
* : Local node
Heart beat state : Lost
Node 1 * Dfs-Group ID : 1 Priority : 150 Address : ip address 10.70.70.32 vpn-instance VRF-DAD-1 State : Master Causation : PEERLINKDOWN System ID : 4857-02cc-aef1 SysName : sw21 Version : V200R002C50SPC800 Device Type : CE6810LI
<sw21>dis dfs-group 1 node 1 m-lag
* - Local node
M-Lag ID : 16
Interface : Eth-Trunk 16
Port State : Up
Status : active(*)-inactive
<sw21>dis dfs-group 1 node 2 m-lag
<sw21>

Вывод на sw22.

[sw22]dis dfs-group 1 m-lag
* : Local node
Heart beat state : Lost
Node 1 * Dfs-Group ID : 1 Priority : 120 Address : ip address 10.70.70.33 vpn-instance VRF-DAD-1 State : Master Causation : PEERLINKDOWN System ID : 4857-02cc-aea1 SysName : sw22 Version : V200R002C50SPC800 Device Type : CE6810LI
[sw22]dis dfs-group 1 node 2 m-lag
[sw22]dis dfs-group 1 node 1 m-lag
* - Local node
M-Lag ID : 16
Interface : Eth-Trunk 16
Port State : Down
Status : inactive(*)-inactive
[sw22]

Меняем ip адрес на sw22.
Делаем в режиме “system-view”.

[~sw22]interface MEth 0/0/0
[~sw22-MEth0/0/0]undo ip address 10.70.70.33 255.255.255.0
[*sw22-MEth0/0/0]ip address 10.20.35.142 24
[*sw22-MEth0/0/0]quit
[*sw22]dfs-group 1
[*sw22-dfs-group-1]undo source ip
[*sw22-dfs-group-1]source ip 10.20.35.142 vp
[*sw22-dfs-group-1]source ip 10.20.35.142 vpn-instance VRF-DAD-1
[*sw22-dfs-group-1]
[*sw22]dis configuration candidate
interface MEth 0/0/0 undo ip address 10.70.70.33 255.255.255.0 ip address 10.20.35.142 24
dfs-group 1 undo source ip source ip 10.20.35.142 vpn-instance VRF-DAD-1
[*sw22]

Коммитим и смотрим состоние MLAG, адрес поменялся, на sw21 в это время все работало.

<sw22>dis dfs-group 1 m-lag
* : Local node
Heart beat state : Lost
Node 1 * Dfs-Group ID : 1 Priority : 120 Address : ip address 10.20.35.142 vpn-instance VRF-DAD-1 State : Master Causation : PEERLINKDOWN System ID : 4857-02cc-aea1 SysName : sw22 Version : V200R002C50SPC800 Device Type : CE6810LI
<sw22>

Поднимаем Meth интерфес для sw22.
С коммутатора сразу пошел бродкаси трафик.

@r13:~$ monitor interfaces ethernet eth3 traffic
Capturing traffic on eth3 ... 0.000000 48:57:02:cc:ae:a0 -> ff:ff:ff:ff:ff:ff ARP Gratuitous ARP for 10.20.35.142 (Request) 0.000005 48:57:02:cc:ae:a0 -> ff:ff:ff:ff:ff:ff ARP Gratuitous ARP for 10.20.35.142 (Request) 1.003293 48:57:02:cc:ae:a0 -> ff:ff:ff:ff:ff:ff ARP Gratuitous ARP for 10.20.35.142 (Request) 1.003297 48:57:02:cc:ae:a0 -> ff:ff:ff:ff:ff:ff ARP Gratuitous ARP for 10.20.35.142 (Request) 2.004187 48:57:02:cc:ae:a0 -> ff:ff:ff:ff:ff:ff ARP Gratuitous ARP for 10.20.35.142 (Request) 2.004191 48:57:02:cc:ae:a0 -> ff:ff:ff:ff:ff:ff ARP Gratuitous ARP for 10.20.35.142 (Request)
@r13:~$ monitor interfaces ethernet eth3 traffic detail
Capturing traffic on eth3 ...
Frame 1 (66 bytes on wire, 66 bytes captured) Arrival Time: Sep 18, 2021 12:36:53.388903000 [Time delta from previous captured frame: 0.000000000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 0.000000000 seconds] Frame Number: 1 Frame Length: 66 bytes Capture Length: 66 bytes [Frame is marked: False] [Protocols in frame: eth:arp]
Ethernet II, Src: 48:57:02:cc:ae:a0 (48:57:02:cc:ae:a0), Dst: ff:ff:ff:ff:ff:ff (ff:ff:ff:ff:ff:ff) Destination: ff:ff:ff:ff:ff:ff (ff:ff:ff:ff:ff:ff) Address: ff:ff:ff:ff:ff:ff (ff:ff:ff:ff:ff:ff) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: 48:57:02:cc:ae:a0 (48:57:02:cc:ae:a0) Address: 48:57:02:cc:ae:a0 (48:57:02:cc:ae:a0) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: ARP (0x0806) Trailer: 0000000000000000000000000000000000000000 Frame check sequence: 0x00000000 [incorrect, should be 0x69fad3f5]
Address Resolution Protocol (request/gratuitous ARP) Hardware type: Ethernet (0x0001) Protocol type: IP (0x0800) Hardware size: 6 Protocol size: 4 Opcode: request (0x0001) [Is gratuitous: True] Sender MAC address: 48:57:02:cc:ae:a0 (48:57:02:cc:ae:a0) Sender IP address: 10.20.35.142 (10.20.35.142) Target MAC address: 00:00:00:00:00:00 (00:00:00:00:00:00) Target IP address: 10.20.35.142 (10.20.35.142)
Frame 2 (66 bytes on wire, 66 bytes captured) Arrival Time: Sep 18, 2021 12:36:53.388907000 [Time delta from previous captured frame: 0.000004000 seconds] [Time delta from previous displayed frame: 0.000004000 seconds] [Time since reference or first frame: 0.000004000 seconds] Frame Number: 2 Frame Length: 66 bytes Capture Length: 66 bytes [Frame is marked: False] [Protocols in frame: eth:arp]
Ethernet II, Src: 48:57:02:cc:ae:a0 (48:57:02:cc:ae:a0), Dst: ff:ff:ff:ff:ff:ff (ff:ff:ff:ff:ff:ff) Destination: ff:ff:ff:ff:ff:ff (ff:ff:ff:ff:ff:ff) Address: ff:ff:ff:ff:ff:ff (ff:ff:ff:ff:ff:ff) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: 48:57:02:cc:ae:a0 (48:57:02:cc:ae:a0) Address: 48:57:02:cc:ae:a0 (48:57:02:cc:ae:a0) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: ARP (0x0806) Trailer: 0000000000000000000000000000000000000000 Frame check sequence: 0x00000000 [incorrect, should be 0x69fad3f5]
Address Resolution Protocol (request/gratuitous ARP) Hardware type: Ethernet (0x0001) Protocol type: IP (0x0800) Hardware size: 6 Protocol size: 4 Opcode: request (0x0001) [Is gratuitous: True] Sender MAC address: 48:57:02:cc:ae:a0 (48:57:02:cc:ae:a0) Sender IP address: 10.20.35.142 (10.20.35.142) Target MAC address: 00:00:00:00:00:00 (00:00:00:00:00:00) Target IP address: 10.20.35.142 (10.20.35.142)
^CFrame 3 (66 bytes on wire, 66 bytes captured) Arrival Time: Sep 18, 2021 12:36:54.391372000 [Time delta from previous captured frame: 1.002465000 seconds] [Time delta from previous displayed frame: 1.002465000 seconds] [Time since reference or first frame: 1.002469000 seconds] Frame Number: 3 Frame Length: 66 bytes Capture Length: 66 bytes [Frame is marked: False] [Protocols in frame: eth:arp]
Ethernet II, Src: 48:57:02:cc:ae:a0 (48:57:02:cc:ae:a0), Dst: ff:ff:ff:ff:ff:ff (ff:ff:ff:ff:ff:ff) Destination: ff:ff:ff:ff:ff:ff (ff:ff:ff:ff:ff:ff) Address: ff:ff:ff:ff:ff:ff (ff:ff:ff:ff:ff:ff) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: 48:57:02:cc:ae:a0 (48:57:02:cc:ae:a0) Address: 48:57:02:cc:ae:a0 (48:57:02:cc:ae:a0) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: ARP (0x0806) Trailer: 0000000000000000000000000000000000000000 Frame check sequence: 0x00000000 [incorrect, should be 0x69fad3f5]
Address Resolution Protocol (request/gratuitous ARP) Hardware type: Ethernet (0x0001) Protocol type: IP (0x0800) Hardware size: 6 Protocol size: 4 Opcode: request (0x0001) [Is gratuitous: True] Sender MAC address: 48:57:02:cc:ae:a0 (48:57:02:cc:ae:a0) Sender IP address: 10.20.35.142 (10.20.35.142) Target MAC address: 00:00:00:00:00:00 (00:00:00:00:00:00) Target IP address: 10.20.35.142 (10.20.35.142)

Кладем порт на mgmt порт на sw21 и меняем адреса

[~sw21]
#14/active/linkDown/Major/occurredTime:2021-09-18 13:07:00 03:00/-/-/alarmID:0x08520003/CID=0x807a0404:The interface status changes. (ifName=MEth0/0/0, AdminStatus=UP, OperStatus=DOWN, Reason=Interface physical link is down, mainIfname=MEth0/0/0)
Sep 18 2021 13:07:00 03:00 sw21 %IFNET/2/linkDown_active(l):CID=0x807a0404-alarmID=0x08520003;The interface status changes. (ifName=MEth0/0/0, AdminStatus=UP, OperStatus=DOWN, Reason=Interface physical link is down, mainIfname=MEth0/0/0)
#15/active/L3V_TRAP_VRF_DOWN/Major/occurredTime:2021-09-18 13:07:00 03:00/-/-/alarmID:0x09110000/CID=0x806f2717:The interface bound to the VPN instance went Down. (VpnInstanceName=VRF-DAD-1, IfName=MEth0/0/0, IfCurRowStatus=2, VRFOperationStatus=2)
Sep 18 2021 13:07:00 03:00 sw21 %L3VPN/2/L3V_TRAP_VRF_DOWN_active(l):CID=0x806f2717-alarmID=0x09110000;The interface bound to the VPN instance went Down. (VpnInstanceName=VRF-DAD-1, IfName=MEth0/0/0, IfCurRowStatus=2, VRFOperationStatus=2)
<sw21>dis dfs-group 1 m-lag
* : Local node
Heart beat state : Lost
Node 1 * Dfs-Group ID : 1 Priority : 150 Address : ip address 10.70.70.32 vpn-instance VRF-DAD-1 State : Master Causation : PEERLINKDOWN System ID : 4857-02cc-aef1 SysName : sw21 Version : V200R002C50SPC800 Device Type : CE6810LI
<sw21>
[*sw21]dis configuration candidate
dfs-group 1 undo source ip source ip 10.20.35.141 vpn-instance VRF-DAD-1
interface MEth 0/0/0 ip address 10.20.35.141 24
...
commit
...
<sw21>dis dfs-group 1 m-lag
* : Local node
Heart beat state : Lost
Node 1 * Dfs-Group ID : 1 Priority : 150 Address : ip address 10.20.35.141 vpn-instance VRF-DAD-1 State : Master Causation : PEERLINKDOWN System ID : 4857-02cc-aef1 SysName : sw21 Version : V200R002C50SPC800 Device Type : CE6810LI

Поднимаем PL порты

<sw21>dis dfs-group 1 m-lag
* : Local node
Heart beat state : Lost
Node 1 * Dfs-Group ID : 1 Priority : 150 Address : ip address 10.20.35.141 vpn-instance VRF-DAD-1 State : Master Causation : TIMEOUT System ID : 4857-02cc-aef1 SysName : sw21 Version : V200R002C50SPC800 Device Type : CE6810LI
#10/cleared/hwLocalFaultAlarm/Minor/occurredTime:2021-09-18 12:17:00 03:00/clearTime:2021-09-18 13:14:24 03:00/clearType:service_resume/alarmID:0x081320c6/CID=0x80fc0101:The local fault alarm has resumed.(IfIndex=55, IfName=40GE1/0/3)
Sep 18 2021 13:14:24 03:00 sw21 %DEVM/3/hwLocalFaultAlarm_clear(l):CID=0x80fc0101-alarmID=0x081320c6-clearType=service_resume;The local fault alarm has resumed.(IfIndex=55, IfName=40GE1/0/3)
#9/cleared/linkDown/Major/occurredTime:2021-09-18 12:17:00 03:00/clearTime:2021-09-18 13:14:24 03:00/clearType:service_resume/alarmID:0x08520003/CID=0x807a0404:The interface status changes. (ifName=Eth-Trunk0, AdminStatus=UP, OperStatus=UP, Reason=Interface physical link is up, mainIfname=Eth-Trunk0)
#11/cleared/linkDown/Major/occurredTime:2021-09-18 12:17:00 03:00/clearTime:2021-09-18 13:14:24 03:00/clearType:service_resume/alarmID:0x08520003/CID=0x807a0404:The interface status changes. (ifName=40GE1/0/3, AdminStatus=UP, OperStatus=UP, Reason=Interface physical link is up, mainIfname=Eth-Trunk0)
Sep 18 2021 13:14:24 03:00 sw21 %IFNET/2/linkDown_clear(l):CID=0x807a0404-alarmID=0x08520003-clearType=service_resume;The interface status changes. (ifName=Eth-Trunk0, AdminStatus=UP, OperStatus=UP, Reason=Interface physical link is up, mainIfname=Eth-Trunk0)
Sep 18 2021 13:14:24 03:00 sw21 %IFNET/2/linkDown_clear(l):CID=0x807a0404-alarmID=0x08520003-clearType=service_resume;The interface status changes. (ifName=40GE1/0/3, AdminStatus=UP, OperStatus=UP, Reason=Interface physical link is up, mainIfname=Eth-Trunk0)
#12/cleared/hwLacpNegotiateFailed/Major/occurredTime:2021-09-18 12:17:00 03:00/clearTime:2021-09-18 13:14:25 03:00/clearType:service_resume/alarmID:0x09360000/CID=0x807a0404:Link negotiation failure is resumed. (TrunkIndex=0, PortIfIndex=55, TrunkId=0, TrunkName=Eth-Trunk0, PortName=40GE1/0/3, Reason=The link fault was rectified and negotiation information was synchronized.)
#13/cleared/hwLacpTotalLinkLoss/Major/occurredTime:2021-09-18 12:17:01 03:00/clearTime:2021-09-18 13:14:25 03:00/clearType:service_resume/alarmID:0x09360001/CID=0x807a0404:Link bandwidth lost totally is resumed. (TrunkIndex=0, TrunkIfIndex=58, TrunkId=0, TrunkName=Eth-Trunk0, Reason=Link is selected.)
Sep 18 2021 13:14:25 03:00 sw21 %LACP/2/hwLacpNegotiateFailed_clear(l):CID=0x807a0404-alarmID=0x09360000-clearType=service_resume;Link negotiation failure is resumed. (TrunkIndex=0, PortIfIndex=55, TrunkId=0, TrunkName=Eth-Trunk0, PortName=40GE1/0/3, Reason=The link fault was rectified and negotiation information was synchronized.)
Sep 18 2021 13:14:25 03:00 sw21 %LACP/2/hwLacpTotalLinkLoss_clear(l):CID=0x807a0404-alarmID=0x09360001-clearType=service_resume;Link bandwidth lost totally is resumed. (TrunkIndex=0, TrunkIfIndex=58, TrunkId=0, TrunkName=Eth-Trunk0, Reason=Link is selected.)
<sw21>dis dfs-group 1 m-lag
* : Local node
Heart beat state : Lost
Node 1 * Dfs-Group ID : 1 Priority : 150 Address : ip address 10.20.35.141 vpn-instance VRF-DAD-1 State : Master Causation : - System ID : 4857-02cc-aef1 SysName : sw21 Version : V200R002C50SPC800 Device Type : CE6810LI
Node 2 Dfs-Group ID : 1 Priority : 120 Address : ip address 10.20.35.142 vpn-instance VRF-DAD-1 State : Backup Causation : - System ID : 4857-02cc-aea1 SysName : sw22 Version : V200R002C50SPC800 Device Type : CE6810LI
<sw21>
<sw21>dis dfs-group 1 node 1 m-lag
* - Local node
M-Lag ID : 16
Interface : Eth-Trunk 16
Port State : Up
Status : active(*)-inactive
<sw21>dis dfs-group 1 node 2 m-lag
* - Local node
M-Lag ID : 16
Interface : Eth-Trunk 16
Port State : Down
Status : inactive-active(*)

Поднимаем mgmt порт sw21.
Поднялся DAD линк.

<sw21>
#8/cleared/hwMLagHeartLost/Warning/occurredTime:2021-09-18 12:11:34 03:00/clearTime:2021-09-18 13:29:08 03:00/clearType:service_resume/alarmID:0x0ae52002/CID=0x81de271c:DFS dual-active detection message forwarding is resumed.
Sep 18 2021 13:29:08 03:00 sw21 %ETRUNK/4/hwMLagHeartLost_clear(l):CID=0x81de271c-alarmID=0x0ae52002-clearType=service_resume;DFS dual-active detection message forwarding is resumed.
#14/cleared/linkDown/Major/occurredTime:2021-09-18 13:07:00 03:00/clearTime:2021-09-18 13:29:06 03:00/clearType:service_resume/alarmID:0x08520003/CID=0x807a0404:The interface status changes. (ifName=MEth0/0/0, AdminStatus=UP, OperStatus=UP, Reason=Interface physical link is up, mainIfname=MEth0/0/0)
Sep 18 2021 13:29:06 03:00 sw21 %IFNET/2/linkDown_clear(l):CID=0x807a0404-alarmID=0x08520003-clearType=service_resume;The interface status changes. (ifName=MEth0/0/0, AdminStatus=UP, OperStatus=UP, Reason=Interface physical link is up, mainIfname=MEth0/0/0)
#15/cleared/L3V_TRAP_VRF_DOWN/Major/occurredTime:2021-09-18 13:07:00 03:00/clearTime:2021-09-18 13:29:06 03:00/clearType:service_resume/alarmID:0x09110000/CID=0x806f2717:The interface bound to the VPN instance went Up. (VpnInstanceName=VRF-DAD-1, IfName=MEth0/0/0, IfCurRowStatus=1, VRFOperationStatus=1)
Sep 18 2021 13:29:06 03:00 sw21 %L3VPN/2/L3V_TRAP_VRF_DOWN_clear(l):CID=0x806f2717-alarmID=0x09110000-clearType=service_resume;The interface bound to the VPN instance went Up. (VpnInstanceName=VRF-DAD-1, IfName=MEth0/0/0, IfCurRowStatus=1, VRFOperationStatus=1)
<sw21>dis dfs-group 1 m-lag
* : Local node
Heart beat state : OK
Node 1 * Dfs-Group ID : 1 Priority : 150 Address : ip address 10.20.35.141 vpn-instance VRF-DAD-1 State : Master Causation : - System ID : 4857-02cc-aef1 SysName : sw21 Version : V200R002C50SPC800 Device Type : CE6810LI
Node 2 Dfs-Group ID : 1 Priority : 120 Address : ip address 10.20.35.142 vpn-instance VRF-DAD-1 State : Backup Causation : - System ID : 4857-02cc-aea1 SysName : sw22 Version : V200R002C50SPC800 Device Type : CE6810LI

Мастер свитч начал слать свои ARP.

@r13:~$ monitor interfaces ethernet eth3 traffic
Capturing traffic on eth3 ... 0.000000 48:57:02:cc:ae:f0 -> ff:ff:ff:ff:ff:ff ARP Gratuitous ARP for 10.20.35.141 (Request) 0.000004 48:57:02:cc:ae:f0 -> ff:ff:ff:ff:ff:ff ARP Gratuitous ARP for 10.20.35.141 (Request) 1.006338 48:57:02:cc:ae:f0 -> ff:ff:ff:ff:ff:ff ARP Gratuitous ARP for 10.20.35.141 (Request) 1.006342 48:57:02:cc:ae:f0 -> ff:ff:ff:ff:ff:ff ARP Gratuitous ARP for 10.20.35.141 (Request) 2.005912 48:57:02:cc:ae:f0 -> ff:ff:ff:ff:ff:ff ARP Gratuitous ARP for 10.20.35.141 (Request) 2.005917 48:57:02:cc:ae:f0 -> ff:ff:ff:ff:ff:ff ARP Gratuitous ARP for 10.20.35.141 (Request)
@r13:~$ monitor interfaces ethernet eth3 traffic detail
Capturing traffic on eth3 ...
Frame 1 (66 bytes on wire, 66 bytes captured) Arrival Time: Sep 18, 2021 13:30:45.005576000 [Time delta from previous captured frame: 0.000000000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 0.000000000 seconds] Frame Number: 1 Frame Length: 66 bytes Capture Length: 66 bytes [Frame is marked: False] [Protocols in frame: eth:arp]
Ethernet II, Src: 48:57:02:cc:ae:f0 (48:57:02:cc:ae:f0), Dst: ff:ff:ff:ff:ff:ff (ff:ff:ff:ff:ff:ff) Destination: ff:ff:ff:ff:ff:ff (ff:ff:ff:ff:ff:ff) Address: ff:ff:ff:ff:ff:ff (ff:ff:ff:ff:ff:ff) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: 48:57:02:cc:ae:f0 (48:57:02:cc:ae:f0) Address: 48:57:02:cc:ae:f0 (48:57:02:cc:ae:f0) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: ARP (0x0806) Trailer: 0000000000000000000000000000000000000000 Frame check sequence: 0x00000000 [incorrect, should be 0xed2877af]
Address Resolution Protocol (request/gratuitous ARP) Hardware type: Ethernet (0x0001) Protocol type: IP (0x0800) Hardware size: 6 Protocol size: 4 Opcode: request (0x0001) [Is gratuitous: True] Sender MAC address: 48:57:02:cc:ae:f0 (48:57:02:cc:ae:f0) Sender IP address: 10.20.35.141 (10.20.35.141) Target MAC address: 00:00:00:00:00:00 (00:00:00:00:00:00) Target IP address: 10.20.35.141 (10.20.35.141)
Frame 2 (66 bytes on wire, 66 bytes captured) Arrival Time: Sep 18, 2021 13:30:45.005580000 [Time delta from previous captured frame: 0.000004000 seconds] [Time delta from previous displayed frame: 0.000004000 seconds] [Time since reference or first frame: 0.000004000 seconds] Frame Number: 2 Frame Length: 66 bytes Capture Length: 66 bytes [Frame is marked: False] [Protocols in frame: eth:arp]
Ethernet II, Src: 48:57:02:cc:ae:f0 (48:57:02:cc:ae:f0), Dst: ff:ff:ff:ff:ff:ff (ff:ff:ff:ff:ff:ff) Destination: ff:ff:ff:ff:ff:ff (ff:ff:ff:ff:ff:ff) Address: ff:ff:ff:ff:ff:ff (ff:ff:ff:ff:ff:ff) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: 48:57:02:cc:ae:f0 (48:57:02:cc:ae:f0) Address: 48:57:02:cc:ae:f0 (48:57:02:cc:ae:f0) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: ARP (0x0806) Trailer: 0000000000000000000000000000000000000000 Frame check sequence: 0x00000000 [incorrect, should be 0xed2877af]
Address Resolution Protocol (request/gratuitous ARP) Hardware type: Ethernet (0x0001) Protocol type: IP (0x0800) Hardware size: 6 Protocol size: 4 Opcode: request (0x0001) [Is gratuitous: True] Sender MAC address: 48:57:02:cc:ae:f0 (48:57:02:cc:ae:f0) Sender IP address: 10.20.35.141 (10.20.35.141) Target MAC address: 00:00:00:00:00:00 (00:00:00:00:00:00) Target IP address: 10.20.35.141 (10.20.35.141)

Поднимаем MLAG порты на sw22.
Все хорошо, все поднялос.

<sw22>dis dfs-group 1 m-lag
* : Local node
Heart beat state : OK
Node 2 * Dfs-Group ID : 1 Priority : 120 Address : ip address 10.20.35.142 vpn-instance VRF-DAD-1 State : Backup Causation : - System ID : 4857-02cc-aea1 SysName : sw22 Version : V200R002C50SPC800 Device Type : CE6810LI
Node 1 Dfs-Group ID : 1 Priority : 150 Address : ip address 10.20.35.141 vpn-instance VRF-DAD-1 State : Master Causation : - System ID : 4857-02cc-aef1 SysName : sw21 Version : V200R002C50SPC800 Device Type : CE6810LI
<sw22>dis dfs-group 1 node 1 m-lag
* - Local node
M-Lag ID : 16
Interface : Eth-Trunk 16
Port State : Up
Status : active-active(*)
<sw22>dis dfs-group 1 node 2 m-lag
* - Local node
M-Lag ID : 16
Interface : Eth-Trunk 16
Port State : Up
Status : active(*)-active

Просмотр информации об ONU на Huawei SmartAX MA5600 — IT Blog

Базовая настройка коммутаторов и маршрутизаторов huawei

Восстанавливаем конфиг с внешенй usb

Смена ip адресов на dad линках