Fa'atulagaina o ta'iala fa'avae mo sui o Huawei CloudEngine (fa'ata'ita'iga, 6865)

Fa'atulagaina o ta'iala fa'avae mo sui o Huawei CloudEngine (fa'ata'ita'iga, 6865)

Ua leva ona matou faʻaaogaina meafaigaluega Huawei mo se taimi umi i totonu gaosiga o ao lautele. Talu ai nei na matou faʻaopoopo le CloudEngine 6865 faʻataʻitaʻiga i le gaioiga ma pe a faʻaopoopoina masini fou, na oʻo mai le manatu e faʻasoa se lisi faʻapitoa poʻo se faʻaputuga o tulaga faʻavae ma faʻataʻitaʻiga.

E tele faʻatonuga tutusa i luga o le upega tafaʻilagi mo tagata faʻaoga meafaigaluega Cisco. Ae ui i lea, e itiiti lava tala mo Huawei ma o nisi taimi e tatau ona e suʻeina faʻamatalaga i totonu o faʻamaumauga pe aoina mai i le tele o tala. Matou te faʻamoemoe o le a aoga, ta o!

O le tusiga o le a faʻamatalaina vaega nei:

So'oga muamua

Fa'atulagaina o ta'iala fa'avae mo sui o Huawei CloudEngine (fa'ata'ita'iga, 6865)Feso'ota'i i le ki e ala i le fa'aoga fa'amafanafana

Ona o le le mafai, o sui Huawei e lafo e aunoa ma le faʻatulagaina. A aunoa ma se faila fetuutuunai i le manatua o le ki, o le ZTP (Zero Touch Provisioning) protocol e amata pe a ki. Matou te le faʻamatalaina auiliili lenei masini, matou te maitauina e faigofie pe a galue ma se numera tele o masini poʻo mo le faʻatulagaina mamao. Vaaiga lautele ole ZTP e mafai ona maua i luga o le upega tafaʻilagi a le gaosiga.

Mo le seti muamua e aunoa ma le faʻaogaina o le ZTP, e manaʻomia se fesoʻotaʻiga faʻamafanafana.

Filifiliga feso'ota'iga (e fai si masani)

Ole fua ole felauaiga: 9600
Pepa fa'amaumauga (B): 8
Parity bit: Leai
Taofi (S): 1
Faiga fa'atonutonu le tafe: Leai

A maeʻa ona faʻafesoʻotaʻi, o le a e vaʻai i se talosaga e seti se faʻaupuga mo le fesoʻotaʻiga faʻamafanafana.

Seti se upu faataga mo le fesootaiga faamafanafana

E mana'omia se upu muamua mo le saini muamua e ala i le fa'amafanafanaga.
Fa'aauau ona seti? [Y/N]:
y
Seti se upu faataga ma teu malu!
A leai o le a le mafai ona e saini e ala i le faʻamafanafanaga.
Fa'amolemole fetu'una'i le upegatafa'ilagi (8-16)
Ulufale upu faʻamau:
Faamaonia le upu faalilolilo:

Na'o le tu'u i totonu o se upu fa'amaonia, fa'amaonia ma ua mae'a! Ona mafai lea ona e suia le upu faʻamaonia ma isi faʻamaoniga faʻamaonia i luga o le pusa faʻamafanafana e faʻaaoga ai tulafono nei:

Faataitaiga suia upu faataga

faiga-vaaiga
[~HUAWEI]
fa'amafanafanaga fa'aoga fa'aoga 0
[~HUAWEI-ui-console0] fa'amaoniga-faiga upu fa'aoga
[~HUAWEI-ui-console0] seti fa'amaonia upu fa'amaonia sipher <password>
[*HUAWEI-ui-console0]
tautino

Seti fa'aputu (iStack)

A mae'a ona maua le avanoa i suiga, e mafai ona e filifili le fa'aputuga. Huawei CE fa'aogaina le tekonolosi iStack e tu'ufa'atasia ai le tele o ki i totonu o se masini talafeagai e tasi. O le fa'aputuga pito i luga o se mama, i.e. E fautuaina e fa'aoga ia le itiiti ifo ma le 2 ports i luga o ki ta'itasi. Ole numera o ports e faʻalagolago ile saoasaoa o fesoʻotaʻiga manaʻomia o ki i totonu o le faaputuga.

E fautuaina le faʻaogaina o uplinks pe a faʻapipiʻi, o le saoasaoa e masani ona maualuga atu nai lo ports mo le faʻaogaina o masini pito. O le mea lea, e mafai ona e mauaina le tele o bandwidth ma le itiiti ifo o ports. E le gata i lea, mo le tele o faʻataʻitaʻiga o loʻo i ai tapulaʻa i le faʻaogaina o ports gigabit mo le faʻaputuina. E fautuaina le fa'aogaina o ports 10G.

E lua filifiliga fa'atulagaina e ese teisi i le fa'asologa o laasaga:

  1. Fa'asologa muamua o ki ma latou so'oga fa'aletino mulimuli ane.

  2. Muamua, faʻapipiʻi ma faʻafesoʻotaʻi ki le tasi i le isi, ona faʻatulagaina lea e galulue i se faaputuga.

O le fa'asologa o gaioiga mo nei filifiliga e fa'apea:

Fa'atulagaina o ta'iala fa'avae mo sui o Huawei CloudEngine (fa'ata'ita'iga, 6865)Laasaga mo Filifiliga Fa'apipi'i Suiga Lua

Mafaufau i le filifiliga lona lua (umi) mo le setiina o le faaputuga. Ina ia faia lenei mea, mulimuli i laasaga nei:

  1. Matou te fuafuaina galuega e fa'atatau i le taimi fa'aletonu. Matou te fatuina se faasologa o gaioiga.

  2. Matou te faia faʻapipiʻi ma fesoʻotaʻiga uaea o ki.

  3. Matou te faʻapipiʻiina faʻamaufaʻailoga faavae mo le kili matai:

    [~HUAWEI] stack

3.1. Matou te setiina faʻamaufaʻailoga matou te manaʻomia

#
fa'aputu tagata 1 toe fa'anumera X - o le X o le ID sui fou i le faaputuga. Ile faaletonu, ID = 1
ma e mafai ona e tuua le ID faaletonu mo le suiga matai. 
#
tagata fa'aputu 1 fa'amuamua 150 - Fa'ailoa le fa'amuamua. O le ki ma le tele
o le a tu'uina atu le fa'amuamua e le ki fa'aputuga matai. Fa'amuamua taua
fa'aletonu: 100.
#
tagata fa'aputu {member-id | } vaega uma — tofia se Domain ID mo le faaputuga.
E le'i setiina le ID ID.
#

Faataitaiga:
faiga-vaaiga
[~HUAWEI] sysname SwitchA
[Huawei] tautino
[~SuiA] faaputuga
[~ SwitchA-stack] tagata fa'aputu 1 fa'amuamua 150
[SwitchA-stack] tagata fa'aputu 1 vaega 10
[SwitchA-stack] fāiatu
[SuiA] tautino

3.2 Fa'atulagaina o le fa'aputuga o taulaga fa'ata'ita'iga (fa'ata'ita'iga)

[~SuiA] tau fa'aputuga atina'e 1/1

[SwitchA-Stack-Port1/1] uafu sui-vaega fa'aoga 10ge 1/0/1 i le 1/0/4

Lapataiga: A mae'a le fa'atulagaina,

1. O le (s) (10GE1 / 0 / 1-1 / 0/4) o le a liua i le tulaga faʻapipiʻi ma faʻapipiʻiina i le
port crc-statistics faʻaosoina sese-lalo faʻatonuga pe a le o iai le faʻatulagaga. 

2.The interface(s) e mafai ona alu Error-Down (crc-statistics) ona e leai se faʻaogaina o le tapuni i luga o fesoʻotaʻiga. Faʻaauau? [Y/N]: y

[SwitchA-Stack-Port1/1] tautino
[~ SwitchA-Stack-Port1/1] foʻi

Le isi, e tatau ona e faʻasaoina le faʻatulagaga ma toe faʻafou le ki:

faʻaola
Lapataiga: O le faatulagaga o iai nei o le a tusia i le masini. faaauau? [Y/N]: y
toe toe fai
Lapataiga: O le a toe faʻafouina le faiga. faaauau? [Y/N]: y

4. Fa'agata Tausi Fa'aputu i luga ole Suiga Matai (Fa'ata'ita'iga)

[~SuiA] tau fa'aputuga atina'e 1/1
[*SwitchA-Stack-Port1/1]
tapuni i lalo
[*SwitchA-Stack-Port1/1]
tautino

5. Matou te fa'atulagaina le ki lona lua i le faaputuga e ala i le fa'atusa ma le muamua:

faiga-vaaiga
[~HUAWEI] igoa ole igoa
SuigaB
[*HUAWEI]
tautino
[~SuiB]
faaputuga
[~SuigaB-faaputuga]
tagata fa'aputu 1 fa'amuamua 120
[*SuiB-faaputuga]
tagata fa'aputu 1 vaega 10
[*SuiB-faaputuga]
tagata fa'aputu 1 renumera 2 tofi-config
Lapataiga: O le fa'aputuga fa'aputu ole ID 1 o le a tu'ufa'atasia ile ID ole sui 2
pe a uma ona toe setiina le masini. faaauau? [Y/N]:
y
[*SuiB-faaputuga]
fāiatu
[*SuiB]
tautino

Seti ni uafu mo le fa'aputuina. Manatua e ui lava o le poloaiga "tagata fa'aputu 1 renumera 2 tofi-config”, sui-id i le faatulagaga e faʻaaogaina ma le tau "1" mo SwitchB. 

E tupu lenei mea ona o le sui-id o le ki o le a suia pe a uma ona toe faʻafouina, ma i luma o le ki o loʻo i ai pea se sui-id e tutusa ma le 1. O le parakalafa "tofi-config" e na'o le mana'omia ina ia a uma ona toe fa'afou le ki, o fa'aputuga uma e fa'asaoina mo le sui 2, o le a avea ma ki, aua ua suia lona ID sui mai le tau 1 i le tau 2.

[~SuiB] tau fa'aputuga atina'e 1/1
[*SwitchB-Stack-Port1/1]
uafu sui-vaega fa'aoga 10ge 1/0/1 i le 1/0/4
Lapataiga: A mae'a le fa'atulagaina,
1. O le a fa'aliliuina le fa'aputuga (10GE1/0/1-1/0/4) (XNUMXGEXNUMX/XNUMX/XNUMX-XNUMX/XNUMX/XNUMX)
mode ma ia configured ma le taulaga crc-statistics faʻaosoina sese-lalo poloaiga pe afai e faia le faatulagaga
e le o iai.
2. O le (s) faʻaoga e mafai ona alu Error-Down (crc-statistics) ona e leai se faʻatonuga tapuni i luga o le
fesoʻotaʻiga.
faaauau? [Y/N]:
y
[*SwitchB-Stack-Port1/1]
tautino
[~ SwitchB-Stack-Port1/1]
foʻi

Toe Toe Toe SuiB

faʻaola
Lapataiga: O le faatulagaga o iai nei o le a tusia i le masini. faaauau? [Y/N]:
y
toe toe fai
Lapataiga: O le a toe faʻafouina le faiga. faaauau? [Y/N]:
y

6. Fa'aagavaa fa'aputuga uafu i luga o le ki matai. E taua le i ai o le taimi e mafai ai ona faʻaogaina ports aʻo leʻi maeʻa le toe faʻafouina o le Suiga B, aua. afai e te kiina pe a uma, ole sui B o le a toe faʻafou.

[~SuiA] tau fa'aputuga atina'e 1/1
[~ SwitchA-Stack-Port1/1]
soloia le tapunia
[*SwitchA-Stack-Port1/1]
tautino
[~ SwitchA-Stack-Port1/1]
foʻi

7. Siaki le faagaoioiga o le faaputuga ma le poloaiga “fa'aputuga fa'aaliga"

Fa'ata'ita'iga o le fa'atonuga o galuega pe a uma le fa'atulagaina sa'o

fa'aputuga fa'aaliga

---------------------------

MemberID Matafaioi MAC Fa'amuamua Masini Tulaga Fa'amatalaga

---------------------------

+1 Matai 0004-9f31-d520 150 CE6850-48T4Q-EI 

 2 Taofi 0004-9f62-1f40 120 CE6850-48T4Q-EI 

---------------------------

+ o loʻo faʻaalia ai le masini o loʻo nofo ai le faʻaogaina o le pulega.

8. Faasaoina le faatulagaga o le faaputuga i le poloaiga “faʻaola". Ua mae'a le seti.

Faʻamatalaga auiliili e uiga i iStack и iStack faʻataʻitaʻiga faʻatulagaina e mafai foi ona vaʻaia i luga ole upega tafaʻilagi a Huawei.

Fa'atonu avanoa

I luga na matou galulue ai e ala i se fesoʻotaʻiga faʻamafanafana. Ole taimi nei e tatau ona tatou faʻafesoʻotaʻi i la tatou ki (stack) i luga ole fesoʻotaʻiga. Ina ia faia lenei mea, e manaʻomia se atinaʻe (tasi pe sili atu) ma se tuatusi IP. E masani lava, mo se ki, o le tuatusi o loʻo tuʻuina atu i se atinaʻe i le VLAN pulega poʻo se taulaga faʻapitoa. Ae o iinei, ioe, e faalagolago uma i luga o le fesoʻotaʻiga topology ma le faʻamoemoega o le ki.

Fa'ata'ita'iga o le fa'atulagaina o tuatusi mo VLAN fa'aoga 1:

[~HUAWEI] fa'aoga vlan 1
[~HUAWEI-Vlanif1] tuatusi ip 10.10.10.1 255.255.255.0
[~HUAWEI-Vlanif1] tautino

E mafai muamua ona e faia manino se Vlan ma tuʻu i ai se igoa, mo se faʻataʻitaʻiga:

[~Sui] vlan 1
[*Sui-vlan1] igoa TEST_VLAN (VLAN igoa e filifili)

O loʻo i ai sina taʻavale ola e tusa ai ma le faʻaigoaina - tusi igoa o fausaga faʻapitoa i mataitusi tetele (ACL, Route-map, o nisi taimi igoa VLAN) ina ia faafaigofie ai ona maua i latou i le faila faila. E mafai ona e ave "auupega" 😉

O lea la, ua i ai le matou VLAN, o lea ua matou "tuu" i luga o se taulaga. Mo le filifiliga o loʻo faʻamatalaina i le faʻataʻitaʻiga, e le manaʻomia lenei mea, aua. o ports sui uma e le mafai i le VLAN 1. Afai matou te mananaʻo e faʻapipiʻi se taulaga i se isi VLAN, matou te faʻaogaina tulafono talafeagai:

Fa'atulagaina o le uafu i le auala avanoa:

[~Sui] fa'aoga 25GE 1/0/20
[~Sui-25GE1/0/20] avanoa so'otaga tau
[~Sui-25GE1/0/20] avanoa avanoa vlan 10
[~Sui-25GE1/0/20] tautino

Fa'atulagaina o le uafu i le tulaga ogalaau:

[~Sui] fa'aoga 25GE 1/0/20
[~Sui-25GE1/0/20] uafu so'o-ituaiga ogalaau
[~Sui-25GE1/0/20] pusa ogalaau pvid vlan 10 - fa'ailoa VLAN fa'aletino (fa'avaa i lenei VLAN e leai se pine i le ulutala)
[~Sui-25GE1/0/20] pusa ogalaau fa'atagaina-pasi vlan 1 i le 20 - fa'ataga na'o VLAN fa'ailoga mai le 1 i le 20 (mo se fa'ata'ita'iga)
[~Sui-25GE1/0/20] tautino

Na matou iloa le faʻatulagaina o faʻaoga. Sei o tatou agai i luma ile SSH configuration.
Matou te tuʻuina atu naʻo le seti manaʻomia o poloaiga:

Tofia se igoa i le ki

faiga-vaaiga
[~HUAWEI] sysname SSH Server
[*HUAWEI] tautino

Fausia ki

[~SSH Server] rsa local-key-pair foafoa // Fa'atupu le 'au RSA fa'apitonu'u ma pa'aga autu.
Ole igoa autu ole: SSH Server_Host
Ole tele ole ki lautele ole (512 ~ 2048).
FAAMANATU: E fai sina taimi puupuu le fa'atupuina o paga autu.
Fa'aulu i totonu o le modulus [default = 2048] :
2048
[*SSH Server]
tautino

Fa'atulaga le VTY fa'aoga

[~SSH Server] fa'aoga-fa'aoga vty 0 4
[~SSH Server-ui-vty0-4] fa'amaoniga-faiga aaa 
[SSH Server-ui-vty0-4]
tulaga fa'aoga tulaga 3
[SSH Server-ui-vty0-4] protocol inbound ssh
[*SSH Server-ui-vty0-4] fāiatu

Fausia se fa'aoga fa'apitonu'u "client001" ma fa'atutu le fa'amaoniga fa'amaonia mo ia

[SSH Server] aaa
[SSH Server-aaa] local-user client001 password irreversible-cipher
[SSH Server-aaa] local-user client001 tulaga 3
[SSH Server-aaa] local-user client001 service-type ssh
[SSH Server-aaa] fāiatu
[SSH Server] ssh tagata fa'aoga client001 fa'amaoniga-ituaiga upu faataga

Fa'agaoioia le auaunaga SSH i le ki

[~SSH Server] stelnet server mafai
[*SSH Server] tautino

Pa'i mulimuli: fa'atūina auaunaga-tupe mo tagata fa'aoga client001

[~SSH Server] ssh user client001 service-type stelnet
[*SSH Server] tautino

Ua mae'a le seti. Afai na e faia mea uma sa'o, ona mafai lea ona e faʻafesoʻotaʻi i le ki e ala i le upega tafaʻilagi ma faʻaauau pea ona galue.

O nisi faʻamatalaga i le faʻatulagaina o le SSH e mafai ona maua i le Huawei faʻamaumauga - muamua и mataupu lona lua.

Fa'atonu Fa'atonu Fa'atonu Fa'atonu

I lenei poloka, o le a tatou mafaufau i se numera itiiti o poloka faʻatonuga eseese mo le faʻatulagaina o foliga sili ona lauiloa.

1. Fa'atulagaina le taimi o le faiga ma lona fa'amaopoopoina e ala i le NTP.

E mafai ona e faʻaogaina tulafono nei e seti ai le taimi i le lotoifale i luga o le ki:

sone taimi { fa'aopoopo | to'ese}
taimi ole uati [ utc ] HH:MM:SS YYYY-MM-DD

Faataitaiga o le setiina o le taimi i le lotoifale

sone taimi MSK faʻaopoopo 03:00:00
taimi ole uati 10:10:00 2020-10-08

Ina ia faʻafetaui le taimi e ala i le NTP ma le 'auʻaunaga, ulufale i le poloaiga lenei:

ntp unicast server [ faʻamatalaga numera | authentication-keyid ki-id | puna-fesoasoani ituaiga-ituaiga

Fa'ata'ita'iga fa'atonuga mo le fa'amaopoopo taimi e ala ile NTP

ntp unicast-server 88.212.196.95
tautino

2. Ina ia galue i le ki, o nisi taimi e te manaʻomia le faʻapipiʻiina a itiiti ifo ma le tasi le auala - o le auala faʻaletonu poʻo le auala faʻaletonu. Ole fa'atonuga lea e fa'aaoga e fai ai auala:

ip auala-e tumau tuatusi ip { mask | mask-umi } { nexthop-tuatusi | fa'aoga-ituaiga fa'aoga-numera [nexthop-address] }

O se faʻataʻitaʻiga faʻatonuga mo le fatuina o auala:

faiga-vaaiga
ip auala-e tumau
0.0.0.0 0.0.0.0 192.168.0.1
tautino

3. Faʻatulagaina le faiga faʻaogaina o le Spanning-Tree protocol.

Mo le faʻaoga saʻo o se ki fou i totonu o se fesoʻotaʻiga o loʻo i ai, e taua le gauai atu i le filifiliga o le faiga faʻaogaina STP. E le gata i lea, e manaia le faʻatulagaina vave. O le a tatou le taofi iinei mo se taimi umi, aua. o le autu e fai si lautele. Se'i o tatou fa'amatala na'o le fa'agaioiga o le protocol:

stp faiga { stp | rstp | mstp | vbst } - i lenei poloaiga, filifili le faiga matou te manaʻomia. Faiga masani: MSTP. O le auala fautuaina foi mo le galue i luga o suiga o Huawei. E fetaui i tua ma le RSTP o lo'o avanoa.

Faataitaiga:

faiga-vaaiga
stp mode mstp
tautino

4. O se faʻataʻitaʻiga o le setiina o se uafu ki mo le faʻafesoʻotaʻi o se masini faʻaiʻu.

Mafaufau i se faʻataʻitaʻiga o le faʻatulagaina o se avanoa avanoa e faʻatautaia ai feoaiga ile VLAN10

[SAU] fa'aoga 10ge 1/0/3
[SW-10GE1/0/3] avanoa so'otaga tau
[SW-10GE1/0/3] port default vlan 10
[SW-10GE1/0/3] stp edged-port enable
[*SW-10GE1/0/3] fāiatu

Faalogo i le poloaigastp edged-port enable" - e faʻatagaina oe e faʻavaveina le faagasologa o le suiga o le taulaga i le tulaga faʻasalalau. Ae ui i lea, e le tatau ona faʻaogaina lenei faʻatonuga i ports e fesoʻotaʻi ai isi ki.

E le gata i lea, o le poloaiga "stp bpdu-filter mafai".

5. O se faʻataʻitaʻiga o le faʻatulagaina o le Port-Channel i le LACP mode mo le faʻafesoʻotaʻi i isi ki poʻo sapalai.

Faataitaiga:

[SW] feso'ota'iga eth-trunk 1
[SW-Eth-Trunk1] uafu so'o-ituaiga ogalaau
[SW-Eth-Trunk1] ogalaau tau fa'atagaina-pasi vlan 10
[SW-Eth-Trunk1] faiga lacp-static (pe mafai ona e faʻaaogaina lacp-malosi)
[SW-Eth-Trunk1] fāiatu
[SW] fa'aoga 10ge 1/0/1
[SW-10GE1/0/1] eth-Trunk 1
[SW-10GE1/0/1] fāiatu
[SW] fa'aoga 10ge 1/0/2
[SW-10GE1/0/2] eth-Trunk 1
[*SW-10GE1/0/2] fāiatu

Aua nei galo e uiga i "tautino"ma o loʻo matou galulue faʻatasi ma le atinaʻe eth ogalaau 1.
E mafai ona e siakiina le tulaga o le soʻotaga tuʻufaʻatasia ma le poloaiga "fa'aali eth-trunk".

Ua matou faʻamatalaina manatu autu o le faʻatulagaina o suiga o Huawei. Ioe, e mafai ona e su'e loloto i totonu o le autu ma le tele o manatu e le o faamatalaina, ae na matou taumafai e faʻaalia le autu, sili ona lauiloa tulafono mo le seti muamua. 

Matou te faʻamoemoe o lenei "tusi lesona" o le a fesoasoani ia te oe e faʻapipiʻi vave le ki.
O le a sili foi pe afai e te tusia i faʻamatalaga tulafono e te manatu o loʻo misi i le tusiga, ae mafai foi ona faʻafaigofieina le faʻatulagaina o suiga. Ia, e pei ona masani ai, matou te fiafia e tali au fesili.

puna: www.habr.com

Faaopoopo i ai se faamatalaga