Kudala sisebenzisa izixhobo zeHuawei . Kutshanje thina kwaye xa ukongeza izixhobo ezitsha, kwavela ingcamango ukwabelana ngolunye uhlobo loluhlu lokutshekisha okanye ingqokelela yezicwangciso ezisisiseko kunye nemizekelo.
Kukho imiyalelo emininzi efanayo kwi-intanethi kubasebenzisi bezixhobo zeCisco. Nangona kunjalo, kwiHuawei kukho amanqaku ambalwa kwaye ngamanye amaxesha kufuneka ukhangele ulwazi kumaxwebhu okanye uqokelele kumanqaku amaninzi. Siyathemba ukuba iya kuba luncedo, masihambe!
Kwinqaku siza kuchaza ezi ngongoma zilandelayo:
Uqhagamshelo lokuqala
Ukuqhagamshela kwisitshixo usebenzisa i-console interface
Ngokungagqibekanga, iiswitshi zeHuawei ziza ngaphandle koqwalaselo lwangaphambili. Ngaphandle kwefayile yoqwalaselo kwimemori yokutshintsha, iprotocol yeZTP (Zero Touch Provisioning) iqaliswe xa ilayitiwe. Asiyi kuchaza lo matshini ngokweenkcukacha, siya kuqaphela kuphela ukuba kufanelekile xa usebenza nenani elikhulu lezixhobo okanye ukwenza uqwalaselo ukude. Uphononongo lweZTP .
Kuseto lokuqala ngaphandle kokusebenzisa i-ZTP, uqhagamshelwano lwekhonsoli luyafuneka.
Iiparamitha zoqhagamshelo (umgangatho othe ngqo)
Inqanaba losulelo: 9600
Ibit yedatha (B): 8
I-Parity bit: Akukho
Ibit yokumisa (S): 1
Imo yolawulo lokuqukuqela: Akukho
Emva kokudibanisa, uya kubona isicelo sokuseta igama eligqithisiweyo loqhagamshelwano lweconsole.
Cwangcisa igama lokugqithisa loqhagamshelwano lweconsole
Igama lokugqitha liyafuneka kungeniso lokuqala usebenzisa i console.
Qhubeka nokuyiseta? [Y/N]: y
Seta igama lokugqitha kwaye uligcine likhuselekile!
Ngaphandle koko awuyi kukwazi ukungena nge-console.
Nceda uqwalasele igama lokungena (8-16)
Ngenisa igama lokugqithisa:
Ngqina iphasiwedi:
Seta nje igama lokugqithisa, liqinisekise kwaye ugqibile! Ungatshintsha ke igama eligqithisiweyo kunye nezinye iiparamitha zokungqinisisa kwizibuko le console usebenzisa le miyalelo ilandelayo:
Umzekelo wokutshintsha igama lokugqithisa
Indlela yokujonga
[~HUAWEI] umsebenzisi-interface console 0
[~HUAWEI-ui-console0] ungqinisiso-indlela yokugqitha
[~HUAWEI-ui-console0] cwangcisa i-password yokuqinisekisa <igama lokugqithisa>
[*HUAWEI-ui-console0] zibophe
Ukumisela ukupakishwa (iStack)
Emva kokufumana ukufikelela kwiitshintshi, unokuqwalasela isitaki ukuba kuyimfuneko. IHuawei CE isebenzisa itekhnoloji ye-iStack ukudibanisa iiswitshi ezininzi kwisixhobo esinye esinengqiqo. I-topology ye-stack yindandatho, okt. Kucetyiswa ukuba kusetyenziswe ubuncinci bezibuko ezi-2 kwiswitshi nganye. Inani lamazibuko lixhomekeke kwisantya esifunwayo sokusebenzisana phakathi kokutshintsha kwisitaki.
Xa kufakwa i-stacking, kuyacetyiswa ukuba kusetyenziswe i-uplinks, isantya esihlala siphezulu kuneso samachweba okudibanisa izixhobo zokugqibela. Ngaloo ndlela, unokufumana ugqithiso oluninzi ngamazibuko ambalwa. Kwakhona, kwiimodeli ezininzi kukho izithintelo ekusebenziseni izibuko zegigabit zokupakisha. Kucetyiswa ukuba kusetyenziswe ubuncinci izibuko ze-10G.
Kukho iinketho ezimbini zokuseta ezohluka kancinci kulandelelwano lwamanyathelo:
-
Uqwalaselo lokuqala lokutshintsha okulandelwa luqhagamshelo lwazo ngokwasemzimbeni.
-
Okokuqala, faka kwaye udibanise iitshintshi omnye komnye, uze uzilungiselele ukuba zisebenze kwi-stack.
Ulandelelwano lwezenzo kolu khetho lulandelayo:
Ulandelelwano lwezenzo kwiinketho ezimbini zokubeka iswitshi
Makhe siqwalasele inketho yesibini (ende) yokuseta istaki. Ukwenza oku kufuneka wenze oku kulandelayo:
-
Siceba umsebenzi sithathela ingqalelo ixesha lokuphumla elinokwenzeka. Senza ulandelelwano lwezenzo.
-
Senza ufakelo kunye noqhagamshelo lwekhebula lokutshintsha.
-
Qwalasela iiparamitha zompakisho ongundoqo wotshintsho olukhulu:
[~HUAWEI] stack
3.1. Siqwalasela iiparamitha esizifunayo
#
istaki ilungu le-1 kwakhona inani X — apho i-X iyi-ID entsha yokutshintsha kwisipaki. Ukuhlala kukho, isazisi = 1
kwaye kwi-master switch ungashiya i-ID engagqibekanga.
#
i-stack ilungu eli-1 eliphambili eli-150 — bonisa okubalulekileyo. Tshintsha ngeyona inkulu
Okuphambili kuya kwabelwa kwi-master switch yesitaki. Ixabiso eliphambili
ukungagqibeki: 100.
#
ilungu lestakhi { ilungu-id | zonke } ithambeka — yabela i-ID yeDomain yesipakisho.
Ngokungagqibekanga, indawo ye-ID ayichazwanga.
#
Umzekelo:
Indlela yokujonga
[~HUAWEI] Igama elithi SwitchA
[HUAWEI] zibophe
[~TshintshoA] ukubeka
[~SwitchA-stack] i-stack ilungu eli-1 eliphambili eli-150
[SwitchA-stack] stack ilungu 1 ithambeka 10
[SwitchA-stack] yeka
[TshintshaA] zibophe
3.2 Ukuqwalasela ujongano lwezibuko lokupakisha (umzekelo)
[~TshintshoA] i-interface stack-port 1/1[TshintshaA-Stack-Port1/1] izibuko ilungu-iqela ujongano 10ge 1/0/1 ukuba 1/0/4
Isilumkiso: Emva kokuba uqwalaselo lugqityiwe,
1.I-interface (s) (s) (10GE1/0/1-1/0/4) iya kuguqulelwa kwindlela yokupakisha kwaye iqwalaselwe kunye
izibuko crc-izibalo zibangela imposiso-phantsi umyalelo ukuba uqwalaselo alukho.
2.I-interface (ii) inokuhamba imposiso-Phantsi (crc-statistics) kuba akukho lungelelwaniso lokuvala kujongano.Qhubeka? [Y/N]: y
[TshintshaA-Stack-Port1/1] zibophe
[~SwitchA-Stack-Port1/1] buya
Okulandelayo, kufuneka ugcine uqwalaselo kwaye uqalise kwakhona iswitshi:
ugcine
Isilumkiso: Ubumbeko lwangoku luza kubhalwa kwisixhobo. Qhubeka? [Y/N]: y
qalisa kwakhona
Isilumkiso: Inkqubo iya kuqalisa kwakhona. Qhubeka? [Y/N]: y
4. Cima izibuko zokupakisha kwi-master switch (umzekelo)
[~TshintshoA] i-interface stack-port 1/1
[*SwitchA-Stack-Port1/1] Cima
[*SwitchA-Stack-Port1/1] zibophe
5. Qwalasela iswitshi yesibini kwisitaki ngokuthelekisa neyokuqala:
Indlela yokujonga
[~HUAWEI] sysname TshintshaB
[*HUAWEI] zibophe
[~TshintshaB] ukubeka
[~SwitchB-stack] i-stack ilungu eli-1 eliphambili eli-120
[*SwitchB-stack] stack ilungu 1 ithambeka 10
[*SwitchB-stack] stack ilungu 1 kwakhona inani 2 ilifa-config
Isilumkiso: Ubume bemfumba ye-ID yelungu 1 iya kufunyanwa njengelifa kwi-ID yelungu yesi-2
emva kokuba isixhobo sisetyenzisiwe. Qhubeka? [Y/N]: y
[*SwitchB-stack] yeka
[*TshintshaB] zibophe
Ukuqwalasela izibuko zokupakisha. Nceda uqaphele ukuba nangona umyalelo "stack ilungu 1 kwakhona inani 2 ilifa-config”, ilungu-id kuqwalaselo lisetyenziswa ngexabiso elithi “1” kwiSwitchB.
Oku kwenzeka ngenxa yokuba i-id yelungu lotshintshi iya kutshintshwa kuphela emva kokuqalisa ngokutsha kwaye phambi kokuba iswitshi isenayo ilungu-id elilingana no-1. Ipharamitha “ilifa-config” ifuneka nje ukuze emva kokuqalisa kwakhona iswitshi, zonke iisetingi zestakhi zigcinelwe ilungu 2, eliya kuba sisitshixo, kuba I-ID yelungu layo itshintshiwe ukusuka kwixabiso loku-1 ukuya kwixabiso lesi-2.
[~TshintshaB] i-interface stack-port 1/1
[*SwitchB-Stack-Port1/1] izibuko ilungu-iqela ujongano 10ge 1/0/1 ukuba 1/0/4
Isilumkiso: Emva kokuba uqwalaselo lugqityiwe,
1.I-interface (s) (s) (10GE1/0/1-1/0/4) iya kuguqulelwa kwisitaki
indlela kwaye iqwalaselwe ngezibuko crc-izibalo zibangela imposiso-phantsi umyalelo ukuba uqwalaselo lwenza
ayikho.
2.Ujongano (ii) lunokuhamba imposiso-Phantsi (crc-statistics) kuba akukho qwalaselo lokuvala
ujongano.
Qhubeka? [Y/N]: y
[*SwitchB-Stack-Port1/1] zibophe
[~SwitchB-Stack-Port1/1] buya
Qalisa kwakhona iSwitchB
ugcine
Isilumkiso: Ubumbeko lwangoku luza kubhalwa kwisixhobo. Qhubeka? [Y/N]: y
qalisa kwakhona
Isilumkiso: Inkqubo iya kuqalisa kwakhona. Qhubeka? [Y/N]: y
6. Nika amandla izibuko zokupakisha kwi-master switch. Kubalulekile ukuba ube nexesha lokuvumela amazibuko ngaphambi kokuba ukuqalisa ngokutsha kokutshintsha B kugqitywe, kuba ukuba uyazilayita emva koko, switsha B izakungena kwi-reboot kwakhona.
[~TshintshoA] i-interface stack-port 1/1
[~SwitchA-Stack-Port1/1] qhaqha ukuvala
[*SwitchA-Stack-Port1/1] zibophe
[~SwitchA-Stack-Port1/1] buya
7. Jonga ukusebenza kwesitaki ngomyalelo “bonisa istaki"
Umzekelo wokuphuma komyalelo emva koqwalaselo oluchanekileyo
bonisa istaki
——————————————————————————
I-MemberID Indima ye-MAC ePhambili yeSixhoboInkcazo
——————————————————————————
+1 Master 0004-9f31-d520 150 CE6850-48T4Q-EI
2 Ukulinda 0004-9f62-1f40 120 CE6850-48T4Q-EI
——————————————————————————
+ ibonisa isixhobo apho ujongano olusebenzayo luhlala khona.
8. Gcina ubumbeko lwesitaki ngomyalelo “ugcine" Ukuseta kugqityiwe.
и Unokujonga kwakhona kwiwebhusayithi yeHuawei.
Ukumisela ukufikelela
Ngaphezulu sisebenze ngonxibelelwano lwe-console. Ngoku kufuneka siqhagamshele ngandlela thile kwiswitshi yethu (isitaki) ngenethiwekhi. Ukwenza oku, idinga ujongano (enye okanye ngaphezulu) ngedilesi ye-IP. Ngokuqhelekileyo, ukutshintshwa, idilesi yabelwe ujongano kwiVLAN yolawulo okanye kwizibuko lolawulo elizinikeleyo. Kodwa apha, ngokuqinisekileyo, yonke into ixhomekeke kwi-topology yoqhagamshelwano kunye nenjongo yokusebenza yokutshintsha.
Umzekelo wobumbeko lwedilesi yeVLAN 1 interface:
[~HUAWEI] ujongano vlan 1
[~HUAWEI-Vlanif1] idilesi yep 10.10.10.1 255.255.255.0
[~HUAWEI-Vlanif1] zibophe
Ungaqala ngokuthe gca iVlan kwaye unike igama kuyo, umzekelo:
[~Tshintsha] igqa 1
[*Tshintsho-vlan1] igama TEST_VLAN (Igama le-VLAN liyakhethwa)
Kukho i-hack encinci yobomi malunga nokubiza - bhala amagama ezakhiwo ezinengqiqo ngoonobumba abakhulu (ACL, Route-map, ngamanye amaxesha amagama eVLAN) ukwenza kube lula ukuzifumana kwifayile yoqwalaselo. Ungayifaka kwinkonzo 😉
Ke, sineVLAN, ngoku "siyihlalisa" kwelinye izibuko. Kukhetho oluchazwe kumzekelo, oku akuyimfuneko, kuba Onke amazibuko akwi VLAN 1 ngokwendalo Ukuba sifuna ukuqwalasela izibuko kwenye iVLAN, sebenzisa imiyalelo eyiyo:
Ubumbeko lwezibuko kwindlela yofikelelo:
[~Tshintsha] ujongano 25GE 1/0/20
[~Tshintsho-25GE1/0/20] port link-type ufikelelo
[~Tshintsho-25GE1/0/20] ukufikelela kwizibuko vlan 10
[~Tshintsho-25GE1/0/20] zibophe
Ubumbeko lwezibuko kwimowudi yesiqu:
[~Tshintsha] ujongano 25GE 1/0/20[~Tshintsho-25GE1/0/20] i-port link-type-trunk
[~Tshintsho-25GE1/0/20] isiqu se-port pvid vlan 10 - cacisa iVLAN yomdabu (izakhelo kule VLAN aziyi kuba nethegi kwiheader)
[~Tshintsho-25GE1/0/20] umboko wezibuko vumela-ukudlula vlan 1 ukuya ku-20 - vumela kuphela iiVLAN ezinethegi ukusuka ku-1 ukuya ku-20 (umzekelo)
[~Tshintsho-25GE1/0/20] zibophe
Siye salungisa ukuseta ujongano. Masiqhubele phambili kuqwalaselo lwe-SSH.
Sibonisa kuphela iseti efunekayo yemiyalelo:
Ukwabela igama kwiswitshi
Indlela yokujonga
[~HUAWEI] sysname Umncedisi we-SSH
[*HUAWEI] zibophe
Ukuvelisa izitshixo
[~SSH Server] rsa lendawo-isitshixo-iperi yenza //Velisa inginginya ye-RSA yendawo kunye neeperi zeqhosha leseva.
Igama elingundoqo liya kuba: SSH Server_Host
Uluhlu lwesayizi yesitshixo sikawonke-wonke (512 ~ 2048).
QAPHELA: Ukwenziwa kwezibini eziphambili kuya kuthatha ixesha elifutshane.
Faka amasuntswana kwimodyuli [okungagqibekanga = 2048] : 2048
[*Iseva ye-SSH] zibophe
Ukuseta ujongano lweVTY
[~SSH Server] umsebenzisi-interface vty 0 4
[~SSH Umncedisi-ui-vty0-4] ungqinisiso-imowudi aaa
[SSH Server-ui-vty0-4] inqanaba lelungelo lomsebenzisi 3
[SSH Server-ui-vty0-4] iprotocol yangaphakathi ssh
[*SSH Server-ui-vty0-4] yeka
Yenza umsebenzisi wasekhaya "umthengi001" kwaye ulungiselele ukuqinisekiswa kwegama lokugqitha kuye
[Iseva ye-SSH] aaa[Iseva ye-SSH-aaa] umthengi wendawo-umsebenzisi001 igama lokugqitha elingenakuguquleka-cipher
[Iseva ye-SSH-aaa] umthengi wasekhaya-umsebenzisi001 inqanaba 3
[Iseva ye-SSH-aaa] umsebenzisi wasekhaya001 uhlobo lwenkonzo ssh
[Iseva ye-SSH-aaa] yeka
[Iseva ye-SSH] Umsebenzisi we-ssh umxhasi001 wokuqinisekisa-uhlobo lokugqitha
Ivula inkonzo ye-SSH kwiswitshi
[~SSH Server] iseva ye-stelnet yenza ukuba isebenze[*Iseva ye-SSH] zibophe
Ukuchukumisa okokugqibela: ukuseta inkonzo-tupe kumsebenzisi weklayenti001
[~SSH Server] Umsebenzisi we-ssh umxhasi001 wenkonzo-uhlobo lwe-stelnet[*Iseva ye-SSH] zibophe
Ukuseta kugqityiwe. Ukuba wenze yonke into ngokuchanekileyo, ungaqhagamshela kwiswitshi usebenzisa inethiwekhi yendawo kwaye uqhubeke nokusebenza.
Iinkcukacha ezingakumbi malunga nokuseta i-SSH zinokufumaneka kumaxwebhu eHuawei - и .
Ukuqwalasela izicwangciso zenkqubo esisiseko
Kule block siza kujonga inani elincinci leebhloko zomyalelo ezahlukeneyo zokuseta ezona mpawu zidumileyo.
1. Ukumisela ixesha lenkqubo kunye nokulungelelanisa nge-NTP.
Ukuqwalasela ixesha ekuhlaleni kwiswitshi, ungasebenzisa le miyalelo ilandelayo:
ixesha lexesha {Yongeza | thabatha}
ixesha lexesha [ i-UTC ] HH:MM:SS YYYY-MM-DD
Umzekelo wokumisela ixesha ekuhlaleni
ixesha lexesha MSK ukongeza 03:00:00
ixesha lexesha 10:10:00 2020-10-08
Ukulungelelanisa ixesha nge-NTP neseva, ngenisa lo myalelo ulandelayo:
ntp unicast-server [ Inguqulelo inombolo | uqinisekiso-keyid isitshixo-id | umthombo-ujongano ujongano-uhlobo
Umzekelo womyalelo wongqamaniso lwexesha nge-NTP
ntp unicast-server 88.212.196.95
zibophe
2. Ukusebenza kunye nokutshintsha, ngamanye amaxesha kufuneka uqwalasele ubuncinane indlela enye - indlela engagqibekanga okanye indlela engagqibekanga. Ukwenza iindlela, sebenzisa lo myalelo ulandelayo:
ip umzila-static idilesi ye-ip {maski | Ubude bemaski } {idilesi ye-nexhop | ujongano lojongano-inombolo [ nexthop-address ] }
Umzekelo womyalelo wokwenza iindlela:
Indlela yokujonga
ip umzila-static 0.0.0.0 0.0.0.0 192.168.0.1
zibophe
3. Ukuqwalasela indlela yokusebenza yeSpanning-Tree protocol.
Ukusebenzisa ngokuchanekileyo utshintsho olutsha kwinethiwekhi ekhoyo, kubalulekile ukunyamekela ukukhethwa kwendlela yokusebenza ye-STP. Kwakhona, kuya kuba kuhle ukuseta kwangoko. Asizukuhlala ixesha elide apha, kuba... Umxholo ubanzi kakhulu. Siza kuchaza kuphela iindlela zokusebenza zeprotocol:
imowudi ye-stp { stp | kuqala | mstp | vbst } — kulo myalelo sikhetha indlela esiyifunayo. Imowudi ehlala ikho: MSTP. Ikwayindlela ecetyiswayo yokusebenza kwiiswitshi zeHuawei. Kukho ukuhambelana ngasemva kunye ne-RSTP.
Umzekelo:
Indlela yokujonga
imowudi ye-stp mstp
zibophe
4. Umzekelo wokuseta i-switch port ukudibanisa isixhobo sokuphela.
Makhe sijonge kumzekelo wokuqwalasela izibuko lofikelelo ukuqhubekekisa izithuthi kwiVLAN10
[SW] ujongano 10ge 1/0/3
[SW-10GE1/0/3] port link-type ufikelelo
[SW-10GE1/0/3] izibuko olungagqibekanga vlan 10
[SW-10GE1/0/3] stp edged-port vula
[*SW-10GE1/0/3] yeka
Nika ingqalelo kumyalelo “stp edged-port vula” — ikuvumela ukuba ukhawulezise inkqubo yokutshintshwa kwezibuko ukuya kwimeko yokudlulisela. Nangona kunjalo, akufanele usebenzise lo myalelo kumazibuko adityaniswe kwezinye iiswitshi.
Kwakhona, umyalelo "stp bpdu-icebo lokucoca ulwelo".
5. Umzekelo wokumisela i-Port-Channel kwimodi ye-LACP yokuxhuma kwezinye iiswitshi okanye iiseva.
Umzekelo:
[SW] ujongano eth-trunk 1[SW-Eth-Trunk1] i-port link-type-trunk
[SW-Eth-Trunk1] umboko wezibuko vumela-ukudlula vlan 10
[SW-Eth-Trunk1] indlela lacp-static (okanye ungasebenzisa lacp-dynamic)
[SW-Eth-Trunk1] yeka
[SW] ujongano 10ge 1/0/1
[SW-10GE1/0/1] eth-Trunk 1
[SW-10GE1/0/1] yeka
[SW] ujongano 10ge 1/0/2
[SW-10GE1/0/2] eth-Trunk 1
[*SW-10GE1/0/2] yeka
Masingalibali malunga “zibophe” kwaye emva koko sisebenza kunye nojongano eth-trunk 1.
Ungajonga ubume bekhonkco elidityanisiweyo ngomyalelo "bonisa i-eth-trunk".
Sichaze iingongoma eziphambili zokuseta iiswitshi zeHuawei. Ewe, ungangena nzulu ngakumbi kwisihloko kwaye inani lamanqaku alichazwanga, kodwa sizame ukubonisa eyona miyalelo iphambili, eyona idumileyo yokuseta okokuqala.
Siyathemba ukuba le "manual" iya kukunceda ukuseta iiswitshi zakho ngokukhawuleza.
Kuya kuba kuhle ukuba ubhala kwizimvo imiyalelo ocinga ukuba ayikho kwinqaku, kodwa banokwenza lula uqwalaselo lokutshintsha. Ewe, njengesiqhelo, siya kukuvuyela ukuphendula imibuzo yakho.
umthombo: www.habr.com