Example for Configuring the Access Layer for a Wired Campus Network Using eSight (eSight V300R006C00 and Later Versions)

Created: Feb 28, 2019 16:08:38 14 0 0 0

Prerequisites

  • SNMP read and write communities have been configured for devices. In addition, the devices have been added to eSight, and can successfully communicate with eSight.
  • SNMP and Telnet parameters have been configured on eSight.
  • The LLDP protocol has been enabled on SVF-capable devices.

Networking Requirements

Company M has constructed a wired campus network on which many access devices are deployed sparsely. It is difficult to manage and configure these access devices. The network administrator Jack requires that he can uniformly manage and configure the access devices to reduce management costs.

As shown in Figure 4-44, two switches at the aggregation layer form a cluster and function as the parent devices to connect to multiple access switches (ASs).

In this example, the S12708, S5700-28P-LI, and S2750-28TP-EI are used as the parent, level-1 AS, and level-2 AS, respectively. The eSight software version is V300R009C00.

Figure 4-44  Configuring the access layer for a wired campus network 
imgDownload?uuid=1bd3251017f047e799f790a

Configuration Roadmap

The configuration roadmap is as follows:

  1. Configure CSS on the parent devices to ensure high reliability of the super virtual fabric (SVF) system.
  2. Configure SVF system capabilities.
    1. Create an SVF enabling template to enable SVF on the parent and configure the SVF client management IP address pool, file server, and forwarding mode.
    2. Create an AS predeployment template to predeploy ASs on the SVF parent before powering on them and add the ASs to a whitelist. After the ASs are powered on, the SVF parent permits the ASs to access the SVF network.
    3. Create a level-1 AS fabric port template to set parameters for the fabric ports that connect the SVF parent to level-1 ASs.
    4. Create a level-2 AS fabric port template to set parameters for the fabric ports that connect level-1 ASs to level-2 ASs.
    5. Create a system configuration matrix to deploy the template instances to the SVF parent.
  3. Clear the configurations of ASs, restart the ASs, and then connect the parent to level-1 ASs and level-1 ASs to level-2 ASs using cables.
  4. Configure SVF service capabilities.
    1. Create port groups.
    2. Create user interface VLAN templates to set pass VLANs for user-side ports.
    3. Create a user interface service template to set network security parameters for user-side ports.
    4. Create a service configuration matrix to deploy the template instances to the port groups.

Data Plan

Table 4-49  Device group

Group Name

Device Name

Device IP

SVF Parent

SVF-S12708

10.137.240.114

Table 4-50  Port group

Group Name

Device

Port

PortGroup1

as1

ALL

PortGroup1

as2

ALL

PortGroup1

as4

ALL

PortGroup2

as3

ALL

PortGroup2

as5

ALL

Table 4-51  SVF enabling template

Instance Name

VLAN ID

IP Address

Mask

Temp1

11

192.168.11.1

24

Table 4-52  AS predeployement template

Instance Name

AS Name

AS Type

MAC Address

Whether the AS Is Added to Whitelist

ASTemp

as1

S5700-28P-LI-AC

0200-0000-0011

Yes

as2

S5700-28P-LI-AC

0200-0000-0022

Yes

as3

S5700-28P-LI-AC

0200-0000-0033

Yes

as4

S2750-28TP-EI-AC

0200-0000-0044

Yes

as5

S2750-28TP-EI-AC

0200-0000-0055

Yes

Table 4-53  Level-1 AS fabric port template

Instance Name

Fabric Port ID

Eth-Trunk ID

GE Interface Number

ParentToL1as

1

1

1/1/0/1

1

1

2/1/0/1

2

2

1/1/0/2

2

2

2/1/0/2

3

3

1/1/0/3

3

3

2/1/0/3

Table 4-54  Level-2 AS fabric port template

Instance Name

AS Name

Fabric Port ID

Eth-Trunk ID

GE Interface Number

L2AS

1

4

4

0/0/23

1

4

4

0/0/24

3

5

5

0/0/23

3

5

5

0/0/24

Table 4-55  User interface VLAN template

Instance Name

Default VLAN

VLAN10

10

VLAN20

20

Table 4-56  User interface service template

Instance Name

User Access Port

AccessTemp

ON

Procedure

  1. Set up a cluster between the two switches that function as the parents. For details, see "CSS Configuration" in the S12700 Configuration Guide - Device Management of the specific product version.

    S5720HI, S5730HI, S6720HI, S6720EI, or S6720S-EI switches can also set up a stack and act as the parent. If you use a stack of S6720EI or S6720S-EI switches as the parent, run the as-mode disable command to configure the stack to work in parent mode. For other stack configuration instructions and precautions, see "Stack Configuration" in the S2700, S5700, and S6720 Configuration Guide - Device Management.

  2. Create a template instance and enable SVF on the parent device.
    1. Choose Resource Network Configuration SVF Configuration Management from the main menu.


      imgDownload?uuid=7d8970606ad74dfbba03db6

    2. In the navigation tree, choose Template Management, choose SVF Device Templates > SVF System Config > Enable SVF in Template, and click Create.


      imgDownload?uuid=c4cab17d767c45438136307

    3. Set Instance Name to Temp1, set VLAN IDIP Address, and Mask in the Configure SVF Client Management Address Pool area to 11192.168.11.1, and 24 respectively, and click Confirm. The Enable SVF template is displayed on the page.


      imgDownload?uuid=dd8f95e4950640e7afe49e2

  3. Create a template instance and set AS access parameters.
    1. Choose Template Management from the navigation tree, choose SVF Device Templates > SVF System Config > AS PreDeploy in Template, and click Create.


      imgDownload?uuid=814fd14e1f144c00b110976

    2. Set Instance Name to ASTemp and set other parameters as shown in the following figure. 
      imgDownload?uuid=b3dc8e0ca33847989257883


      imgDownload?uuid=b3dc8e0ca33847989257883

  4. Create a template instance Level-1 AS Fabric Port.
    1. Choose Template Management from the navigation tree, choose SVF Device Templates > SVF System Config > Level-1 AS Fabric Port in Template, and click Create.


      imgDownload?uuid=dc89b1001bfa4d3a90aca8c

    2. Set Instance Name to ParentToL1as, set other parameters as shown in the following figure, and click Confirm. The Level-1 AS Fabric Porttemplate is displayed on the page.


      imgDownload?uuid=a943283cbe3643a5ab39987

  5. Create a template instance Level-2 AS Fabric Port.
    1. Choose Template Management from the navigation tree, choose SVF Device Templates > SVF System Config > Level-2 AS Fabric Port in Template, and click Create.


      imgDownload?uuid=41cf8762d59940468c08578

    2. Set Instance Name to L2AS, set other parameters as shown in the following figure, and click Confirm. The Level-2 AS Fabric Port template is displayed on the page.


      imgDownload?uuid=f9819a525b344accaa04ea3

  6. Deploy the template instances to the parent device.
    1. In the navigation tree, choose Service Config > SVF System Config. The default service configuration matrix is displayed. 
      imgDownload?uuid=41adc0642b3f4d258470690


      imgDownload?uuid=41adc0642b3f4d258470690

    2. Click 
      imgDownload?uuid=0d7d205984644ae3b35ec7a
      next to Resources and select SVF-S12708 as the default SVF Parent.
    3. In the service configuration matrix, place the mouse in each blank cell, click 
      imgDownload?uuid=0d7d205984644ae3b35ec7a
      to select the created template instances one by one, and click Confirm.


      imgDownload?uuid=59b73c1f183641cdb4ed598

    4. In the system configuration matrix, place the mouse in the lower right corner of each cell with a template instance, and click 
      imgDownload?uuid=565c17ad38e54d199e43912
      to deploy the template instance to the parent device.
  7. After logging in to each AS through the CLI, you can run the reset saved-configuration command to delete the AS configuration and then run the reboot command to restart the AS. If a message is displayed asking whether you want to save the configuration, select N. And then connect the parent to level-1 ASs and level-1 ASs to level-2 ASs using cables.
  8. Create port groups.
    1. Choose Resource > Network > Equipment > Network Device from the main menu. Device resources on the entire network are displayed on the page.
    2. Click 
      imgDownload?uuid=6948928d6a0246628726a2f
      in the upper right corner of the page and set IP Address to 10.137.240.114. The SVF device with the specified IP address is displayed on the page.


      imgDownload?uuid=eed08aad445348419dc7d0d

    3. Click the device name link in Name to access the NE Manager of the device.
    4. Choose SVF Feature > AS Port from the navigation tree, and click Create Group.
    5. Set Group Name to PortGroup1, and click Confirm.
    6. Set Group Name to PortGroup2, and click Confirm.
    7. Enter as1 in the AS Name search box and click Search. Select all the ports of as1, click Add to Group, and select PortGroup1
      imgDownload?uuid=ce6e25f8722c423fa7cef78


      imgDownload?uuid=ce6e25f8722c423fa7cef78

    8. Repeat the preceding step to add ports of as2 and as4 to PortGroup1, and ports of as3 and as5 to PortGroup2.
  9. Create user interface VLAN templates.
    1. Choose Resource Network Configuration SVF Configuration Management from the main menu.
    2. In the navigation tree, choose Template Management, choose SVF Device Templates > SVF Service Config > User Interface VLAN in Template, and click Create.


      imgDownload?uuid=7f7f72618c1a4489a31a75e

    3. Set Instance Name to VLAN10, set other parameters as shown in the following figure, and click Confirm. The user interface VLAN template VLAN10 is displayed on the page.


      imgDownload?uuid=e22605046de84bc19bd5de2

    4. Click Create, set Instance Name to VLAN20, set other parameters as shown in the following figure, and click Confirm. The user interface VLAN template VLAN20 is displayed on the page.


      imgDownload?uuid=120f235ff77345329ac3c6a

  10. Create a user interface service template.
    1. In the navigation tree, choose Template Management, choose SVF Device Templates > SVF Service Config > User Interface Service in Template, and click Create.


      imgDownload?uuid=ac429d4bb43841a2a73314a

    2. Set Instance Name to AccessTemp, set other parameters as shown in the following figure, and click Confirm. The user interface service template AccessTemp is displayed on the page.


      imgDownload?uuid=aeddafda890241d5801176f

  11. Deploy the SVF user interface VLAN and service templates to port groups.
    1. In the navigation tree, choose Service Config > SVF Port Config. The default service configuration matrix is displayed. 
      imgDownload?uuid=8d773d17eaa84ff2b6d05fa


      imgDownload?uuid=8d773d17eaa84ff2b6d05fa

    2. Click
      imgDownload?uuid=0d7d205984644ae3b35ec7a
      next to Resources, select PortGroup1 and PortGroup2, and click Confirm.
    3. In the service configuration matrix, place the mouse in each blank cell, click 
      imgDownload?uuid=0d7d205984644ae3b35ec7a
      to select the created template instances one by one, and click Confirm.


      imgDownload?uuid=df872f401b4f43729d1ff7d

    4. In the system configuration matrix, place the mouse in the lower right corner of each cell with a template instance, and click 
      imgDownload?uuid=565c17ad38e54d199e43912
      to deploy the template instance to the parent device.

Result

After the SVF access layer configuration is complete, verify the configuration as follows:

  • Choose Topology Topology Management from the main menu. The SVF topology 
    imgDownload?uuid=5136096757ed4632a9c56c8
    is displayed. Double-click the icon to view the layout in the SVF system.


    imgDownload?uuid=b787c49256394d2cac1f0a4

  • Choose Topology Topology Management from the main menu. You can view the list of online users on the page that is displayed.


    imgDownload?uuid=5984a2c367a645848ad23ba

See more please click 

https://support.huawei.com/enterprise/en/doc/EDOC1000069520/9aadccc0/comprehensive-configuration-examples


  • x
  • convention:

Reply

Reply
You need to log in to reply to the post Login | Register

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " Privacy."
If the attachment button is not available, update the Adobe Flash Player to the latest version!
Fast reply Scroll to top