Basic Configuring SVF to Deploy a Wired Campus Network Access Layer

Figure 1Configuring a wired campus network access layer

A new wired campus network has many access devices. The widely distributed access devices complicate management and configuration of the access layer. Unified management and configuration of access devices are required to reduce the management cost.

As shown inFigure 1, two aggregation switches set up a CSS and function as the parent to connect to multiple ASs.

In this example, theS12700functions as the parent, theS5700-28P-LIfunctions as a level-1 AS, and theS2750-28TP-EIfunctions as a level-2 AS.

# Configure the management VLAN in the SVF system and enable the SVF function on the parent.
system-view
vlan batch 11
dhcp enable
interface vlanif 11
ip address 192.168.11.1 24
dhcp select interface
dhcp server option 43 ip-address 192.168.11.1
quit
capwap source interface vlanif 11
stp mode rstp
uni-mng

#

# Configure a name for each AS.
 as name as1 model S5700-28P-LI-AC mac-address 0200-0000-0011
 quit
 as name as2 model S5700-28P-LI-AC mac-address 0200-0000-0022
 quit
 as name as3 model S5700-28P-LI-AC mac-address 0200-0000-0033
 quit
 as name as4 model S2750-28TP-EI-AC mac-address 0200-0000-0044
 quit
 as name as5 model S2750-28TP-EI-AC mac-address 0200-0000-0055
 quit

# Configure fabric ports that connect the parent to level-1 ASs. The following uses fabric port 1 that connects the parent to AS 1 as an example.
 interface fabric-port 1
 port member-group interface eth-trunk 1
 quit
 quit
 interface gigabitethernet 1/1/0/1
 eth-trunk 1
 quit
 interface gigabitethernet 2/1/0/1
 eth-trunk 1
 quit

# Configure the fabric ports that connect level-1 ASs to level-2 ASs.
 uni-mng
 as name as1
 down-direction fabric-port 4 member-group interface eth-trunk 4
 port eth-trunk 4 trunkmember interface gigabitethernet 0/0/23 to 0/0/24
 quit
 as name as3
 down-direction fabric-port 5 member-group interface eth-trunk 5
 port eth-trunk 5 trunkmember interface gigabitethernet 0/0/23 to 0/0/24
 quit
 quit

 # Configure ASs to be authenticated using a whitelist when they connect to the SVF system.
 as-auth
 undo auth-mode
 whitelist mac-address 0200-0000-0011
 whitelist mac-address 0200-0000-0022
 whitelist mac-address 0200-0000-0033
 whitelist mac-address 0200-0000-0044
 whitelist mac-address 0200-0000-0055
 quit

# Clear the configurations of ASs, restart the ASs, and then connect the parent to level-1 ASs and level-1 ASs to level-2 ASs using cables. Subsequently, an SVF system is set up.