Figure 1Configuring a wired campus network access layer
A new wired campus network has many access devices. The widely distributed access devices complicate management and configuration of the access layer. Unified management and configuration of access devices are required to reduce the management cost.
As shown inFigure 1, two aggregation switches set up a CSS and function as the parent to connect to multiple ASs.
In this example, theS12700functions as the parent, theS5700-28P-LIfunctions as a level-1 AS, and theS2750-28TP-EIfunctions as a level-2 AS.
# Configure the management VLAN in the SVF system and enable the SVF function on the parent.
system-view
vlan batch 11
dhcp enable
interface vlanif 11
ip address 192.168.11.1 24
dhcp select interface
dhcp server option 43 ip-address 192.168.11.1
quit
capwap source interface vlanif 11
stp mode rstp
uni-mng
#
# Configure a name for each AS.
as name as1 model S5700-28P-LI-AC mac-address 0200-0000-0011
quit
as name as2 model S5700-28P-LI-AC mac-address 0200-0000-0022
quit
as name as3 model S5700-28P-LI-AC mac-address 0200-0000-0033
quit
as name as4 model S2750-28TP-EI-AC mac-address 0200-0000-0044
quit
as name as5 model S2750-28TP-EI-AC mac-address 0200-0000-0055
quit
# Configure fabric ports that connect the parent to level-1 ASs. The following uses fabric port 1 that connects the parent to AS 1 as an example.
interface fabric-port 1
port member-group interface eth-trunk 1
quit
quit
interface gigabitethernet 1/1/0/1
eth-trunk 1
quit
interface gigabitethernet 2/1/0/1
eth-trunk 1
quit
# Configure the fabric ports that connect level-1 ASs to level-2 ASs.
uni-mng
as name as1
down-direction fabric-port 4 member-group interface eth-trunk 4
port eth-trunk 4 trunkmember interface gigabitethernet 0/0/23 to 0/0/24
quit
as name as3
down-direction fabric-port 5 member-group interface eth-trunk 5
port eth-trunk 5 trunkmember interface gigabitethernet 0/0/23 to 0/0/24
quit
quit
# Configure ASs to be authenticated using a whitelist when they connect to the SVF system.
as-auth
undo auth-mode
whitelist mac-address 0200-0000-0011
whitelist mac-address 0200-0000-0022
whitelist mac-address 0200-0000-0033
whitelist mac-address 0200-0000-0044
whitelist mac-address 0200-0000-0055
quit
# Clear the configurations of ASs, restart the ASs, and then connect the parent to level-1 ASs and level-1 ASs to level-2 ASs using cables. Subsequently, an SVF system is set up.
