Example for Configuring the Access Layer for a Wired Campus Network Using eSight (eSight V300R006C00 and Later Versions)

• SNMP read and write communities have been configured for devices. In addition, the devices have been added to eSight, and can successfully communicate with eSight.
• SNMP and Telnet parameters have been configured on eSight.
• The LLDP protocol has been enabled on SVF-capable devices.

Networking Requirements

Company M has constructed a wired campus network on which many access devices are deployed sparsely. It is difficult to manage and configure these access devices. The network administrator Jack requires that he can uniformly manage and configure the access devices to reduce management costs.

As shown in Figure 4-44, two switches at the aggregation layer form a cluster and function as the parent devices to connect to multiple access switches (ASs).

In this example, the S12708, S5700-28P-LI, and S2750-28TP-EI are used as the parent, level-1 AS, and level-2 AS, respectively. The eSight software version is V300R009C00.

Figure 4-44  Configuring the access layer for a wired campus network 

Configuration Roadmap

The configuration roadmap is as follows:

1. Configure CSS on the parent devices to ensure high reliability of the super virtual fabric (SVF) system.
2. Configure SVF system capabilities.
   1. Create an SVF enabling template to enable SVF on the parent and configure the SVF client management IP address pool, file server, and forwarding mode.
   2. Create an AS predeployment template to predeploy ASs on the SVF parent before powering on them and add the ASs to a whitelist. After the ASs are powered on, the SVF parent permits the ASs to access the SVF network.
   3. Create a level-1 AS fabric port template to set parameters for the fabric ports that connect the SVF parent to level-1 ASs.
   4. Create a level-2 AS fabric port template to set parameters for the fabric ports that connect level-1 ASs to level-2 ASs.
   5. Create a system configuration matrix to deploy the template instances to the SVF parent.
3. Clear the configurations of ASs, restart the ASs, and then connect the parent to level-1 ASs and level-1 ASs to level-2 ASs using cables.
4. Configure SVF service capabilities.
   1. Create port groups.
   2. Create user interface VLAN templates to set pass VLANs for user-side ports.
   3. Create a user interface service template to set network security parameters for user-side ports.
   4. Create a service configuration matrix to deploy the template instances to the port groups.

Data Plan

Procedure

1. Set up a cluster between the two switches that function as the parents. For details, see "CSS Configuration" in the S12700 Configuration Guide - Device Management of the specific product version.

   S5720HI, S5730HI, S6720HI, S6720EI, or S6720S-EI switches can also set up a stack and act as the parent. If you use a stack of S6720EI or S6720S-EI switches as the parent, run the as-mode disable command to configure the stack to work in parent mode. For other stack configuration instructions and precautions, see "Stack Configuration" in the S2700, S5700, and S6720 Configuration Guide - Device Management.

2. Create a template instance and enable SVF on the parent device.
   1. Choose Resource > Network > Configuration > SVF Configuration Management from the main menu.

      
      
      

   2. In the navigation tree, choose Template Management, choose SVF Device Templates > SVF System Config > Enable SVF in Template, and click Create.

      
      
      

   3. Set Instance Name to Temp1, set VLAN ID, IP Address, and Mask in the Configure SVF Client Management Address Pool area to 11, 192.168.11.1, and 24 respectively, and click Confirm. The Enable SVF template is displayed on the page.

      
      
      

3. Create a template instance and set AS access parameters.
   1. Choose Template Management from the navigation tree, choose SVF Device Templates > SVF System Config > AS PreDeploy in Template, and click Create.

      
      
      

   2. Set Instance Name to ASTemp and set other parameters as shown in the following figure. 
      
      

      
      
      

4. Create a template instance Level-1 AS Fabric Port.
   1. Choose Template Management from the navigation tree, choose SVF Device Templates > SVF System Config > Level-1 AS Fabric Port in Template, and click Create.

      
      
      

   2. Set Instance Name to ParentToL1as, set other parameters as shown in the following figure, and click Confirm. The Level-1 AS Fabric Porttemplate is displayed on the page.

      
      
      

5. Create a template instance Level-2 AS Fabric Port.
   1. Choose Template Management from the navigation tree, choose SVF Device Templates > SVF System Config > Level-2 AS Fabric Port in Template, and click Create.

      
      
      

   2. Set Instance Name to L2AS, set other parameters as shown in the following figure, and click Confirm. The Level-2 AS Fabric Port template is displayed on the page.

      
      
      

6. Deploy the template instances to the parent device.
   1. In the navigation tree, choose Service Config > SVF System Config. The default service configuration matrix is displayed. 
      
      

      
      
      

   2. Click 
      
      next to Resources and select SVF-S12708 as the default SVF Parent.
   3. In the service configuration matrix, place the mouse in each blank cell, click 
      
      to select the created template instances one by one, and click Confirm.

      
      
      

   4. In the system configuration matrix, place the mouse in the lower right corner of each cell with a template instance, and click 
      
      to deploy the template instance to the parent device.
7. After logging in to each AS through the CLI, you can run the reset saved-configuration command to delete the AS configuration and then run the reboot command to restart the AS. If a message is displayed asking whether you want to save the configuration, select N. And then connect the parent to level-1 ASs and level-1 ASs to level-2 ASs using cables.
8. Create port groups.
   1. Choose Resource > Network > Equipment > Network Device from the main menu. Device resources on the entire network are displayed on the page.
   2. Click 
      
      in the upper right corner of the page and set IP Address to 10.137.240.114. The SVF device with the specified IP address is displayed on the page.

      
      
      

   3. Click the device name link in Name to access the NE Manager of the device.
   4. Choose SVF Feature > AS Port from the navigation tree, and click Create Group.
   5. Set Group Name to PortGroup1, and click Confirm.
   6. Set Group Name to PortGroup2, and click Confirm.
   7. Enter as1 in the AS Name search box and click Search. Select all the ports of as1, click Add to Group, and select PortGroup1. 
      
      

      
      
      

   8. Repeat the preceding step to add ports of as2 and as4 to PortGroup1, and ports of as3 and as5 to PortGroup2.
9. Create user interface VLAN templates.
   1. Choose Resource > Network > Configuration > SVF Configuration Management from the main menu.
   2. In the navigation tree, choose Template Management, choose SVF Device Templates > SVF Service Config > User Interface VLAN in Template, and click Create.

      
      
      

   3. Set Instance Name to VLAN10, set other parameters as shown in the following figure, and click Confirm. The user interface VLAN template VLAN10 is displayed on the page.

      
      
      

   4. Click Create, set Instance Name to VLAN20, set other parameters as shown in the following figure, and click Confirm. The user interface VLAN template VLAN20 is displayed on the page.

      
      
      

10. Create a user interface service template.
    1. In the navigation tree, choose Template Management, choose SVF Device Templates > SVF Service Config > User Interface Service in Template, and click Create.

       
       
       

    2. Set Instance Name to AccessTemp, set other parameters as shown in the following figure, and click Confirm. The user interface service template AccessTemp is displayed on the page.

       
       
       

11. Deploy the SVF user interface VLAN and service templates to port groups.
    1. In the navigation tree, choose Service Config > SVF Port Config. The default service configuration matrix is displayed. 
       
       

       
       
       

    2. Click
       
       next to Resources, select PortGroup1 and PortGroup2, and click Confirm.
    3. In the service configuration matrix, place the mouse in each blank cell, click 
       
       to select the created template instances one by one, and click Confirm.

       
       
       

    4. In the system configuration matrix, place the mouse in the lower right corner of each cell with a template instance, and click 
       
       to deploy the template instance to the parent device.

Result

After the SVF access layer configuration is complete, verify the configuration as follows:

• Choose Topology > Topology Management from the main menu. The SVF topology 
  
  is displayed. Double-click the icon to view the layout in the SVF system.

  
  
  

• Choose Topology > Topology Management from the main menu. You can view the list of online users on the page that is displayed.