h3c和思科融合Vxlan

cisco N9k配置

N9k-1

vlan 11
  vn-segment 10011

interface Vlan11
  no shutdown
  ip address 11.1.1.254/24
  ip router ospf 1 area 0.0.0.0
  hsrp version 2
  hsrp 11 
    preempt 
    ip 11.1.1.252

interface nve1
  no shutdown
  source-interface loopback0
  member vni 10011
    ingress-replication protocol static
      peer-ip 2.2.2.7

interface Ethernet1/2
  no switchport
  ip address 1.1.1.1/24
  ip router ospf 1 area 0.0.0.0
  no shutdown

interface Ethernet1/1
  switchport mode access
    switch acc vlan 11

interface loopback0
  ip address 2.2.2.1/32
  ip router ospf 1 area 0.0.0.0
line console
line vty
router ospf 1
  router-id 2.2.2.1

H3C VSR2000 或者msr36-20配置Vxlan

开启L2×××能力

[SH6800]l2*** enable 

创建VSI实例***a和Vxlan10011

[SH6800]vsi ***a 
[SH6800-vsi-***a]vxlan 10011 
[SH6800-vsi-***a-vxlan-10011]qui
[SH6800-vsi-***a]quit

配置接口loopback0 地址，作为隧道的源端地址

[SH6800]interface LoopBack 0 
[SH6800-LoopBack0]ip add 2.2.2.7 255.255.255.255
[SH6800-LoopBack0]quit

在SH6800和N9K-1之间建立Vxlan隧道

• 创建模式为Vxlan的隧道接口Tunnel1
• 指定隧道的源端地址为本地接口loopback0的地址
• 指定隧道目的端地址N9K-1的loopback0地址

[SH6800]interface Tunnel 1 mode vxlan 
[SH6800-Tunnel1]source 2.2.2.7 
[SH6800-Tunnel1]destination 2.2.2.1 
[SH6800-Tunnel1]quit

配置Tunnel1与Vxlan10011关联

[SH6800]vsi ***a
[SH6800-vsi-***a]vxlan 10011
[SH6800-vsi-***a-vxlan-10011]tunnel 1
[SH6800-vsi-***a-vxlan-10011]quit
[SH6800-vsi-***a]quit

在接入服务器接口上与VSI实例***a关联。

#当只有一个vlan通过的时候可以用这个方法。这里只有vlan11。
[SH6800]interface GigabitEthernet 1/0
[SH6800-GigabitEthernet1/0]port link-mode route 
[SH6800-GigabitEthernet1/0]xconnect vsi ***a 
[SH6800-GigabitEthernet1/0]quit

#当有多个vlan通过Vxlan通信，就需要匹配vlan
[SH6800]interface GigabitEthernet 1/0
[SH6800-GigabitEthernet1/0]port link-mode route 
[SH6800-GigabitEthernet1/0]quit

[SH6800]interface GigabitEthernet 1/0.1 
#vid之后跟的是匹配的vlan
[SH6800-GigabitEthernet1/0.1]vlan-type dot1q vid 11 
#vsi之后跟的是相应的vsi实例
[SH6800-GigabitEthernet1/0.1]xconnect vsi ***a
[SH6800-GigabitEthernet1/0.1]quit

#例如还有一个vlan12 
[SH6800]interface GigabitEthernet 1/0.2
[SH6800-GigabitEthernet1/0.2]vlan-type dot1q vid 12
[SH6800-GigabitEthernet1/0.2]xconnect vsi ***a12
[SH6800-GigabitEthernet1/0.2]quit

#以下是6800的接口与VSI实例关联方法
# 在接入服务器的接口HundredGigE1/0/1上创建以太网服务实例1000，该实例用来匹配VLAN 2的数据帧。
[SwitchC] interface hundredgige 1/0/1
[SwitchC-HundredGigE1/0/1] service-instance 1000
[SwitchC-HundredGigE1/0/1-srv1000] encapsulation s-vid 2
# 配置以太网服务实例1000与VSI实例***a关联。
[SwitchC-HundredGigE1/0/1-srv1000] xconnect vsi ***a
[SwitchC-HundredGigE1/0/1-srv1000] quit
[SwitchC-HundredGigE1/0/1] quit 

H3C设备验证VTEP设备

查看tunnel 1 接口信息

[SH6800]display interface Tunnel 1 
Tunnel1
Current state: UP
Line protocol state: UP
Description: Tunnel1 Interface
Bandwidth: 64kbps
Maximum Transmit Unit: 64000
Internet protocol processing: disabled
Output queue - Urgent queuing: Size/Length/Discards 0/100/0
Output queue - Protocol queuing: Size/Length/Discards 0/500/0
Output queue - FIFO queuing: Size/Length/Discards 0/75/0
Last clearing of counters: Never
Tunnel source 2.2.2.7, destination 2.2.2.1
Tunnel protocol/transport UDP_VXLAN/IP
Last 300 seconds input rate: 78 bytes/sec, 624 bits/sec, 0 packets/sec
Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec
Input: 1735 packets, 162159 bytes, 0 drops
Output: 440 packets, 43082 bytes, 0 drops

查看VSI信息，可以看到VSI内创建的VXLAN、与VXLAN关联的VXLAN隧道、与VSI关联的以太网服务实例等信息。

[SH6800]display l2*** vsi verbose 
VSI Name: ***a
  VSI Index               : 0
  VSI State               : Up
  MTU                     : 1500
  Bandwidth               : -
  Broadcast Restrain      : -
  Multicast Restrain      : -
  Unknown Unicast Restrain: -
  Mac Learning            : Enabled
  MAC Table Limit         : -
  MAC Learning rate       : -
  Drop Unknown            : -
  Flooding                : Enabled
  Statistics              : Disabled
  VXLAN ID                : 10011
  Tunnels:
    Tunnel Name          Link ID    State  Type
    Tunnel1              0x5000001  Up     Manual
  ACs:
    AC                               Link ID    State   
    GE1/0                            0          Up    

验证主机ping

VPCS> sh ip 

NAME        : VPCS[1]
IP/MASK     : 11.1.1.3/24
GATEWAY     : 11.1.1.252
DNS         : 
MAC         : 00:50:79:66:68:0b
LPORT       : 20000
RHOST:PORT  : 127.0.0.1:30000
MTU         : 1500

VPCS> ping 11.1.1.1

84 bytes from 11.1.1.1 icmp_seq=1 ttl=64 time=52.298 ms
84 bytes from 11.1.1.1 icmp_seq=2 ttl=64 time=43.287 ms
84 bytes from 11.1.1.1 icmp_seq=3 ttl=64 time=56.294 ms
84 bytes from 11.1.1.1 icmp_seq=4 ttl=64 time=54.209 ms
84 bytes from 11.1.1.1 icmp_seq=5 ttl=64 time=44.216 ms

VPCS> ping 11.1.1.252

84 bytes from 11.1.1.252 icmp_seq=1 ttl=255 time=42.977 ms
84 bytes from 11.1.1.252 icmp_seq=2 ttl=255 time=128.824 ms
84 bytes from 11.1.1.252 icmp_seq=3 ttl=255 time=29.194 ms
84 bytes from 11.1.1.252 icmp_seq=4 ttl=255 time=39.773 ms
84 bytes from 11.1.1.252 icmp_seq=5 ttl=255 time=67.956 ms