HP 5500 Ei 5500 Si Switch Series Configuration Guide
Have a look at the manual HP 5500 Ei 5500 Si Switch Series Configuration Guide online for free. It’s possible to download the document as PDF or print. UserManuals.tech offer 1114 HP manuals and user’s guides for free. Share the user manual or guide on Facebook, Twitter or Google+.
172 # Configure Switch C. system-view [SwitchC] isis 1 [SwitchC-isis-1] network-entity 10.0000.0000.0003.00 [SwitchC-isis-1] quit [SwitchC] interface vlan-interface 200 [SwitchC-Vlan-interface200] isis enable 1 [SwitchC-Vlan-interface200] quit [SwitchC] interface vlan-interface 100 [SwitchC-Vlan-interface100] isis enable 1 [SwitchC-Vlan-interface100] quit [SwitchC] interface vlan-interface 300 [SwitchC-Vlan-interface300] isis enable 1 [SwitchC-Vlan-interface300] quit # Configure Switch D. system-view [SwitchD] isis 1 [SwitchD-isis-1] is-level level-2 [SwitchD-isis-1] network-entity 20.0000.0000.0004.00 [SwitchD-isis-1] quit [SwitchD] interface interface vlan-interface 300 [SwitchD-Vlan-interface300] isis enable 1 [SwitchD-Vlan-interface300] quit # Display IS-IS routing information on each switch. [SwitchA] display isis route Route information for ISIS(1) ----------------------------- ISIS(1) IPv4 Level-1 Forwarding Table ------------------------------------- IPV4 Destination IntCost ExtCost ExitInterface NextHop Flag\ s ------------------------------------------------------------------------\ -- 10.1.1.0/24 10 NULL VLAN100 Direct \ D/L/- 10.1.2.0/24 20 NULL VLAN100 10.1.1.1 \ R/-/- 192.168.0.0/24 20 NULL VLAN100 10.1.1.1 \ R/-/- 0.0.0.0/0 10 NULL VLAN100 10.1.1.1 \ R/-/- Flags: D-Direct, R-Added to RM, L-Advertised in LSPs, U-Up/Down Bi\ t Set [SwitchC] display isis route Route information for ISIS(1) ----------------------------- ISIS(1) IPv4 Level-1 Forwarding Table -------------------------------------
173 IPV4 Destination IntCost ExtCost ExitInterface NextHop Flag\ s ------------------------------------------------------------------------\ -- 10.1.1.0/24 10 NULL VLAN100 Direct \ D/L/- 10.1.2.0/24 10 NULL VLAN200 Direct \ D/L/- 192.168.0.0/24 10 NULL VLAN300 Direct \ D/L/- Flags: D-Direct, R-Added to RM, L-Advertised in LSPs, U-Up/Down Bi\ t Set ISIS(1) IPv4 Level-2 Forwarding Table ------------------------------------- IPV4 Destination IntCost ExtCost ExitInterface NextHop Flag\ s ------------------------------------------------------------------------\ -- 10.1.1.0/24 10 NULL VLAN100 Direct \ D/L/- 10.1.2.0/24 10 NULL VLAN200 Direct \ D/L/- 192.168.0.0/24 10 NULL VLAN300 Direct \ D/L/- Flags: D-Direct, R-Added to RM, L-Advertised in LSPs, U-Up/Down Bi\ t Set [SwitchD] display isis route Route information for ISIS(1) ----------------------------- ISIS(1) IPv4 Level-2 Forwarding Table ------------------------------------- IPV4 Destination IntCost ExtCost ExitInterface NextHop Flag\ s ------------------------------------------------------------------------\ -- 192.168.0.0/24 10 NULL VLAN300 Direct \ D/L/- 10.1.1.0/24 20 NULL VLAN300 192.168.0.\ 1 R/-/- 10.1.2.0/24 20 NULL VLAN300 192.168.0.\ 1 R/-/- Flags: D-Direct, R-Added to RM, L-Advertised in LSPs, U-Up/Down Bi\ t Set 3. Configure RIPv2 on Switch D and Switch E, and conf igure route redistribution from RIP to IS-IS on Switch D: # Configure RIPv2 on Switch D. [SwitchD] rip 1 [SwitchD-rip-1] network 10.0.0.0 [SwitchD-rip-1] version 2 [SwitchD-rip-1] undo summary # Configure RIPv2 on Switch E. [SwitchE] rip 1 [SwitchE-rip-1] network 10.0.0.0 [SwitchE-rip-1] version 2 [SwitchE-rip-1] undo summary
174 # Configure route redistribution from RIP to IS-IS on Switch D. [SwitchD-rip-1] quit [SwitchD] isis 1 [SwitchD–isis-1] import-route rip level-2 # Display IS-IS routing information on Switch C. [SwitchC] display isis route Route information for ISIS(1) ----------------------------- ISIS(1) IPv4 Level-1 Forwarding Table ------------------------------------- IPV4 Destination IntCost ExtCost ExitInterface NextHop Flag\ s ------------------------------------------------------------------------\ -- 10.1.1.0/24 10 NULL VLAN100 Direct \ D/L/- 10.1.2.0/24 10 NULL VLAN200 Direct \ D/L/- 192.168.0.0/24 10 NULL VLAN300 Direct \ D/L/- Flags: D-Direct, R-Added to RM, L-Advertised in LSPs, U-Up/Down Bi\ t Set ISIS(1) IPv4 Level-2 Forwarding Table ------------------------------------- IPV4 Destination IntCost ExtCost ExitInterface NextHop Flag\ s ------------------------------------------------------------------------\ -- 10.1.1.0/24 10 NULL VLAN100 Direct \ D/L/- 10.1.2.0/24 10 NULL VLAN200 Direct \ D/L/- 192.168.0.0/24 10 NULL VLAN300 Direct \ D/L/- 10.1.4.0/24 10 NULL VLAN300 192.168.0.2 \ R/L/- 10.1.5.0/24 20 NULL VLAN300 192.168.0.2 \ R/L/- 10.1.6.0/24 20 NULL VLAN300 192.168.0.2 \ R/L/- Flags: D-Direct, R-Added to RM, L-Advertised in LSPs, U-Up/Down Bi\ t Set IS-IS Graceful Restart configuration example Network requirements Switch A, Switch B, and Switch C belong to the same IS-IS routing domain, as illustrated in Figure 66.
175 Figure 66 Network diagram for IS-IS GR configuration Configuration procedure 1. Configure IP addresses of the interfaces on each switch and configure IS-IS: Follow Figure 66 to c onfigure the IP address and subnet mask of each interface. (Details not shown.) Configure IS-IS on the switches, ensuring that Sw itch A, Switch B and Switch C can communicate with each other at layer 3 and dynamic route update can be implemented among them with IS-IS. (Details not shown.) 2. Configure IS-IS Graceful Restart: # Enable IS-IS Graceful Restart on Switch A and configure the Graceful Restart Interval. system-view [SwitchA] isis 1 [SwitchA-isis-1] graceful-restart [SwitchA-isis-1] graceful-restart interval 150 [SwitchA-isis-1] return Configurations for Switch B and Switch C are similar; therefore, details are not shown. 3. Verify the configuration: After Router A establishes adjacenci es with Router B and Router C, they begin to exchange routing information. Restart IS-IS on Router A, which ente rs the restart state and sends connection requests to its neighbors through the Graceful Restart mechanism to synchronize the LSDB. Using the display isis graceful-restart status command can display the IS-IS GR status on Router A. # Restart the IS-IS process on Switch A. reset isis all 1 Warning : Reset ISIS process? [Y/N]:y # Check the Graceful Restart status of IS-IS on Switch A. display isis graceful-restart status Restart information for IS-IS(1) -------------------------------------------------------------------- IS-IS(1) Level-1 Restart Status Restart Interval: 150 SA Bit Supported Total Number of Interfaces = 1 Restart Status: RESTARTING Number of LSPs Awaited: 3 T3 Timer Status: Remaining Time: 140
176 T2 Timer Status: Remaining Time: 59 IS-IS(1) Level-2 Restart Status Restart Interval: 150 SA Bit Supported Total Number of Interfaces = 1 Restart Status: RESTARTING Number of LSPs Awaited: 3 T3 Timer Status: Remaining Time: 140 T2 Timer Status: Remaining Time: 59 IS-IS NSR configuration example Network requirements Switch S, Switch A, and Switch B belong to the same IS-IS routing domain as illustrated in Figure 67. S witch S is an IRF fabric, which is connected to Switch A and Switch B over aggregated links. Enable IS-IS NSR on Switch S to ensure correct routing when a master/slave switchover occurs on Switch S. Figure 67 Network diagram for IS-IS NSR configuration Configuration procedure 1. Configure IP addresses for the interfaces on each switch and configure IS-IS: Follow Figure 67 to c onfigure the IP address and subnet mask of each interface on the switches. (Details not shown.) Configure IS-IS on the switches, ensuring that Sw itch S, Switch A, and Switch B can communicate with each other at Layer 3 and dynamic route update can be implemented among them with IS-IS. (Details not shown.) 2. Configure IS-IS NSR: # Enable IS-IS NSR on Switch S. system-view [SwitchS] isis 1 [SwitchS-isis-1] non-stop-routing [SwitchS-isis-1] non-stop-routing interval 30 [SwitchS-isis-1] return 3. Verify the configuration: After Switch S establishes neighbor relationship s with Switch A and Switch B, they start to exchange routing information. After network convergence, perform a master/slave switchover on Switch S. During the switchover period, use the display isis peer command to check the neighbor relationship between Switch A and Switch S and between Switch B and Switch S; use the display
177 isis route command to check if routes from Switch A to the loopback interface on Switch B and from Switch B to the loopback inte rface on Switch A exist. # When a master/slave switchover occurs on Sw itch S, display IS-IS neighbors and routes on Switch A. display isis peer Peer information for ISIS(1) ---------------------------- System Id: 0000.0000.0001 Interface: vlan100 Circuit Id: 0000.0000.0001.01 State: Up HoldTime: 25s Type: L1(L1L2) PRI: 64 System Id: 0000.0000.0001 Interface: vlan100 Circuit Id: 0000.0000.0001.01 State: Up HoldTime: 27s Type: L2(L1L2) PRI: 64 display isis route Route information for ISIS(1) ----------------------------- ISIS(1) IPv4 Level-1 Forwarding Table ------------------------------------- IPV4 Destination IntCost ExtCost ExitInterface NextHop \ Flags ------------------------------------------------------------------------\ -- 12.12.12.0/24 10 NULL vlan100 Direct \ D/L/- 22.22.22.22/32 10 NULL Loop0 Direct \ D/-/- 14.14.14.0/32 10 NULL vlan100 12.12.12.2 \ R/L/- 44.44.44.44/32 10 NULL vlan100 12.12.12.2 \ R/L/- Flags: D-Direct, R-Added to RM, L-Advertised in LSPs, U-Up/Down Bi\ t Set ISIS(1) IPv4 Level-2 Forwarding Table ------------------------------------- IPV4 Destination IntCost ExtCost ExitInterface NextHop \ Flags ------------------------------------------------------------------------\ -- 12.12.12.0/24 10 NULL vlan100 Direct \ D/L/- 22.22.22.22/32 10 NULL Loop0 Direct \ D/-/- 14.14.14.0/32 10 NULL 44.44.44.44/32 10 NULL Flags: D-Direct, R-Added to RM, L-Advertised in LSPs, U-Up/Down Bi\ t Set # Display IS-IS neighbors and routes on Switch B. display isis peer Peer information for ISIS(1) ----------------------------
178 System Id: 0000.0000.0001 Interface: vlan200 Circuit Id: 0000.0000.0001.01 State: Up HoldTime: 25s Type: L1(L1L2) PRI: 64 System Id: 0000.0000.0001 Interface: vlan200 Circuit Id: 0000.0000.0001.01 State: Up HoldTime: 27s Type: L2(L1L2) PRI: 64 display isis route Route information for ISIS(1) ----------------------------- ISIS(1) IPv4 Level-1 Forwarding Table ------------------------------------- IPV4 Destination IntCost ExtCost ExitInterface NextHop \ Flags ------------------------------------------------------------------------\ -- 14.14.14.0/24 10 NULL vlan200 Direct \ D/L/- 44.44.44.44/32 10 NULL Loop0 Direct \ D/-/- 12.12.12.0/32 10 NULL vlan200 14.14.14.4 \ R/L/- 22.22.22.22/32 10 NULL vlan200 14.14.14.4 \ R/L/- Flags: D-Direct, R-Added to RM, L-Advertised in LSPs, U-Up/Down Bi\ t Set ISIS(1) IPv4 Level-2 Forwarding Table ------------------------------------- IPV4 Destination IntCost ExtCost ExitInterface NextHop \ Flags ------------------------------------------------------------------------\ -- 14.14.14.0/24 10 NULL vlan200 Direct \ D/L/- 44.44.44.44/32 10 NULL Loop0 Direct \ D/-/- 12.12.12.0/32 10 NULL 22.22.22.22/32 10 NULL Flags: D-Direct, R-Added to RM, L-Advertised in LSPs, U-Up/Down Bi\ t Set The output shows that the neighbor relationships and routing information on Switch A and Switch B have not changed. The neighbors cannot sense the switchover on Switch S. IS-IS FRR configuration example Network requirements Switch S, Switch A, and Switch D belong to the same IS-IS routing domain as illustrated in Figure 68. C onfigure IS-IS FRR so that when the link between Swit ch S and Switch D fails, traffic can be switched to Link B immediately.
179 Figure 68 Network diagram for IS-IS FRR configuration Configuration procedure 1. Configure IP addresses for the interfaces on each switch and configure IS-IS: Follow Figure 68 to c onfigure the IP address and subnet mask of each interface on the switches. (Details not shown.) Configure IS-IS on the switches, ensuring that Switch A, Switch D, and Switch S can communicate with each other at Layer 3. (Details not shown.) 2. Configure IS-IS FRR: You can enable IS-IS FRR to either automatically calculate a backup next hop, or to designate a backup next hop by using a re ferenced routing policy. Method I: Enable IS-IS FRR to automatically calculate a backup next hop. # Configure Switch S. system-view [SwitchS] bfd echo-source-ip 1.1.1.1 [SwitchS] isis 1 [SwitchS-isis-1] fast-reroute auto [SwitchS-isis-1] quit # Configure Switch D. system-view [SwitchD] bfd echo-source-ip 4.4.4.4 [SwitchD] isis 1 [SwitchD-isis-1] fast-reroute auto [SwitchD-isis-1] quit Method II: Enable IS-IS FRR to designate a backup next hop by using a referenced routing policy. # Configure Switch S. system-view [SwitchS] bfd echo-source-ip 1.1.1.1 [SwitchS] ip ip-prefix abc index 10 permit 4.4.4.4 32 [SwitchS] route-policy frr permit node 10 [SwitchS-route-policy] if-match ip-prefix abc [SwitchS-route-policy] apply fast-reroute backup-interface vlan-interfac\ e 100 backup-nexthop 12.12.12.2 [SwitchS-route-policy] quit [SwitchS] isis 1 [SwitchS-isis-1] fast-reroute route-policy frr [SwitchS-isis-1] quit # Configure Switch D. Switch S Switch D Switch A Loop 0 1.1.1.1/32 V l a n - i n t 1 0 0 1 2 .1 2 .1 2 .1 / 2 4 Vlan-int200 13.13.13.1/24 Vlan-int200 13.13.13.2/24 V la n-i n t 1 0 0 1 2 . 1 2 . 1 2 . 2 /2 4 V la n-i n t1 0 1 2 4. 2 4 . 2 4 . 2 / 2 4 V la n - in t 1 01 2 4. 2 4 . 2 4. 4 /2 4 Loop 0 4.4.4.4/32 Link A Link B
180 system-view [SwitchD] bfd echo-source-ip 4.4.4.4 [SwitchD] ip ip-prefix abc index 10 permit 1.1.1.1 32 [SwitchD] route-policy frr permit node 10 [SwitchD-route-policy] if-match ip-prefix abc [SwitchD-route-policy] apply fast-reroute backup-interface vlan-interfac\ e 101 backup-nexthop 24.24.24.2 [SwitchD-route-policy] quit [SwitchD] isis 1 [SwitchD-isis-1] fast-reroute route-policy frr [SwitchD-isis-1] quit 3. Verify the configuration: # Display route 4.4.4.4/32 on Switch S and you can view the backup next hop information. [SwitchS] display ip routing-table 4.4.4.4 verbose Routing Table : Public Summary Count : 1 Destination: 4.4.4.4/32 Protocol: ISIS Process ID: 1 Preference: 10 Cost: 10 IpPrecedence: QosLcId: NextHop: 13.13.13.2 Interface: Vlan-interface200 BkNextHop: 12.12.12.2 BkInterface: Vlan-interface100 RelyNextHop: 0.0.0.0 Neighbor : 0.0.0.0 Tunnel ID: 0x0 Label: NULL BKTunnel ID: 0x0 BKLabel: NULL State: Active Adv Age: 00h01m27s Tag: 0 # Display route 1.1.1.1/32 on Switch D. You can find the backup next hop information. [SwitchD] display ip routing-table 1.1.1.1 verbose Routing Table : Public Summary Count : 1 Destination: 1.1.1.1/32 Protocol: ISIS Process ID: 1 Preference: 10 Cost: 10 IpPrecedence: QosLcId: NextHop: 13.13.13.1 Interface: Vlan-interface200 BkNextHop: 24.24.24.2 BkInterface: Vlan-interface101 RelyNextHop: 0.0.0.0 Neighbor : 0.0.0.0 Tunnel ID: 0x0 Label: NULL BKTunnel ID: 0x0 BKLabel: NULL State: Active Adv Age: 00h01m27s Tag: 0
181 IS-IS authentication configuration example Network requirements As shown in Figure 69, S witch A, Switch B, Switch C and Switch D reside in the same IS-IS routing domain. Switch A, Switch B, and Switch C belong to Area 10, and Switch D belongs to Area 20. Configure relationship authentication between neighbors. Configure area authentication in Area 10 to prevent untrusted routes from entering into the area. Configure routing domain authentication on Switch C and Switch D to prevent untrusted routes from entering the routing domain. Figure 69 Network diagram for IS-IS authentication configuration Configuration procedure 1. Configure IP addresses for inte rfaces. (Details not shown.) 2. Configure IS-IS basic functions: # Configure Switch A. system-view [SwitchA] isis 1 [SwitchA-isis-1] network-entity 10.0000.0000.0001.00 [SwitchA-isis-1] quit [SwitchA] interface vlan-interface 100 [SwitchA-Vlan-interface100] isis enable 1 [SwitchA-Vlan-interface100] quit # Configure Switch B. system-view [SwitchB] isis 1 [SwitchB-isis-1] network-entity 10.0000.0000.0002.00 [SwitchB-isis-1] quit [SwitchB] interface vlan-interface 200 [SwitchB-Vlan-interface200] isis enable 1 [RouterB--Vlan-interface200] quit # Configure Switch C. system-view [SwitchC] isis 1