建设部网站资质升级陈述通过,关键词优化包含,wordpress 文件下载漏洞,wordpress dockerfile背景
机房的核心交换机升级为堆叠配置
注意#xff1a;
S6520-1设备已经在使用中#xff0c;需要先配置新加入的S6520-2设备的优先级会触发S6520-2设备重启。
配置S6520-1设备的优先级高于S6520-2设备则不会触发当前正在使用的主设备重启来触发选举
规划#xff1a;H3C-S652…背景
机房的核心交换机升级为堆叠配置
注意
S6520-1设备已经在使用中需要先配置新加入的S6520-2设备的优先级会触发S6520-2设备重启。
配置S6520-1设备的优先级高于S6520-2设备则不会触发当前正在使用的主设备重启来触发选举
规划H3C-S6520-1(当前正在使用的设备)H3C-S6520-2(新增设备)配置规划XGE1/0/1XGE1/0/1IRF堆叠链路XGE1/0/2XGE1/0/2IRF堆叠链路XGE1/0/3XGE1/0/3MAD检测链路XGE1/0/8XGE1/0/8下游S5130-2聚合链路XGE1/0/16XGE2/0/16下游S5130-1聚合链路XGE1/0/22XGE2/0/22下游IK-S7028T聚合链路实施
堆叠配置
# irf设备id 优先级配置irf mac-address persistent timerirf auto-update enableundo irf link-delayirf member 1 priority 32 # 主设备优先级高irf member 2 priority 1
# irf port配置
irf-port 1/2port group interface Ten-GigabitEthernet1/0/1port group interface Ten-GigabitEthernet1/0/2
#
irf-port 2/1port group interface Ten-GigabitEthernet2/0/1port group interface Ten-GigabitEthernet2/0/2# 连接状态
[H3C-S6520-1]dis irf link
Member 1IRF Port Interface Status1 disable -- 2 Ten-GigabitEthernet1/0/1 UP Ten-GigabitEthernet1/0/2 UP
Member 2IRF Port Interface Status1 Ten-GigabitEthernet2/0/1 UP Ten-GigabitEthernet2/0/2 UP 2 disable -- IRF BFD MAD链路检测配置
# 检测链路vlan配置
[H3C-S6520-1]int vlan 99
[H3C-S6520-1-Vlan-interface99]dis this
#
interface Vlan-interface99mad bfd enablemad ip address 192.168.255.210 255.255.255.240 member 1mad ip address 192.168.255.220 255.255.255.240 member 2
#
return
# 检测链路端口配置
[H3C-S6520-1-Vlan-interface99]int XGE1/0/3
[H3C-S6520-1-Ten-GigabitEthernet1/0/3]dis this
#
interface Ten-GigabitEthernet1/0/3port link-mode bridgeport access vlan 99undo stp enable
#
return
[H3C-S6520-1-Ten-GigabitEthernet1/0/3]exit
[H3C-S6520-1]int xge2/0/3
[H3C-S6520-1-Ten-GigabitEthernet2/0/3]dis this
#
interface Ten-GigabitEthernet2/0/3port link-mode bridgeport access vlan 99undo stp enable
#
returnmad检测状态
[H3C-S6520-1]dis mad verbose
Multi-active recovery state: No
Excluded ports (user-configured):
Excluded ports (system-configured):IRF physical interfaces:Ten-GigabitEthernet1/0/1Ten-GigabitEthernet1/0/2Ten-GigabitEthernet2/0/1Ten-GigabitEthernet2/0/2BFD MAD interfaces:Vlan-interface99
MAD ARP disabled.
MAD ND disabled.
MAD LACP disabled.
MAD BFD enabled interface: Vlan-interface99MAD status : NormalMember ID MAD IP address Neighbor MAD status1 192.168.255.210/28 2 Normal # fault则说明分裂2 192.168.255.220/28 1 Normal 聚合后可以登录一个交换机看到两个交换机所有的端口
聚合后下游设备和核心交换机S6520做聚合就可以聚合链路A插S6520-1上聚合链路B插S6520-2上
[H3C-S6520-1]dis int brief
Brief information on interfaces in route mode:
Link: ADM - administratively down; Stby - standby
Protocol: (s) - spoofing
Interface Link Protocol Primary IP Description
InLoop0 UP UP(s) --
MGE0/0/0 DOWN DOWN --
NULL0 UP UP(s) --
REG0 UP -- --
Vlan1 UP UP --
Vlan8 UP UP 192.168.8.2
Vlan10 UP UP 192.168.1.5
Vlan12 UP UP 10.10.12.2
Vlan13 UP UP 192.168.12.5
Vlan20 UP UP 10.10.20.2
Vlan60 UP UP 10.10.60.253
Vlan95 UP UP 10.10.95.5
Vlan99 UP UP 192.168.255.210Brief information on interfaces in bridge mode:
Link: ADM - administratively down; Stby - standby
Speed: (a) - auto
Duplex: (a)/A - auto; H - half; F - full
Type: A - access; T - trunk; H - hybrid
Interface Link Speed Duplex Type PVID Description
BAGG1 UP 20G(a) F(a) T 1
BAGG2 UP 20G(a) F(a) T 1
BAGG3 UP 20G(a) F(a) T 1
BAGG4 UP 20G(a) F(a) T 1
BAGG5 DOWN auto A A 1
XGE1/0/1 UP 10G(a) F(a) -- --
XGE1/0/2 UP 10G(a) F(a) -- --
XGE1/0/3 UP 10G(a) F(a) A 99
XGE1/0/4 DOWN auto A T 1
XGE1/0/5 UP 10G(a) F(a) T 1
XGE1/0/6 DOWN auto A A 1
XGE1/0/7 UP 1G(a) F(a) T 1
XGE1/0/8 UP 10G(a) F(a) T 1
XGE1/0/9 DOWN auto A T 1
XGE1/0/10 DOWN auto A T 1
XGE1/0/11 UP 1G(a) F(a) T 1
XGE1/0/12 DOWN auto A A 1
XGE1/0/13 DOWN auto A A 1
XGE1/0/14 UP 10G(a) F(a) T 1
XGE1/0/15 DOWN auto A T 1
XGE1/0/16 UP 10G(a) F(a) T 1
XGE1/0/17 DOWN auto A T 1
XGE1/0/18 DOWN auto A A 1
XGE1/0/19 DOWN auto A A 1
XGE1/0/20 DOWN auto A T 1
XGE1/0/21 DOWN auto A T 1
XGE1/0/22 UP 10G(a) F(a) T 1
XGE1/0/23 DOWN auto A T 1
XGE1/0/24 UP 10G(a) F(a) T 1
XGE2/0/1 UP 10G(a) F(a) -- --
XGE2/0/2 UP 10G(a) F(a) -- --
XGE2/0/3 UP 10G(a) F(a) A 99
XGE2/0/4 DOWN auto A A 1
XGE2/0/5 UP 10G(a) F(a) T 1
XGE2/0/6 DOWN auto A A 1
XGE2/0/7 DOWN auto A A 1
XGE2/0/8 UP 10G(a) F(a) T 1
XGE2/0/9 DOWN auto A A 1
XGE2/0/10 DOWN auto A A 1
XGE2/0/11 DOWN auto A A 1
XGE2/0/12 DOWN auto A A 1
XGE2/0/13 DOWN auto A A 1
XGE2/0/14 DOWN auto A A 1
XGE2/0/15 DOWN auto A A 1
XGE2/0/16 UP 10G(a) F(a) T 1
XGE2/0/17 DOWN auto A A 1
XGE2/0/18 DOWN auto A A 1
XGE2/0/19 DOWN auto A A 1
XGE2/0/20 DOWN auto A A 1
XGE2/0/21 DOWN auto A A 1
XGE2/0/22 UP 10G(a) F(a) T 1
XGE2/0/23 DOWN auto A A 1
XGE2/0/24 UP 10G(a) F(a) T 1 接入交换机lacp链路聚合配置
# 汇总
[H3C-S6520-1]dis link-aggregation summary
Aggregation Interface Type:
BAGG -- Bridge-Aggregation, BLAGG -- Blade-Aggregation, RAGG -- Route-Aggregation, SCH-B -- Schannel-Bundle
Aggregation Mode: S -- Static, D -- Dynamic
Loadsharing Type: Shar -- Loadsharing, NonS -- Non-Loadsharing
Actor System ID: 0x8000, 1484-77e3-cdd0AGG AGG Partner ID Selected Unselected Individual Share
Interface Mode Ports Ports Ports Type
--------------------------------------------------------------------------------
BAGG1 D 0x8000, 089b-4ba3-3387 2 0 0 Shar
BAGG2 D 0x8000, e878-ee9b-5757 2 0 0 Shar
BAGG3 D 0x8000, b8d4-f70a-fca8 2 0 0 Shar
BAGG4 D 0x8000, b8d4-f70b-0428 2 0 0 Shar# 详细配置[H3C-S6520-1]dis link-aggregation verbose
Loadsharing Type: Shar -- Loadsharing, NonS -- Non-Loadsharing
Port Status: S -- Selected, U -- Unselected, I -- Individual
Port: A -- Auto port, M -- Management port, R -- Reference port
Flags: A -- LACP_Activity, B -- LACP_Timeout, C -- Aggregation,D -- Synchronization, E -- Collecting, F -- Distributing,G -- Defaulted, H -- ExpiredAggregate Interface: Bridge-Aggregation1
Creation Mode: Manual
Aggregation Mode: Dynamic
Loadsharing Type: Shar
Management VLANs: None
System ID: 0x8000, 1484-77e3-cdd0
Local:Port Status Priority Index Oper-Key FlagXGE1/0/22 S 32768 1 1 {ACDEF}XGE2/0/22 S 32768 3 1 {ACDEF}
Remote:Actor Priority Index Oper-Key SystemID Flag XGE1/0/22(R) 32768 27 1 0x8000, 089b-4ba3-3387 {ACDEF}XGE2/0/22 32768 28 1 0x8000, 089b-4ba3-3387 {ACDEF}Aggregate Interface: Bridge-Aggregation2
Creation Mode: Manual
Aggregation Mode: Dynamic
Loadsharing Type: Shar
Management VLANs: None
System ID: 0x8000, 1484-77e3-cdd0
Local:Port Status Priority Index Oper-Key FlagXGE1/0/16(R) S 32768 2 2 {ACDEF}XGE2/0/16 S 32768 4 2 {ACDEF}
Remote:Actor Priority Index Oper-Key SystemID Flag XGE1/0/16 32768 1 1 0x8000, e878-ee9b-5757 {ACDEF}XGE2/0/16 32768 2 1 0x8000, e878-ee9b-5757 {ACDEF}Aggregate Interface: Bridge-Aggregation3
Creation Mode: Manual
Aggregation Mode: Dynamic
Loadsharing Type: Shar
Management VLANs: None
System ID: 0x8000, 1484-77e3-cdd0
Local:Port Status Priority Index Oper-Key FlagXGE1/0/8(R) S 32768 5 3 {ACDEF}XGE2/0/8 S 32768 6 3 {ACDEF}
Remote:Actor Priority Index Oper-Key SystemID Flag XGE1/0/8 32768 2 1 0x8000, b8d4-f70a-fca8 {ACDEF}XGE2/0/8 32768 1 1 0x8000, b8d4-f70a-fca8 {ACDEF}Aggregate Interface: Bridge-Aggregation4
Creation Mode: Manual
Aggregation Mode: Dynamic
Loadsharing Type: Shar
Management VLANs: None
System ID: 0x8000, 1484-77e3-cdd0
Local:Port Status Priority Index Oper-Key FlagXGE1/0/5 S 32768 8 4 {ACDEF}XGE2/0/5(R) S 32768 7 4 {ACDEF}
Remote:Actor Priority Index Oper-Key SystemID Flag XGE1/0/5 32768 2 1 0x8000, b8d4-f70b-0428 {ACDEF}XGE2/0/5 32768 1 1 0x8000, b8d4-f70b-0428 {ACDEF}具体配置命令
interface Bridge-Aggregation1port link-type trunkport trunk permit vlan alllink-aggregation mode dynamic
#
interface Bridge-Aggregation2port link-type trunkport trunk permit vlan alllink-aggregation mode dynamic
#
interface Bridge-Aggregation3port link-type trunkport trunk permit vlan alllink-aggregation mode dynamic
#
interface Bridge-Aggregation4port link-type trunkport trunk permit vlan alllink-aggregation mode dynamicBAGG1端口配置
[H3C-S6520-1]int XGE1/0/22
[H3C-S6520-1-Ten-GigabitEthernet1/0/22]dis this
#
interface Ten-GigabitEthernet1/0/22port link-mode bridgeport link-type trunkport trunk permit vlan allpacket-filter 3001 inboundpacket-filter 3001 outboundport link-aggregation group 1
#
return
[H3C-S6520-1-Ten-GigabitEthernet1/0/22]exit
[H3C-S6520-1]int XGE2/0/22
[H3C-S6520-1-Ten-GigabitEthernet2/0/22]dis this
#
interface Ten-GigabitEthernet2/0/22port link-mode bridgeport link-type trunkport trunk permit vlan allport link-aggregation group 1
#
returnBAGG2端口配置
[H3C-S6520-1-Ten-GigabitEthernet2/0/22]int XGE1/0/16
[H3C-S6520-1-Ten-GigabitEthernet1/0/16]dis this
#
interface Ten-GigabitEthernet1/0/16port link-mode bridgeport link-type trunkport trunk permit vlan allpacket-filter 3001 inboundpacket-filter 3001 outboundport link-aggregation group 2
#
return
[H3C-S6520-1-Ten-GigabitEthernet1/0/16]int xge2/0/16
[H3C-S6520-1-Ten-GigabitEthernet2/0/16]dis this
#
interface Ten-GigabitEthernet2/0/16port link-mode bridgeport link-type trunkport trunk permit vlan allport link-aggregation group 2
#
returnBAGG3端口配置
[H3C-S6520-1-Ten-GigabitEthernet2/0/16]int xge1/0/8
[H3C-S6520-1-Ten-GigabitEthernet1/0/8]dis this
#
interface Ten-GigabitEthernet1/0/8port link-mode bridgeport link-type trunkport trunk permit vlan allpacket-filter 3001 inboundpacket-filter 3001 outboundport link-aggregation group 3
#
return
[H3C-S6520-1-Ten-GigabitEthernet1/0/8]int xge2/0/8
[H3C-S6520-1-Ten-GigabitEthernet2/0/8]dis this
#
interface Ten-GigabitEthernet2/0/8port link-mode bridgeport link-type trunkport trunk permit vlan allpacket-filter 3001 inboundpacket-filter 3001 outboundport link-aggregation group 3
#
returnreference
https://www.h3c.com/cn/d_202504/2398722_30005_0.htm#_Ref472604744
irf配置参考章节 1.5 搭建irf
mad配置参考章节 1.10.2 IRF典型配置举例BFD MAD检测方式