H3C S5500-SI 多Smart Link组典型配置

一、  组网需求：

设备Device C上VLAN 1～200的流量通过设备Device B、Device D双上行到设备Device A。要求进行负载分担，VLAN 1～100和VLAN 101～200的两组流量分别通过不同的链路上行到设备Device A；

设备Device C上进行双上行链路灵活备份，Smart Link组1的引用实例0（绑定VLAN 1～100）的流量从经过Device B的链路通向设备Device A；而Smart Link组2的引用实例2（绑定VLAN 101～200）的流量从经过Device D链路通向设备Device A；

Smart Link组1和组2分别在VLAN 10和VLAN 101内发送和接收Flush报文。

二、  组网图：

三、  步骤：

1. 设备Device C上的配置

# 创建VLAN并配置VLAN与MSTP实例的映射关系。

system-view

[DeviceC] vlan 1 200

[DeviceC] stp region-configuration

[DeviceC-mst-region] instance 0 vlan 1 to 100

[DeviceC-mst-region] instance 2 vlan 101 to 200

[DeviceC-mst-region] active region-configuration

[DeviceC-mst-region] quit

# 关闭端口的STP功能，并将端口配置为Trunk端口且允许VLAN 1～200通过。

[DeviceC] interface gigabitethernet 1/0/1

[DeviceC-GigabitEthernet1/0/1] undo stp enable

[DeviceC-GigabitEthernet1/0/1] port link-type

[DeviceC-GigabitEthernet1/0/1] port trunk permit vlan 1 to 200

[DeviceC-GigabitEthernet1/0/1] quit

[DeviceC] interface gigabitethernet 1/0/2

[DeviceC-GigabitEthernet1/0/2] undo stp enable

[DeviceC-GigabitEthernet1/0/2] port link-type trunk

[DeviceC-GigabitEthernet1/0/2] port trunk permit vlan 1 to 200

[DeviceC-GigabitEthernet1/0/2] quit

# 创建Smart Link组1。

[DeviceC] smart-link group 1

# 配置Smart Link组1的保护VLAN。

[DeviceC-smlk-group1] protected-vlan reference-instance 0

# 配置端口GigabitEthernet1/0/1为主端口，端口GigabitEthernet1/0/2为副端口。

[DeviceC-smlk-group1] port gigabitethernet1/0/1 master

[DeviceC-smlk-group1] port gigabitethernet1/0/2 slave

# 配置抢占模式为角色抢占。

[DeviceC-smlk-group1] preemption mode role

# 开启发送Flush报文的功能。

[DeviceC-smlk-group-1] flush enable control-vlan 10

[DeviceC-smlk-group-1] quit

# 创建Smart Link组2。

[DeviceC] smart-link group 2

# 配置Smart Link组2的保护VLAN。

[DeviceC-smlk-group2] protected-vlan reference-instance 2

# 配置端口GigabitEthernet1/0/1为副端口，端口GigabitEthernet1/0/2为主端口。

[DeviceC-smlk-group2] port gigabitethernet1/0/1 slave

[DeviceC-smlk-group2] port gigabitethernet1/0/2 master

# 配置抢占模式为角色抢占。

[DeviceC-smlk-group2] preemption mode role

# 开启发送Flush报文的功能。

[DeviceC-smlk-group2] flush enable control-vlan 101

2. 设备Device B上的配置

# 开启接收Flush报文的功能。

system-view

[DeviceB] vlan 1 to 200

[DeviceB] interface gigabitethernet 1/0/1

[DeviceB-GigabitEthernet1/0/1] port link-type trunk

[DeviceB-GigabitEthernet1/0/1] port trunk permit vlan 1 to 200

[DeviceB-GigabitEthernet1/0/1] smart-link flush enable control-vlan 10 101

[DeviceB-GigabitEthernet1/0/1] quit

[DeviceB] interface gigabitethernet 1/0/2

[DeviceB-GigabitEthernet1/0/2] port link-type trunk

[DeviceB-GigabitEthernet1/0/2] port trunk permit vlan 1 to 200

[DeviceB-GigabitEthernet1/0/2] smart-link flush enable control-vlan 10 101

3. 设备Device D上的配置

# 开启接收Flush报文的功能。

system-view

[DeviceD] vlan 1 to 200

[DeviceD] interface gigabitethernet 1/0/1

[DeviceD-GigabitEthernet1/0/1] port link-type trunk

[DeviceD-GigabitEthernet1/0/1] port trunk permit vlan 1 to 200

[DeviceD-GigabitEthernet1/0/1] smart-link flush enable control-vlan 10 101

[DeviceD-GigabitEthernet1/0/1] quit

[DeviceD] interface gigabitethernet 1/0/2

[DeviceD-GigabitEthernet1/0/2] port link-type trunk

[DeviceD-GigabitEthernet1/0/2] port trunk permit vlan 1 to 200

[DeviceD-GigabitEthernet1/0/2] smart-link flush enable control-vlan 10 101

4. 设备Device A上的配置

# 开启接收Flush报文的功能。

system-view

[DeviceA] vlan 1 to 200

[DeviceA] interface gigabitethernet 1/0/1

[DeviceA-GigabitEthernet1/0/1] port link-type trunk

[DeviceA-GigabitEthernet1/0/1] port trunk permit vlan 1 to 200

[DeviceA-GigabitEthernet1/0/1] smart-link flush enable control-vlan 10 101

[DeviceA-GigabitEthernet1/0/1] quit

[DeviceA] interface gigabitethernet 1/0/2

[DeviceA-GigabitEthernet1/0/2] port link-type trunk

[DeviceA-GigabitEthernet1/0/2] port trunk permit vlan 1 to 200

[DeviceA-GigabitEthernet1/0/2] smart-link flush enable control-vlan 10 101

配置完毕后，用户可以使用display命令查看Smart Link的配置和报文统计情况。

CCIE Security 2009 IOS防火墙合集