NetApp-vif接口配置與多網(wǎng)段訪問應(yīng)用實現(xiàn)

1、NetA pp vif接口配置與多網(wǎng)段訪問應(yīng)用實現(xiàn)1. NetApp Vif概念簡介NETAP把端口聚合叫做vif （與術(shù)語 是同一個意思）cha nell /li nk aggregate式：port trunk/ ether，支持以下三中聚合方1.1 sin gle-mode和Standby狀態(tài)，端口失效，系統(tǒng)自動從standby中選擇只有一個端口處于端口工作在active actvie 狀況，當 active 一個端口成為active 口；不需要交換機支持aggre，也不需要在 交換機上做任何相關(guān)配置.所有端口具有相同的mac地址（如下所 示）SW1*1STN1ig9HNAS1M L”二

2、二 0:c I raiMTWi inHianaai 11 lEliHrai i ««- ! » fe*«41 »72沖 wg > a ««二 1.2 multi-mode （ static ）與 ieee 802.3ad（static ）兼容，所有端口處于 active狀態(tài)，具有相同的 mac地址；能夠檢測端口的鏈路狀態(tài)，但不能檢測數(shù)據(jù)的丟失；交換機需要支持 lacp ;在multimode （包 括static 和dynamic）下，存儲系統(tǒng)對outbound traffic 支持 三種 load-bala nee

3、算法：ip-based/mac-based/ro und rob in.SW2L i'u 巾 u g L f_in J z11 IL ! J If * I.!l丄：匚匚SW1卩匚' STN1 斗hb . ii=ji I卜丄古一 爾jj一 .歳屛嬴帚曲UR祥蠢麗廚J鈕萍舂高盔5iSrN2>'疊遼壬禹law'NAS2NA311.3 multi-mode ( dyn amic)與 ieee 802.3ad （ dynamic）兼容，即 ILACP協(xié)議（cisco 叫做pagp）,所有端口均處于active狀態(tài)，具有相同的mac地 址；交換機需要支持lacp ;在

4、lacp下，vif接口必須配置為 first-level ，并且lb應(yīng)該配置為ip -based （這也是默認方式）； 在lacp下，存儲系統(tǒng)不僅能檢測鏈路的丟失，還能檢測數(shù)據(jù)流 的丟失，因此該模式與ha環(huán)境相兼容.2. vif接口配置使用vif命令創(chuàng)建刪除vif接口 ,添加或刪除物理網(wǎng)口到vif中, 查看vif接口狀態(tài);最多支持16個物理口聚合成1個vif接口 ;所有 物理口需具有相同的MTU不能將vlan接口添加到vif中；支持 10/100/1000m網(wǎng)卡；對于10G TOE卡有以下限制:multimode支持2 個物理口丄ACP不支持,TOE功能會被禁用；2.1. 命令：test na

5、s*> vifUsage:vif create si ngle|multi|lac p <vif_n ame> -brr|mac|i p|p ort <i nterface_list>創(chuàng)建vif接口，指定模式/接口名稱/lb算法/相應(yīng)的物理接口 vif add <vif_n ame> <in terface_list>將物理口添加到已存在的vif接口中vif delete <vif_n ame> <in terface_ name>從vif接口 両除物理接口vif destroy <vif_n ame>刪

6、除vif邏輯接口vif favor| nofavor <in terface>在接口組中，選擇active接口vif status <vif_n ame>查看vif接口狀態(tài)vif stat <vif_n ame> in terval查看vif流量統(tǒng)計信息2.2.sin gle-mode 配置ste p1:配置前將rd下文件到處保存，在配置完成后將新增的文件導(dǎo)入 保存testnas*>rd（查看文件信息）test nas*>wr （寫入文件信息）Ste p2:eOft：eOb:eOc:eOd:flag9-0x2(i4S8e7<UP, BROA

7、DCAST, RUNNING,MULTICAST,TCPCKSDM> mcu 1500 inet 192.168.0.77 netmask-or-prefix Ox上fffff30 broadcast 192.18.0.355 ether 00 : aO ± 53 : 03(autO-lOOOt-f d-upj flQWCOJfltrOl fullf lag3=Cix2S0 Sa 66<BROAnCAST, RUNNING, MULT I CAST, TCPCKSUM> mtu 1500 ether OO:aO:9fl:03:fib (autQ-lOOOt-fd-c

8、fg dnwn flowcontrol fullf lag3=Qx250Ba66<BROADCAST, RONNING,rfnLTICAST, TCPCKSUM> mtu 1530 ether 00：a0：9e：03:96:60(auto-unknown-cfg dovn) flowcontrol fullflag 3= 0x250006 e<BROADCAST, RUNNING , MULTI CAS T, T C PCK5UM> mtu 1530 ether 00;aO;SQ:03:69 (auto-unlmown-cfgdoxn) flowcontrsl full

9、lo: flagaOKlS3049<UP,LOOPBACK,RUNNING,MULTICASt7tCPCKSUM> mtu 91SS inet 127*0*0.1 netiaasJc-or-prefix OxffOOOOOO broadcast 127*0*0.1配置后eOb:eOc:eOd:flag3=0i2d4BS67<np,BROADCAST,RUNNIHG,MULTICAST,TCPCKSUM> mtu 1500 rner 192.160.0.77 necmask-or-prefix OxffffffOO broadcasi: 192.168.0.255 eth

10、er 00:aO：90:03：6a (autO-lOGOt-fd-up> flawccmtrol fullflags=OzaSOBae6<BROArCAST,RUMNItJG,MULTICAST,TCPCKSUM> mtu 1530 ether 02 : aO : 90 : 03 :96 : a (auto-1000 t-fd-cfg_iown) f lowcontrol full tnmted viflflag3 = Oi25O0a66<BROArCAST,RnNNING,MnLTICAST,TCPCKSDM> mtu 1530 ether 00 : aO ：

11、98 : 03 ;S6 ： es (a.uto-vnJcnown-cfg_down) flowcontrl fullf lags=0ia 50 SB 6e<BROArCflST, RUNNING, MULTI CAST, TCPCKSDM> mtu 1500ettiez 02:aO:98:03:96:6a (quto-unlmown-cfg_dowi) flowcontrsl fulltrunted vifllo; f laga=0x：98049<UP, LOOPBACK, RUNNING, MULTICAST,TCPCKSOM> mtu 916 8inet 127.0

12、.0.1 netiaask-or-prefix OxffODODOO broadcast 127,0.0.1 vifl: flags-0x22408862<BROADCAST,ROKNING,MULTICAST> mtu 1500g匸her Q2:aO:5S:Q3:夕e:fia (Diaablg赳 virtual interJacg*Ste p3:給虛擬接口配置IP地址子網(wǎng)test nas*>ifco nfig vif1 192.168.10.1n etmask255.255.255.0test nas*> mon jan 18 04:35:warning : vif1

13、 : switching to e0b active 接口)查看vif狀態(tài)58 gmt pvif.switchli nk(系統(tǒng)隨機選擇e0b 口為eOb:eoc:eOd:test nas*>ifc onfigIlag3=0jt2tl4S8 67<UP,BROADCAST,RUNNING,MULTICAST,TCPCKSUM> muu 1500inet 192.166.0,7? netnaBk-Oi-prefix OxffffffOO broadcast 192.168.0.255 ether 00:aO:9fl:03:96:6a tauto-lOOOt-id-up) flow

14、contiol fullf 1 a g 3= 0.x ad4 S S 6 ? <U P, BROADCAST , EUNWIWG, MUITI CAST, TC PCKSUM> mtu 1500 ether 02:aO:SE:03:96:6a auto-lOOOt-fd-up) flowcontrol full t run ted viflria g3= x2 5 a £ e 6 6<erqadca5 t , runn ing , mubt i c jlst , tcpcks um> ntu i50O ether 00:30:90:03:96:68 faur-

15、unknown-cfg down flowcontTDl full flag5=Oxa54e067<UP,BROADCAST,RUNNING,MUITICaEt,TCPCKSUHA mtu 1500 ether 02 ; aO ; 98 ; 03 : 9棗；fouto-unknown-down flowcontrol full trunked vifllo: flags=0x19*8049<UP,LOOPBACK,RUNNING,MULTICASI,T匚PCESDM> mtu 91SSiriMt 1j 7 *0.0.1 n*tmftsk-or-prf 1 v. Oseff00

16、0000 broartcjsst 17. 0.0.1Vifl: f 1 ags -0x2 2 S 4 S E 6 3 <UP, BROADCAST, RUHNING, MULT I CAST, TCPCKSnM> ntu 1500inet 192.168,10,1 netnask-or-prefix OxffffffOO broadcast 192,160.10,255ectier 02 : aO : SB : 03 : 9 : £a i Disabled viitual inteilaceiSte p4:手動選擇active接口，查看vif接口狀態(tài):test nas*&

17、gt; vif favor e0b test nas*> vif status vif1（在singlemode下，只有一個物理口為up,即active,其他為 down/broken,即 standby）default: transmi匕 *IF Load balancing', VIF Type 'multi modG , fail * log' vif j.:1 linfcr transmit none VIF Type * sj_ngle macle * fail default *up;eOb:VIF Status UpAddr setstate up；

18、 3in.ce Z3D世匚201 百 11:39:15 00:01 sOO) mediotype: auto-lOOOt-fd-up flags: enabledinput packers 23, input bytes 2931 u匕put pactets 33 output bytes 2634 output probe packets 0, inpu't probe packets 0 strike counti 0 of 10up indieatierns 1, broken iadlcacrons 0 drops (if) 0, drops (Arnk 0indie at i

19、on.: up at 23Dec201& 11: 39 : IS consecutive 石Q, transitions23bTOkCTl：eOcL:state b工okeUf since 23D皀c2015 11:39:28 mediaYpe: auDO-unknown-down flags;input paclce匸3 0尸 inpur Ijytea 0 output pactets , output bytes 0 output probe paclcets 0, input probe strike eounr: 0 of 10up indj-cat rons 0, bzroi

20、en i ndn. cat ions 0 drops (if) 0, drops fiink 0 indication; brolcen st11 ;3S; 2Qconsecutive 0f transitions 1(00：OO：47>pactets 0multi-mode ( static )配置-b ip e0b e0d(創(chuàng)建 multi vif邏輯接口 ）test nas*> vif destroy vif1(刪除VIF邏輯接口)vif: cannot destroy a p vif that is up（此處提示刪除的邏輯接口在 up狀態(tài)，不能刪除）test nas*&g

21、t; ifco nfig vif1 dow n(將邏輯接口狀態(tài)手動dow n掉)test nas*> Mon Jan 18 06:17:29 GMTp vif.vifC on figDow n:i nfo: vif1: Con figured dow ntest nas*> vif destroy vif1 test nas*> vif create multi vif1 test nas*> ifconfig vif1 192.168.10.1 n etmask255.255.255.0test nas*>ifc onfigflag3-t)x2cl4e87<

22、;UPBROADCAST,RUNNING,MULTICAST,TCPCE£UM> latu 1500 inec 192.18.0.77 ne-mafllc-or-pref ix Oxf f f f ff 00 broadcast 192.160 . C . 255 ether 00:a0:9fl:03:96:6a tautolOOOt上i一up) flowconcrol fullf1ag30xad4237<UP, BROADCAST,RUNNING,MULTICAST, TCPCK5UM> mtu 1500ethr 02:a0:9a:03:6a auto-lOOOt

23、-fd-up) flowcontrol full trunked vif1nag 3=3X2 5 O e 3 6 e<EROADCA5 T , RLTKN ING, HOLT I CiST , TCP CK5 DH> mULi 1500 ethr 00:a0：90:03:96:68 fauto-iuiknown-cfg down flowcontrol full tlaff3=：)xa5e067<UP, BROADCAST , RUNNING, MUiT I CAST, TC PCTESUHA mtu 1500 ether 02;口O：9G：03;9G：£ faut

24、o-unimown down) flowcontrol full tnuilced vif 1lo; flaga=0Kl 94 8C49<UP, LOOPBACK,RUNNING, MULTICXSI, TCPCKSUM> mtu 91SB inLt 127+0 + 0亠1 ri*rmnfllr-or-rrFfix OxffOOOOOO brnftrlcflflt 127,0,0,1 vifl: flftg3=0x2 2c4S863<U P, BROADCAST# RUNNING fMITLT I CAST, TCPCKSDMmtu 1500 inet 192.168,10*

25、1 neinaslc-or-prefix Oxffffff00 broadcast 192,168.10.255 ectisr 02 油0 : 9e : 03 : 5£:i Enabled virtual incerf ace jeO*:eOb:eOd:test nas*> vif status vif1（在multimode下,vif接口組中所有物理接口都為 up狀態(tài)，即 active狀況）實驗環(huán)境下e0d未連接網(wǎng)線，故為broken）default:vifl: 1transmit ' IP Load balancing', VIF Type * IP Loa

26、d talancrng', VIFAddz:_3etlink,匸工ananitVIF 3tatua Up*mialti_mnd皀*fail 'log'Typercode * fail ' default"up :e3b:State up,mediatype : ant-1000t-fd-upflags; enabledxnput packets 22,since 23Dec2O15 11:3:13(00:00:47)braken: e5d:utput paclcets 37, output bytes 2甘4麻 up indications drops

27、 (if) 0* drepa (linlc> 0 indication: up at 33I>ec2015 11:42:13 consecutive 46, transitions 1broten indications 0state broken, since 23Dec201S 11:27 (00:DO:33) ire mat ype : aut -unJmawii - flegs:incut paiclcets 0. input bytes 0 output packets 0, output bytes 0 up indications 0 bxoten indicatio

28、ns 0 dr ups (IE) Of dx cps Cllnc> 0Indication: broken at 23I>e=2O15 11:42:27 consecutive 0. tranaitiona 124multi-mode (dyn amic)lacp配置*在NetApp Data ONTAP 8.1及以上集群模式下,兩臺配置步驟相同。（本實驗Data On tap為7.3，不支持lacp模式，）刪掉之前的配置test nas*> ifco nfig vif1 dow ntest nas*> vif destroy vif1使用 vif create命令創(chuàng)建

29、lacp vif邏輯接口b ip eOb e0dtest nas*> vif create lac p vif1 test nas*>ifc onfig vif1 up test nas*>vlan create vif1 10 20 30（在vif接口下創(chuàng)建多vian,有效的vlan標識為整數(shù)，范圍 為1 - 4094;基于一組規(guī)則或條件（如介質(zhì)訪問控制（MAC）地址、 協(xié)議、網(wǎng)絡(luò)地址或多點廣播地址）的交換機端口的邏輯關(guān)聯(lián)。這個概念允許將LAN再次分段，而無需實際重新安排。）n etmaskn etmaskn etmasktest nas*> ifconfig vif

30、1-10 192.168.10.1255.255.255.0(配置 vlan IP 地址子網(wǎng))test nas*> partner vif1-10 test nas*> ifconfig vif1-20 192.168.20.1255.255.255.0test nas*> partner vif1-20 test nas*> ifconfig vif1-30 192.168.30.1255.255.255.0test nas*> part ner vif1-30（partner用于顯示和啟用伙伴和遠程伙伴設(shè)備的操作。lacp 下，選擇關(guān)聯(lián)的邏輯端口，HA環(huán)境下；

31、實驗環(huán)境為單機模式，此命對端交換機上未做配置令不會生效。disabled virtual in terface:所以NAS上此端口會顯示disabled ）eOa:llag3-OJt2d4S867<UP,BROADCAST,RDHNING,MULTICAST,TCPCKSUM> m匸u 1500 laet 192.168.0,77 nenaask-or-prefix OxffffffOO broadcast 192.ISB.0.3S5 ether 00;a0:I auto-1 OOOt- fd.-np) f lowcant rd fulleOtj：f 1 a g3= 0.x a a

32、 dO S B 67< BROADCAST , EUNUIUG, MULTI CAST, T C PCKSJM, VLAN > ntu ISOD ether 02 : aO : SS : D 3 : 9 £ : 6a |aut.Q-1000t-fd-up) flowoont rcl full trunJced virieOc:f 1 a g3= 0 x2 5 0 0 S 6 e <EROADCf T, HUNN ING, MULT IC, TCPCKSUM> mtu 1500ether 00;aO:9S:03:63 |aut-unknown-cfgdown t

33、lowcontrol full亡Dd;f lag30xea50SS67<BROADCAST, RUNNING,MDLTICAStTtCPCK5UM,VIANA ntu 1300 ether D2:a0:Iauto-unknown-dovn> flowcentzel full trunked vifllo: flftga-0xlA-98O49<DP, ：,OOPERCK, RONNING.MULTICAST, TCPCKS3M> rttu 9：S8 ineT： 127.0.0.1 netmask-oi-prefix Oxff OOOOOO broadcast 127.0.

34、0.1vir±； ria33=Dxa2SUflBbJ<BKUAl?CA；3T, RUNNING,HULTICA；!, ICPCKUtt, Vl>AN> mt 11 IbUO ether 02 : aO : 98 : 03 : 9£ : 6a iDisabled virtual interface)vif 1-10: f laga= 0x214BE63<OP,BROAJX：A5Tr RUNNING,MULTICAST,TCPCTKSUMA mtu 1500 inet. 192.16S - ID. 1 netmask- r-pref ix Oxff f

35、f f 00 bzoadcaat 二92.15S “ 10.255 ether 02:aO:SS j 03：9£:6a |Disabled virtual interface)Vi fl-30： fla(5a=Cix314See3<tT P, BROAXAST, RUNNTNG, KUTTIC；人 5T, TC PCKSUMmtu 1500inet 192,168.20.1 netma3It-or-prefix OxfffffiOO broadcast 192.loQ .20.255 ether 02 : dO : 96 : 03 :iDlJled virtual interface)vifl-30: flag