一、 设备
设备 | 作用 | 备注 |
---|---|---|
控制器SDN-Controller | 使用openflow协议下发VXLAN配置到转发器,SDN的控制和管理层面 | 该方案无需在交换机配置VXLAN,统一在控制器上配置并下发。 |
CloudEngine 12800(交换机) | 执行控制器下发的配置进行数据转发,为SDN的转发层面 |
二、 配置
实现目的:实现不同数据中心之间的VLAN互访,如下图所示,需要在FP2设备上配置VXLAN三层网关进行不同VLAN的互访;以及在FP2设备上配置二层网关实现跨数据中心相同VLAN的互访。
2.1实现三层可达
此例中使用OSPF实现控制器、转发器、以及转发器之间的三层可达。
控制器配置:
#
interface Gigabitethernet1/0/1
undo portswitch
ip address 172.16.1.1 255.255.255.0
#
interface LoopBack1
ip address 1.1.1.1 255.255.255.255
ospf 1
area 0.0.0.0
network 1.1.1.1 0.0.0.0
network 172.16.1.0 0.0.0.255
FP1**配置:**
interface Vlanif100
ip address 172.1.1.1 255.255.255.0
#
interface Vlanif300
ip address 5.1.1.2 255.255.255.0
interface LoopBack1
ip address 2.2.2.2 255.255.255.255
ospf 1
area 0.0.0.0
network 2.2.2.2 0.0.0.0
network 5.1.1.0 0.0.0.255
network 172.1.1.0 0.0.0.255
FP2**配置:**
interface Vlanif100
ip address 172.1.1.2 255.255.255.0
#
interface Vlanif200
ip address 172.1.2.1 255.255.255.0
#
interface Vlanif300
ip address 5.2.1.2 255.255.255.0
interface LoopBack1
ip address 3.3.3.3 255.255.255.255
ospf 1
area 0.0.0.0
network 3.3.3.3 0.0.0.0
network 5.2.1.0 0.0.0.255
network 172.1.1.0 0.0.0.255
network 172.1.2.0 0.0.0.255
FP3**配置:**
interface Vlanif200
ip address 172.1.2.2 255.255.255.0
#
interface Vlanif300
ip address 5.3.1.2 255.255.255.0
interface LoopBack1
ip address 4.4.4.4 255.255.255.255
ospf 1
area 0.0.0.0
network 4.4.4.4 0.0.0.0
network 5.3.1.0 0.0.0.255
network 172.1.2.0 0.0.0.255
2.2 转发器设备注册到控制器
控制器配置(0**):**
sdn controller
openflow listening-ip 1.1.1.1
fp-id 10
openflow controller
peer-address 2.2.2.2
fp-id 20
openflow controller
peer-address 3.3.3.3
fp-id 30
openflow controller
peer-address 4.4.4.4
sdn fp service
fp-id 10
fp-id 20
fp-id 30
FP1**配置:**
#
sdn agent
controller-ip 1.1.1.1
openflow agent
transport-address 2.2.2.2
FP2**配置:**
#
sdn agent
controller-ip 1.1.1.1
openflow agent
transport-address 3.3.3.3
FP3**配置:**
#
sdn agent
controller-ip 1.1.1.1
openflow agent
transport-address 4.4.4.4
2.3 配置VXLAN
只有控制器上配置
sdn fp service
fp-id 10
#
bridge-domain 10
vxlan vni 10
arp l2-proxy enable
#
interface Nve10:1
source 2.2.2.2
vni 10 head-end peer-list 3.3.3.3
#
interface vServiceIf10:1
binding interface 10GE1/0/2
vlan assign 10
#
interface vServiceIf10:1.1 mode l2
encapsulation dot1q vid 10
bridge-domain 10
#
sdn fp service
fp-id 20
#
bridge-domain 10
vxlan vni 10
#
bridge-domain 20
vxlan vni 20
arp l2-proxy enable
#
interface Nve20:1
source 3.3.3.3
vni 10 head-end peer-list 2.2.2.2
vni 20 head-end peer-list 4.4.4.4
#
interface Vbdif20:10
ip address 192.168.10.10 255.255.255.0
#
interface Vbdif20:20
ip address 192.168.20.10 255.255.255.0
sdn fp service
fp-id 30
#
bridge-domain 20
vxlan vni 20
#
interface Nve30:1
source 4.4.4.4
vni 20 head-end peer-list 3.3.3.3
#
interface vServiceIf30:1
binding interface 10GE1/0/2
vlan assign 20
#
interface vServiceIf30:1.1 mode l2
encapsulation dot1q vid 20
bridge-domain 20
2.4 FP1、FP3的VLAN配置
和普通交换机的VLAN配置一样,在此不现赘述。