H3C S5500-EI NQA经典配置
网络拓扑如下
5500 交换机 ver
H3C Comware Platform Software
Comware Software, Version 5.20, Release 2202
Copyright (c) 2004-2009 Hangzhou H3C Tech. Co., Ltd. All rights reserved. H3C S5500-52C-EI uptime is 0 week, 2 days, 17 hours, 44 minutes
H3C S5500-52C-EI with 1 Processor 256M bytes SDRAM 32768K bytes Flash Memory
Hardware Version is REV.C CPLD Version is 002 Bootrom Version is 509
[SubSlot 0] 48GE+4SFP Hardware Version is REV.C
1、 交换机上一个客户端vlan,vlan网关配置在5500交换机上。(也可以是多个客户端网段) 2、 交换机通往上游3条等价链路,配置了三条默认路由指向外网路由器,三条默认路由优先级和cost值相同。
ip route-static 0.0.0.0 0.0.0.0 172.16.1.9 track 1 ip route-static 0.0.0.0 0.0.0.0 172.16.1.13 track 2
ip route-static 0.0.0.0 0.0.0.0 172.16.1.17 track 3 正常情况下,三条链路均有流量,实现了等价负载均衡。
上游路由器回指了三条到192.168.1.0 的路由,三条路由优先级和cost值相同。
没配置NQA时如果任意1条或2条默认路由下一跳失效了(链路断了),但查看路由表三条等价默认路由依然存在,这时系统认为默认路由仍然可用,依旧进行3条链路的等价负载均衡,这时候就会有包仍然送到失效的下一跳上,部分客户端网络就会中断了,而且不会自行恢复,除非你自行删除失效的默认路由。
3、 通过NQA解决这个问题,NQA配置如下: nqa entry admin static1 type icmp-echo
destination ip 172.16.1.9
route-option bypass-route \\这条命令如果不配置,交换机CPU利用率80%以上,基本无法工作了。
frequency 10000
reaction 1 checked-element probe-fail threshold-type consecutive 1 action-type trigger-only
nqa entry admin static2 type icmp-echo
destination ip 172.16.1.13 route-option bypass-route frequency 10000
reaction 2 checked-element probe-fail threshold-type consecutive 2 action-type trigger-only
nqa entry admin static3 type icmp-echo
destination ip 172.16.1.17 route-option bypass-route frequency 10000
reaction 3 checked-element probe-fail threshold-type consecutive 3 action-type trigger-only
ip route-static 0.0.0.0 0.0.0.0 61.237.121.9 track 1
ip route-static 0.0.0.0 0.0.0.0 61.237.121.13 track 2 ip route-static 0.0.0.0 0.0.0.0 61.237.121.17 track 3
track 1 nqa entry admin static1 reaction 1 track 2 nqa entry admin static2 reaction 2 track 3 nqa entry admin static3 reaction 3
nqa schedule admin static1 start-time now lifetime forever nqa schedule admin static2 start-time now lifetime forever nqa schedule admin static3 start-time now lifetime forever
nqa agent enable
NQA 配置完毕后,中断一条链路(下一跳为172.16.1.9的),这时看路由表,172.16.1.9的下一跳默认路由已经没有了,NQA起作用了。