13 vlan 801 10.52.21.6/29 GSYC_CORE_SW_7506E_1--Gi3/0/3 14 vlan 802 10.52.21.38/29 GSYC_CORE_SW_7506E_2--Gi3/3 15 vlan 813 10.52.21.65/29 GSYC_DATA_SW_7510E_1--Gi3/0/46 16 vlan 814 10.52.21.73/29 GSYC_DATA_SW_7510_2--G3/46 17 vlan 815 10.52.21.113/29 GSYC_INFO_FW_1 --Gi0/1 FW_2 GSYC_INFO_SW_7510E--Gi4/0/47&Gi4/0/48 18 vlan 816 10.52.21.121/29 19 vlan 900 10.52.21.89/29 10.52.21.94/29 数据中心核心交换机网络IP统计如下:
设备 序VLAN 号 1 lo 0 2 vlan 50 3 vlan 90 4 vlan 98 DATA_SW_7510E_1 IP及掩码 10.52.210.153/32 10.52.16.2/27 10.52.21.225/29 10.52.19.253/28 10.52.4.253/25 192.168.33.253/24 192.168.34.253/24 甘肃烟草网络设备接口信息 DATA_SW_7510E_2 IP及掩码 10.52.210.154/32 10.52.16.3/27 10.52.19.252/28 10.52.4.252/25 192.168.33.252/24 192.168.34.252/24 10.52.7.1/27 10.52.20.33/27 10.52.20.17/27 VRRP网关地址 10.52.16.1 描述 备注 5 6 7 8 vlan 100 vlan 102 vlan 103 vlan 110 Inter_SSL WuQuan_BG out-of-band 10.52.19.254 managment 10.52.4.254 DONGRUAN-SERVER 192.168.33.254 192.168.34.254 JiFangJianKong touziguanlixito ng_dahe ZhiJianZhan 9 vlan 140 10.52.35.1/26 10.52.35.65/26 10.52.35.129/26 10.52.35.193/26 10.52.9.1/24 10.52.24.2/27 192.168.11.2/24 192.168.12.2/24 10.52.24.129/28 192.168.25.2/28 192.168.26.2/28 10.52.16.226/27 10.52.16.194/27 10.52.16.33/27 10.52.21.169/29 10.52.21.185/29 10.52.19.45/30 10.52.18.29/27 10.52.18.60/27 10.52.18.94/27 10.52.18.125/27 10.52.18.254/26 10.52.18.129/27 10.52.19.113/29 10.52.17.2/27 10.52.17.34/27 10.52.17.66/27 10.52.17.129/27 10.52.21.14/29 10.52.35.2/26 10.52.35.66/26 10.52.35.130/26 10.52.35.194/26 10.52.9.2/24 10.52.24.3/27 192.168.11.3/24 192.168.12.3/24 10.52.24.130/28 192.168.25.3/24 192.168.26.3/24 10.52.16.227/27 10.52.16.195/27 10.52.21.193/29 10.52.19.49/30 10.52.18.30/27 10.52.18.61/27 10.52.18.93/27 10.52.18.126/27 10.52.18.253/26 10.52.19.121/29 10.52.17.97/27 10.52.21.46/29 10.52.35.3 10.52.35.67 10.52.35.131 10.52.35.195 10.52.9.3 10.52.24.1 192.168.11.1 192.168.12.1 10.52.24.131 192.168.25.1 192.168.26.1 10.52.16.225 10.52.16.193 10 vlan 150 11 vlan 160 12 vlan 170 13 vlan 199 14 vlan 200 15 vlan 300 16 vlan 400 17 vlan 402 18 19 20 21 vlan 405 vlan 406 vlan 450 vlan 451 22 vlan 462 23 24 25 26 27 28 29 30 31 32 33 34 35 36 vlan 463 vlan 510 vlan 520 vlan 530 vlan 540 vlan 550 vlan 560 vlan 580 vlan 581 vlan 610 vlan 620 vlan 630 vlan 640 vlan 650 10.52.18.1 10.52.18.33 10.52.18.65 10.52.18.97 10.52.18.193 10.52.17.1 10.52.17.33 10.52.17.65 dongruan-powerrvm dongruan-powerrvm dongruan-powerrvm dongruan-powerrvm dongruan-powerrvm-guanli TO P570 TO NEW P570 Zijinjiankong ZiJinJianKong_temp DHCfs2_int DHC_FS2_MGT CBank_1_g0 SG-1_to_5500SI_G2 DaoPian_CA&AD DaoPian_Mail_1 DaoPian_Web_1 DaoPian_XSM_1 DaoPianMgt_1 GZFWQ to-s7502e-1 OCS FangBingDu seccenterzhuji GSYC_CORE_SW_7506E_1--Gi3/1 GSYC_CORE_SW_7506E_2--Gi3/1 down 37 vlan 803 38 vlan 804 39 vlan 813 40 vlan 814 41 vlan 815 42 vlan 816 10.52.21.70/29 10.52.21.129/29 10.52.21.78/29 10.52.21.137/29 43 vlan 900 10.52.21.97/29 10.52.21.102/29 GSYC_INFO_SW_7510E_1--Gi4/46 GSYC_INFO_SW_7510E_2--Gi3/22 GSYC_DATA_FW_1--Gi0/1 GSYC_DATA_FW_2--Gi0/1 GSYC_DATA_SW_7510E_2--Gi3/23&Gi3/24 核心交换机网络IP统计如下:
序号 1 2 3 4 5 6 7 8 设备 VLAN lo 0 vlan 2 vlan 5 vlan 22 vlan 100 vlan 151 vlan 160 vlan 161 甘肃烟草网络设备接口信息 CORE_SW_S7506_1 CORE_SW_S7506_2 IP及掩码 IP及掩码 描述 10.52.210.155/32 10.52.210.156/32 10.52.23.65/28 neteye-7606 10.52.23.194/30 10.52.23.81/28 neteye-2 10.52.40.2/30 10.52.1.249/30 5500A 10.52.23.5/30 fw-1-C3850 10.52.23.9/30 neteye-3825-2 GSYC_INFO_SW_7506E_1--Gi3/010.52.21.1/29 /45 GSYC_INFO_SW_7510E_2--Gi3/0 10.52.21.33/29 /45 GSYC_DATA_SW_7506E_1--Gi3/00.52.21.9/29 /45 GSYC_DATA_SW_7510E_2--Gi3/0 10.52.21.41/29 /45 10.52.21.49/29 NETSYS-1 10.52.21.49 NETSYS-2 10.52.21.25/29 10.52.21.145/29 10.52.21.161/29 10.52.21.57/29 10.52.21.153/29 10.52.21.105/29 10.52.21.169/29 GSYC_OA_SW_C6509_1--Gix/1 GSYC_OA_SW_C6509_2--Gix/1 GSYC_CORE_STREAM_1--Gi0/1 GSYC_CORE_IDS for Mgt Force View_1 备注 down 9 vlan 801 10 vlan 802 11 vlan 803 12 vlan 804 13 vlan 805 14 vlan 806 15 vlan 807 16 vlan 808 17 vlan 812 18 vlan 817 19 vlan 819 20 vlan 820 21 vlan 900 22 vlan 1000 10.52.21.8/29 10.52.21.177/29 10.52.21.86/29 GSYC_CORE_SW_7506E_2--Gi3/0/23&Gi3/0/2
本方案割接步骤如下:
1)由于此方案中防火墙板卡已经安装完毕,并且防火墙板卡与H3C交换机之间通过万兆背板带宽交换数据,无需准备任何线缆。
2)保存现有网络设备所有配置信息,测试业务是否正常,测试结果如下:
甘肃烟草网络割接前业务测试 序号 1 2 3 4 5 6 7 8 业务名称 IP地址 测试结果 备注 3)配置好H3C防火墙板卡,防火墙为路由模式,策略先调整为允许所有,保存配置,准备割接工作。防火墙板卡配置如下:
4)关闭服务器中心核心交换机-2(INFO_SW_7510E_2)的Gi3/0/35口,测试网络连通性是否正常,若正常则配置此交换机,配置如下: interface teng0/0/1
description to INFO_FW_7510E port link-type access
port default vlan 802 quit
interface vlan 802
description to INFO_FW_7510E undo ip address ip address 10.52.21.xx undo shutdown
5)将服务器中心核心交换机-2(INFO_SW_7510E_2)的Gi3/0/35口线缆改接至防火墙板卡上Gi0/0/1口,打开所有接口后测试网络连通性(在服务器中心核心交换机上执行合令ping -a 10.52.21.xx 10.52.21.33)。
6)在服务器中心核心交换机-2上执行命令display ospf lsdb 查看OSPF链路状态数据库,查看是否在vlan802接口上学到链路状态信息,在防火墙板卡(INFO_FW_7510E_2)上执行命令ping -a 10.52.21.38 10.52.21.33及display ospf lsdb等命令,查看网络运行是否正常。
7)关闭服务器中心核心交换机-1(INFO_SW_7510E_1)上的Gi3/0/35口,测试网络连通性,若正常则将Gi3/0/35口线缆改接至防火墙板卡上Gi0/0/1口,配置服务器中心核心交换机-1(INFO_SW_7510E_1)配置如下: interface teng0/0/1
description to INFO_FW_7510E port link-type access port default vlan 801 quit