Spanning Tree to samo zło, czyli Protekcja Ringu w Ethernecie na podstawie wdrożenia w sieci Leon

Spanning Tree to samo zło, czyli Protekcja Ringu w Ethernecie na podstawie wdrożenia w sieci Leon coś o mnie dlaczego ten temat?

Co jest złego w Spanning Tree? (subiektywnie) Długie czasy konwergencji Ograniczenia wymiarowania Wielość rozszerzeń Wymaga precyzyjnej konfiguracji, błędy mogą prowadzić do poważnych problemów Jest też możliwość robienia pełnej siatki połączeń, co w mojej opinii jest bardziej problematyczne niż pozytywne

Ethernet Automatic Protection Switching EAPS Czas przełączenia ~50ms Operujemy na strukturze pierścienia Domena EAPS 1 vlan kontrolny (control vlan) Wiele vlanów chronionych (protected vlan) Węzły w trybie transit oraz w jeden master Na węźle master - y primary oraz secondary

Ethernet Automatic Protection Switching EAPS Wiele pierścieni logicznych w ramach jednego pierścienia fizycznego Możliwość współdzielenia kawałka pierścienia przez kilka pierścieni fizycznych

EAPS Domain - control VLAN - protected VLAN1 - protected VLAN2 - protected VLAN3... - protected VLANn

EAPS Domain Complete state Health Check messages Master Data Traffic Primary B Secondary Port blocked for protected VLANs traffic

FAILURE Link Down Alert Link Down Alert EAPS Domain Failed state Master Data Traffic Primary Secondary Master unblocks for protected VLANs traffic

LINK UNAVAILABLE Flush-FDB Message Flush-FDB Message EAPS Domain Failed state flush FDB Flush-FDB Message Flush-FDB Message Master Flush-FDB Message Data Traffic Primary Secondary

LINK RESTORED B B Health Check messages EAPS Domain PreForwarding state Health Check messages Master Data Traffic Primary Secondary Master checks if whole ring is restored

LINK RESTORED Flush-FDB Message Flush-FDB Message Flush-FDB Message EAPS Domain Forwarding state Flush-FDB Message Flush-FDB Message Master Flush-FDB Message Data Traffic Primary B Secondary Port blocked for protected VLANs traffic

more domains.. Master EAPS Domain #2 EAPS Domain #1 Master Master EAPS Domain #3

Szkielet sieci (mniej więcej) Gliwice Katowice Rybnik Pszów Jastrzębie Wodzisław

3 x RING Gliwice Katowice 1 3 Rybnik 2 Pszów Jastrzębie Wodzisław

Zastosowane urządzenia Summit x450 Summit x450 1 Summit x450 3 Summit x450 Summit x450 Summit x650 Summit x450 Summit x450 Summit x450 2 Summit x450 Summit 400 Summit x450 Jeszcze niedawno Alpine 3804

Trochę o switchu centralnym 2 x Summit x650 w stosie Każda noga ringu jest wpięta do innego slotu Obsługuje 3 x RING Primary Gliwice Master Slot 1 Seconndary Rybnik Slot 2 Katowice

Slot-1 SummitStack-GZE.1 # show eaps EAPS Enabled: Yes EAPS Fast-Convergence: Off EAPS Display Config Warnings: On EAPS Multicast Add Ring Ports: Off EAPS Multicast Send IGMP Query: On EAPS Multicast Temporary Flooding: Off EAPS Multicast Temporary Flooding Duration: 15 sec Number of EAPS instances: 3 # EAPS domain configuration : -------------------------------------------------------------------------------- Domain State Mo En Pri Sec Control-Vlan VID Count Prio -------------------------------------------------------------------------------- eaps-ktw-glw-domain Links-Up T Y 1:19 1:16 eaps-ktw-glw-ctlvlan (4051) 35 N eaps-ring-row-domain Links-Up T Y 1:17 2:7 eaps-ring-row-ctlvlan (4052) 428 N eaps-ring-nowiny-domain Links-Up T Y 1:15 2:17 eaps-ring-nowiny-ctlvlan (4053) 112 N -------------------------------------------------------------------------------- Slot-1 SummitStack-GZE.2 #

Slot-1 SummitStack-GZE.2 # show eaps "eaps-ktw-glw-domain" Name: eaps-ktw-glw-domain Priority: Normal State: Links-Up Running: Yes Enabled: Yes Mode: Primary : 1:19 Port status: Up Tag status: Tagged Secondary : 1:16 Port status: Up Tag status: Tagged Hello timer interval: 1 sec 0 millisec Fail timer interval: 3 sec 0 millisec Preforwarding Timer interval: 15 sec Last update: From Master Id 02:04:96:20:b6:03, at Sun Mar 4 22:50:07 2012 EAPS Domain has following Controller Vlan: Vlan Name VID eaps-ktw-glw-ctlvlan 4051 EAPS Domain has following Protected Vlan(s): Vlan Name VID kix 992 wix 103 plix 102 ep-kix 2200 Default 1

Slot-1 SummitX450-GLW-CK.2 # show eaps "eaps-ktw-glw-domain" Name: eaps-ktw-glw-domain State: Complete Running: Yes Enabled: Yes Mode: Master Primary : 1:26 Port status: Up Tag status: Tagged Secondary : 1:11 Port status: Blocked Tag status: Tagged Hello Egress Port: Primary Hello timer interval: 1 sec 0 millisec Fail timer interval: 3 sec 0 millisec Fail Timer expiry action: Send alert Last update: From Master Id 02:04:96:20:b6:03, at Sun Mar 4 22:48:22 2012 EAPS Domain has following Controller Vlan: Vlan Name VID eaps-ktw-glw-ctlvlan 4051 EAPS Domain has following Protected Vlan(s): Vlan Name VID kix 992 wix 103 plix 102 ep-kix 2200 Default 1

SummitX450-Katowice-PSE.2 # show eaps eaps-ktw-glw-domain Name: eaps-ktw-glw-domain State: Links-Up Running: Yes Enabled: Yes Mode: Primary : 21 Port status: Up Tag status: Tagged Secondary : 23 Port status: Up Tag status: Tagged Hello timer interval: 1 sec 0 millisec Fail timer interval: 3 sec 0 millisec Preforwarding Timer interval: 15 sec Last update: From Master Id 02:04:96:20:b6:03, at Sun Mar 4 22:48:14 2012 EAPS Domain has following Controller Vlan: Vlan Name VID eaps-ktw-glw-ctlvlan 4051 EAPS Domain has following Protected Vlan(s): Vlan Name VID kix 992 wix 103 plix 102 ep-kix 2200 Default 1

2 domeny w ramach jednego RINGu B Secondary Master Primary EAPS Doman 1 - green EAPS Domain 2 - blue Data Traffic Data Traffic Primary Master B Secondary

Common link Controller EAPS Domain 1 Master EAPS Domain 2 Common Link Master Primary Secondary Partner Secondary Primary

ELSM Extreme Link State Monitoring Link UP?? Link UP

ELSM Extreme Link State Monitoring Switch A Control Plane Switch B Control Plane Forwarding Plane Control & Data Forwarding Plane

ELSM Extreme Link State Monitoring Switch A Control Plane Switch B Control Plane Switch B Control Plane Forwarding Plane Forwarding Plane Forwarding Plane Control & Data Control & Data Switch B nadal przerzuca pakiety!

ELSM Extreme Link State Monitoring Switch A Control Plane Switch B Control Plane Switch B Control Plane ELSM HELLO ELSM HELLO Forwarding Plane Forwarding Plane Forwarding Plane Control & Data Control & Data

ELSM Extreme Link State Monitoring Switch A Control Plane Switch B Control Plane Switch B Control Plane ELSM HELLO ELSM HELLO Forwarding Plane Forwarding Plane Forwarding Plane Control & Data Control & Data PORT DOWN! PORT DOWN!

ELSM Extreme Link State Monitoring Slot-1 SummitStack-GZE.4 # show elsm s all ELSM Info Port 1:15 Link State : Active ELSM Info Port 1:16 Link State : Active ELSM Link State : Up ELSM Link State : Up ELSM State : Up ELSM State : Up Hello Transmit State : HelloRx(+) Hello Transmit State : HelloRx(+) Hello Time : 1 sec Hello Time : 1 sec Hold Threshold : 2 Hold Threshold : 2 UpTimer Threshold : 6 UpTimer Threshold : 6 Auto Restart : Enabled Auto Restart : Enabled Down Timeout : 4.0 sec Down Timeout : 4.0 sec Up Timeout : 6.0 sec Up Timeout : 6.0 sec Rx Hello+ : 14392765 Rx Hello+ : 3800428 Rx Hello- : 3 Rx Hello- : 0 Tx Hello+ : 14393153 Tx Hello+ : 3800497 Tx Hello- : 47 Tx Hello- : 1 ELSM Up/Down Count : UP: 14 DOWN: 14 ELSM Up/Down Count : UP: 0 DOWN: 0

W przypadku pytań: Marcin Kuczera E-mail: marcin.kuczera@leon.pl