Xbeam

unix su (进入Xbeam unix配置)

rsh extfw_1/intfw_1 (进入FW模块)

show run -flat

tcpdump -i exvt299 vlan and host 10.10.10.1
tcpdump -i exvt299 vlan and net 10.10.10.0

xbeam

VAP是虚拟程序进程实体,extfw_1就是一个虚拟程序实体。针对各实体中的接口,可以进一步定义Circuits,将他们归类管理。

configure开头的语句用于配置。

举例:

Configure VAP Group

configure vap-group intfw xslinux_v5            #Create a VAP group for the application and configure it to use the xslinux_v5_64 VAP OS.
configure vap-group intfw xslinux_v5 vap-count 2            #Set the VAP count for redundancy and additional capacity
configure vap-group intfw xslinux_v5 max-load-count 2      #Set the max load count to the number of active VAP members in the VAP group
configure vap-group intfw xslinux_v5 ap-list ap5 ap6 ap8    #Configure the APM list for the VAP group. All VAP members must run on the same model of APM. Use show chassis from the CLI to verify the APM models installed in your chassis, if necessary.

configure vap-group intfw xslinux_v5 load-balance-vap-list 1 2 3 4 5 6 7 8 9 10

configure vap-group intfw xslinux_v5 no rp-filter     #Disable RP filtering
configure vap-group intfw xslinux_v5 ip-flow-rule intfw_lb     #Configure a default IP flow rule for the VAP group
configure vap-group intfw xslinux_v5 ip-flow-rule intfw_lb action load-balance     #Set the IP flow rule action to load-balance traffic to all available VAP members
configure vap-group intfw xslinux_v5 ip-flow-rule intfw_lb activate

configure vap-group v6fw xslinux_v5_64
configure vap-group v6fw xslinux_v5_64 max-load-count 1
configure vap-group v6fw xslinux_v5_64 ap-list ap7 ap8
configure vap-group v6fw xslinux_v5_64 load-balance-vap-list 1 2 3 4 5 6 7 8 9 10
configure vap-group v6fw xslinux_v5_64 no rp-filter
configure vap-group v6fw xslinux_v5_64 enable-ipv6     #enable IPv6 support for the VAP group
configure vap-group v6fw xslinux_v5_64 ip-flow-rule v6fw_lb
configure vap-group v6fw xslinux_v5_64 ip-flow-rule v6fw_lb action load-balance
configure vap-group v6fw xslinux_v5_64 ip-flow-rule v6fw_lb activate

configure vap-group v6fw xslinux_v5_64 non-ip-flow-rule ipv6_rule
configure vap-group v6fw xslinux_v5_64 non-ip-flow-rule ipv6_rule encapsulation ethernet type 34525
configure vap-group v6fw xslinux_v5_64 non-ip-flow-rule ipv6_rule action pass-to-master
configure vap-group v6fw xslinux_v5_64 non-ip-flow-rule ipv6_rule activate

xbeam-vap

Configure Circuit

configure circuit extfw_vlan_213 circuit-id 1025 domain 2
configure circuit extfw_vlan_213 circuit-id 1025 domain 2 device-name mgmt213     #Assign a device name to circuit. The device name should be the same as, or based on, the circuit name. 类似description

configure circuit extfw_vlan_213 circuit-id 1025 domain 2 vap-group intfw   #Assign the VAP group to the management circuit
configure circuit extfw_vlan_213 circuit-id 1025 domain 2 vap-group intfw default-egress-vlan-tag 213    #Assign a tag (egress) to the VLAN circuit, 给circuit加vlan tag.
configure circuit extfw_vlan_213 circuit-id 1025 domain 2 vap-group intfw ip 10.10.1.81/24 10.10.1.255 increment-per-vap 10.10.1.83

xbeam3

configure circuit extfw_vlan_213 circuit-id 1025 domain 2 vap-group v6fw
configure circuit extfw_vlan_213 circuit-id 1025 domain 2 vap-group v6fw default-egress-vlan-tag 213
configure circuit extfw_vlan_213 circuit-id 1025 domain 2 vap-group v6fw ip 10.10.1.61/24 10.10.1.255

configure circuit v6fw_vlan_66 circuit-id 1045
configure circuit v6fw_vlan_66 circuit-id 1045 device-name v6v66
configure circuit v6fw_vlan_66 circuit-id 1045 vap-group v6fw
configure circuit v6fw_vlan_66 circuit-id 1045 vap-group v6fw default-egress-vlan-tag 66
configure circuit v6fw_vlan_66 circuit-id 1045 vap-group v6fw ip 172.17.0.1/27 172.17.0.31
configure circuit v6fw_vlan_66 circuit-id 1045 vap-group v6fw ip 172.17.0.1/27 172.17.0.31 alias 2001:4958:5:f001::1/64    #Assign IPv6 address
configure interface ethernet 1/5     #Assign the circuit to an interface
configure interface ethernet 1/5 logical ext_mgmt ingress-vlan-tag 213 213     #Add a logical with the ingress tag, logical name: ext_mgmt, tag 213, 给interface加vlan tag.
configure interface ethernet 1/5 logical ext_mgmt ingress-vlan-tag 213 213 circuit extfw_vlan_213     #Assign the circuit to this interface, 合并interface和circuit.
configure interface ethernet 1/9
configure interface ethernet 1/9 logical v6_vlan666 ingress-vlan-tag 666 666
configure interface ethernet 1/9 logical v6_vlan666 ingress-vlan-tag 666 666 circuit v6fw_vlan_666
configure interface ethernet 1/10
configure interface ethernet 1/10 logical v6_vlan66 ingress-vlan-tag 66 66
configure interface ethernet 1/10 logical v6_vlan66 ingress-vlan-tag 66 66 circuit v6fw_vlan_66

Configure Internal Sync Interface

configure circuit extfw_sync circuit-id 1026     #Create Sync circuit
configure circuit extfw_sync circuit-id 1026 device-name extsync
configure circuit extfw_sync circuit-id 1026 link-state-resistant    #Configure the circuit with the link-state-resistant parameter to ensure that the circuit stays up if the physical interface goes down.

configure circuit extfw_sync circuit-id 1026 vap-group extfw
configure circuit extfw_sync circuit-id 1026 vap-group extfw ip 2.2.2.1/24 2.2.2.255 increment-per-vap 2.2.2.3

configure interface-internal extfw_sync
configure interface-internal extfw_sync logical-all extfw_sync
configure interface-internal extfw_sync logical-all extfw_sync circuit extfw_sync   #assign the synchronization circuit to the interface.

Advertisements