No part of this manual may be reproduced or transmitted in any form or by any means without prior written
consent of New H3C Technologies Co., Ltd.
Trademarks
H3C, , H3CS, H3CIE, H3CNE, Aoly nk, , H
3
Care, , IRF, NetPilot, Netflow, SecEngine,
SecPath, SecCenter, SecBlade, Comware, ITCMM and HUASAN are trademarks of New H3C Technologies
Co., Ltd.
All other trademarks that may be mentioned in this manual are the property of their respective owners.
Notice
The information in this document is subject to change without notice. All contents in this document, including
statements, information, and recommendations, are believed to be accurate, but they are presented without
warranty of any kind, express or implied. H3C shall not be liable for technical or editorial errors or omissions
contained herein.
Preface
This command reference describes IRF configuration commands for setting up and maintaining an
IRF fabric, including:
• Commands for IRF port binding configuration.
• Commands for IRF member ID and priority configuration.
• Commands for detecting IRF splits and maintaining the IRF fabric.
This preface includes the following topics about the documentation:
• Audience.
• Conventions.
• Documentation feedback.
Audience
This documentation is intended for:
• Network planners.
• Field technical support and servicing engineers.
• Network administrators.
Conventions
The following information describes the conventions used in the documentation.
Command conventions
Convention Description
Boldface Bold
[ ] Square brackets enclose syntax choices (keywords or arguments) that are optional.
{ x | y | ... }
[ x | y | ... ]
{ x | y | ... } *
[ x | y | ... ] *
text represents commands and keywords that you enter literally as shown.
Italic text represents arguments that you replace with actual values.
Braces enclose a set of required syntax choices separated by vertical bars, from which
you select one.
Square brackets enclose a set of optional syntax choices separated by vertical bars,
from which you select one or none.
Asterisk marked braces enclose a set of required syntax choices separated by vertical
bars, from which you select a minimum of one.
Asterisk marked square brackets enclose optional syntax choices separated by vertical
bars, from which you select one choice, multiple choices, or none.
&<1-n>
# A line that starts with a pound (#) sign is comments.
The argument or keyword and argument combination before the ampersand (&) sign
can be entered 1 to n times.
GUI conventions
Convention Description
Boldface
>
Symbols
Convention Description
WARNING!
Window names, button names, field names, and menu items are in Boldface. For
.
New User
window opens; click OK.
File
>
Create
>
example, the
Multi-level menus are separated by angle brackets. For example,
Folder
An alert that calls attention to important information that if not understood or followed
can result in personal injury.
CAUTION:
IMPORTANT:
NOTE:
TIP:
Network topology icons
Convention Description
An alert that calls attention to important information that if not understood or followed
can result in data loss, data corruption, or damage to hardware or software.
An alert that calls attention to essential information.
An alert that contains additional or supplementary information.
An alert that provides helpful information.
Represents a generic network device, such as a router, switch, or firewall.
Represents a routing-capable device, such as a router or Layer 3 switch.
Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that
supports Layer 2 forwarding and other Layer 2 features.
Represents an access controller, a unified wired-WLAN module, or the access
controller engine on a unified wired-WLAN switch.
Represents an access point.
T
T
T
T
Represents a wireless terminator unit.
Represents a wireless terminator.
Represents a mesh access point.
Represents omnidirectional signals.
Represents directional signals.
Represents a security product, such as a firewall, UTM, multiservice security
gateway, or load balancing device.
Convention Description
Represents a security module, such as a firewall, load balancing, NetStream, SSL
VPN, IPS, or ACG module.
Examples provided in this document
Examples in this document might use devices that differ from your device in hardware model,
configuration, or software version. It is normal that the port numbers, sample output, screenshots,
and other information in the examples differ from what you have on your device.
Documentation feedback
You can e-mail your comments about product documentation to info@h3c.com.
We appreciate your comments.
* indicates the device is the master.
+ indicates the device through which the user logs in.
The Bridge MAC of the IRF is: 00e0-fc00-1000
Auto upgrade : yes
Mac persistent : always
Domain ID : 30
Table 1 Command output
Field Description
IRF member ID:
MemberID
Role
Priority IRF member priority.
CPU-MAC MAC address of the CPU in the device.
• ID of the master is prefixed with an asterisk (*) sign.
• ID of the device where you are logged in is prefixed with a plus (+) sign.
Role of the member device in the IRF fabric:
• Standby—Subordinate device.
• Master—Master device.
• Loading—The device is loading software images.
1
Field Description
Description you have configured for the member device.
•If no description is configured, this field displays a dashed line (-----).
Description
•If the description exceeds the maximum number of characters that can be
displayed, an ellipsis (…) is displayed in place of the exceeding text. To
display the complete description, use the display
current-configuration
Status of the software auto-update feature:
Auto upgrade
MAC persistent
• yes—Enabled.
• no—Disabled.
IRF bridge MAC persistence setting:
•6 min—Bridge MAC address of the IRF fabric remains unchanged for 6
minutes after the address owner leaves.
•always—Bridge MAC address of the IRF fabric does not change after the
address owner leaves.
•no—Bridge MAC address of the current master replaces the original bridge
MAC address as soon as the owner of the original address leaves.
command.
Domain ID
Domain ID of the IRF fabric. The domain ID you assign to an IRF fabric must
uniquely identify the fabric in a multi-IRF fabric network.
Related commands
display irf configuration
display irf topology
display irf configuration
Use display irf configuration to display basic IRF settings for each member device.
MemberID Current member ID of the device.
NewID Member ID assigned to the device. This member ID takes effect at reboot.
IRF-Port1
IRF-Port2
Related commands
display irf
display irf topology
display irf link
Use display irf link to display IRF link information.
Syntax
display irf link
Views
Any view
Predefined user roles
network-admin
Physical interfaces bound to IRF-port 1.
This field displays
Physical interfaces bound to IRF-port 2.
This field displays
disable
disable
if no physical interfaces are bound to the IRF port.
if no physical interfaces are bound to the IRF port.
network
Examples
# Display IRF link information.
<Sysname> display irf link
Member 1
IRF Port Interface Status
1 disable - 2 Ten-GigabitEthernet1/0/1 UP
Ten-GigabitEthernet1/0/2 ADM
Ten-GigabitEthernet1/0/3 DOWN
Member 2
IRF Port Interface Status
1 Ten-GigabitEthernet2/0/1 UP
Ten-GigabitEthernet2/0/2 DOWN
Ten-GigabitEthernet2/0/3 ADM
2 disable --
Table 3 Command output
-operator
Field Description
Member IDIRF member ID.
3
Field Description
IRF port number:
IRF Port
• 1—IRF-port 1.
• 2—IRF-port 2.
Interface
Status
display irf topology
Use display irf topology to display IRF fabric topology information.
Syntax
display irf topology
Views
Any view
Predefined user roles
network-admin
Physical interfaces bound to the IRF port. This field displays
physical interfaces have been bound to the IRF port.
Link state of the IRF physical interface:
• UP—The link is up.
• DOWN—The link is down.
• ADM—The interface has been manually shu t down by using the
disable
if no
shutdown command.
•ABSENT—Expansion interface card that hosts the interface is not
present.
network-operator
Examples
# Display the IRF fabric topology.
<Sysname> display irf topology
Topology Info
------------------------------------------------------------------------ IRF-Port1 IRF-Port2
MemberID Link neighbor Link neighbor Belong To
1 DOWN --- UP 2 000f-cbb8-1a82
2 UP 1 DIS --- 000f-cbb8-1a82
Table 4 Command output
Field Description
IRF-Port1 Information about IRF-port 1, including its link state and neighbor.
IRF-Port2 Information about IRF-port 2, including its link state and neighbor.
MemberID IRF member ID.
4
Field Description
Link state of the IRF port:
• UP—The IRF link is up.
• DOWN—The IRF link is down because the port has no physical link or
has not been activated by the
Link
active
• DIS—No physical interfaces have been bound to the IRF port.
• TIMEOUT—IRF hello interval has timed out.
• ISOLATE—The device is isolated from the IRF fabric. This issue might
be caused by the following reasons:
{ The IRF fabric does not support the device model.
{ The maximum number of member devices has exceeded the upper
command.
limit.
irf-port-configuration
neighbor
Belong To
Related commands
display irf
display irf configuration
display mad
Use display mad to display MAD status and settings.
Syntax
display mad [ verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
IRF member ID of the device connected to the IRF port.
This field displays three hyphens (---) if no device is connected to the port.
IRF fabric that has the device, represented by the CPU MAC address of the
master in the IRF fabric.
Parameters
verbose: Displays detailed MAD information. If you do not specify this keyword, the command only
displays whether a MAD mechanism is enabled or disabled.
<Sysname> display mad verbose
Multi-active recovery state: No
5
Excluded ports (user-configured):
Bridge-Aggregation4
Vlan-interface999
Excluded ports (system-configured):
IRF physical interfaces:
Ten-GigabitEthernet1/0/5
Ten-GigabitEthernet1/0/6
Ten-GigabitEthernet1/0/7
Ten-GigabitEthernet1/0/8
Ten-GigabitEthernet2/0/5
Ten-GigabitEthernet2/0/6
Ten-GigabitEthernet2/0/7
Ten-GigabitEthernet2/0/8
BFD MAD interfaces:
Ten-GigabitEthernet1/0/10
Ten-GigabitEthernet2/0/10
Vlan-interface3
Member interfaces of excluded interface Bridge-Aggregation 4:
Ten-GigabitEthernet1/0/11
Ten-GigabitEthernet2/0/11
MAD ARP disabled.
MAD ND disabled.
MAD LACP enabled interface: Bridge-Aggregation 1
MAD status : Normal
Member ID Port MAD status
1 Ten-GigabitEthernet1/0/1 Normal
2 Ten-GigabitEthernet2/0/1 Normal
MAD BFD enabled interface: VLAN-interface 3
MAD status : Normal
Member ID MAD IP address Neighbor MAD status
1 192.168.1.1/24 2 Normal
2 192.168.1.2/24 1 Normal
Table 5 Command output
Field Description
MAD ARP disabled.
MAD ND disabled.
MAD LACP enabled.
MAD BFD enabled.
Status of ARP MAD.
This field displays
MAD ARP enabled
Status of ND MAD.
This field displays
MAD ND enabled
Status of LACP MAD.
This field displays
MAD LACP disabled
Status of BFD MAD.
This field displays
MAD BFD disabled
6
if ARP MAD is enabled.
if ND MAD is enabled.
if LACP MAD is disabled.
if BFD MAD is disabled.
Field Description
Whether the IRF fabric is in Recovery state:
•Yes—The IRF fabric is in Recovery state. When MAD detects that an
IRF fabric has split into multiple IRF fabrics, it allows one fabric to
Multi-active recovery state
forward traffic. All the other IRF fabrics are set to the Recovery state. In
Recovery state, MAD shuts down all service interfaces in the fabric
except for the system- and user-excluded service interfaces.
•No—The IRF fabric is not in Recovery state. It is active and can forward
traffic.
Excluded ports
(user-configured)
Excluded ports
(system-configured)
MAD ARP enabled
interface:
MAD ND enabled
interface:
MAD LACP enabled
interface
Service interfaces manually configured to not shut down when the IRF fabric
transits to the Recovery state.
Service interfaces set to not shut down by the system when the IRF fabric
transits to the Recovery state. These service interfaces are not manually
configured.
• IRF physical interfaces.
• BFD MAD interfaces:
{VLAN interfaces used for BFD MAD and the Layer 2 Ethernet ports in
the VLANs.
{Layer 3 aggregate interfaces used for BFD MAD and their member
ports.
{Management Ethernet ports used for BFD MAD.
•Member interfaces of a Layer 2 aggregate interface if the aggregate
interface is excluded from the MAD shutdown action.
•Member interfaces of a Layer 3 aggregate interface if the aggregate
interface is excluded from the MAD shutdown action.
Interfaces on which ARP MAD is enabled.
This field displays
MAD ARP disabled
if ARP MAD is disabled.
Interfaces on which ND MAD is enabled.
This field displays
MAD ND disabled
if ND MAD is disabled.
Interface on which LACP MAD is enabled. This field is displayed for each
interface enabled with LACP MAD.
This field displays
MAD LACP disabled
if LACP MAD is disabled.
MAD status
Member ID
Port
MAD status
MAD BFD enabled
interface:
LACP MAD operating status:
• Normal—LACP MAD is operating correctly.
• Faulty—LACP MAD is not operating correctly . Verify the following items:
{ Verify that the ports on LACP MAD links are up.
{ Verify that the intermediate device supports extended LACPDUs.
{ Verify that all member devices have member ports used for LACP
MAD.
LACP MAD details:
• Member ID—IRF member ID of a device.
• Port—Member ports of the aggregate interface used for LACP MAD.
• MAD status—LACP MAD operating state on a member port. Options
include Normal and Faulty.
Layer 3 interface on which BFD MAD is enabled.
This field displays
MAD BFD disabled
if BFD MAD is disabled.
7
Field Description
BFD MAD operating status:
•Normal—BFD MAD is operating correctly.
MAD status
•Faulty—BFD MAD is not operating correctly. Check the BFD MAD link
connectivity.
•N/A—BFD MAD link status cannot be detected. If BFD MAD is enabled
on a management Ethernet port, it is normal that this field displays N/A.
Member ID
MAD IP address
Neighbor
MAD status
easy-irf
Use easy-irf to bulk-configure basic IRF settings for an IRF member device.
member member-id: Specifies the member ID of a member device. The value range for the
member ID is 1 to 10.
BFD MAD details:
• Member ID—IRF member ID of the local device.
• MAD IP address—MAD IP address of a member device.
• Neighbor—IRF member ID of the neighboring member device.
• MAD status—BFD MAD link state. Options include Normal and Faulty.
renumber new-member-id: Specifies a new member ID for the device. The value range for the
member ID is 1 to 10. The member device automatically reboots for the new member ID to take
effect. If you do not specify this option, the command does not change the member ID.
domain domain-id: Specifies an IRF domain ID in the range of 0 to 4294967295. Assign the
same domain ID to all devices you are adding to the same IRF fabric.
priority priority: Specifies an IRF priority in the range of 1 to 32. The greater the priority
value, the higher the priority. A member with higher priority is more likely to be the master.
irf-port1 interface-list1: Specifies interfaces bound to IRF-port 1. The
interface-list1 argument represents a space-separated list of up to four interface items. Each
interface item specifies one interface in the
irf-port2 interface-list2: Specifies interfaces bound to IRF-port 2. A physical interface
can be bound to only one IRF port. The
space-separated list of up to four interface items. Each interface item specifies one interface in the
interface-type interface-number form.
Usage guidelines
This command bulk-configures basic IRF settings for a member device, including the member ID,
domain ID, priority, and IRF port bindings.
The easy IRF feature provides the following configuration methods:
interface-type interface-number form.
interface-list2 argument represents a
8
• Interactive method—Enter the easy-irf command without parameters. The system will
guide you to set the parameters step by step.
• Non-interactive method—Enter the
easy-irf command with parameters.
As a best practice, use the interactive method if you are new to IRF.
If you execute this command multiple times, the following settings take effect:
• The most recent settings for the member ID, domain ID, and priority.
• IRF port bindings added through repeated executions of the command.
When you specify physical interfaces for an IRF port, you must follow the IRF port binding
requirements in Virtual Technologies Configuration Guide.
If you specify physical interfaces by using the interactive method, you must also follow these
restrictions and guidelines:
• Do not enter spaces between the interface type and interface number.
• Use a comma (,) to separate two physical interfaces. No spaces are allowed be t ween
interfaces.
To remove an IRF physical interface from an IRF port, you must use the
interface
Examples
# Bulk-configure basic IRF settings by using the non-interactive method. Change the member ID
from 2 to 3, set the domain ID to 10, configure the member priority as 10, and bind
Ten-GigabitEthernet 2/0/1 and Ten-GigabitEthernet 2/0/2 to IRF-port 1.
2/0/1 ten-gigabitethernet 2/0/2
*****************************************************************************
Configuration summary for member 2
IRF new member ID: 3
IRF domain ID : 10
IRF priority : 10
IRF-port 1 : Ten-GigabitEthernet2/0/1, Ten-GigabitEthernet2/0/2
IRF-port 2 : Disabled
*****************************************************************************
Are you sure to use these settings to set up IRF? [Y/N] y
Starting to configure IRF...
Configuration succeeded.
The device will reboot for the new member ID to take effect. Continue? [Y/N] y
undo port group
command in IRF port view.
# Bulk-configure basic IRF settings by using the interactive method. Change the member ID from 2
to 3, set the domain ID to 10, configure the member priority as 10, and bind Ten-GigabitEthernet
2/0/1 and Ten-GigabitEthernet 2/0/2 to IRF-port 1.
<Sysname> system-view
[Sysname] easy-irf
*****************************************************************************
Welcome to use easy IRF.
To skip the current step, enter a dot sign (.).
To return to the previous step, enter a minus sign (-).
To use the default value (enclosed in []) for each parameter, press Enter without
entering a value.
To quit the setup procedure, press CTRL+C.
9
*****************************************************************************
Select a member by its ID <2> [2]:2
Specify a new member ID <1~10> [1]: 3
Specify a domain ID <0~4294967295> [0]: 10
Specify a priority <1~32> [1]: 10
Specify IRF-port 1 bindings (a physical interface or a comma-separated physical
interface list)[Disabled]: ten-gigabitethernet2/0/1,ten-gigabitethernet2/0/2
Specify IRF-port 2 bindings (a physical interface or a comma-separated physical
interface list)[Disabled]:
*****************************************************************************
Configuration summary for member 2
IRF new member ID: 3
IRF domain ID : 10
IRF priority : 10
IRF-port 1 : Ten-GigabitEthernet2/0/1, Ten-GigabitEthernet2/0/2
IRF-port 2 : Disabled
*****************************************************************************
Are you sure to use these settings to set up IRF? [Y/N] y
Starting to configure IRF...
Configuration succeeded.
The device will reboot for the new member ID to take effect. Continue? [Y/N] y
irf auto-update enable
Use irf auto-update enable to enable the software auto-update feature.
Use
undo irf auto-update enable to disable the software auto-update feature.
This command automatically propagates the current software images of the master device in the IRF
fabric to any devices you are adding to the IRF fabric.
To ensure a successful software update, verify that the new device you are adding to the IRF fabric
has sufficient storage space for the new software images. If sufficient storage sp ace is not available,
the device automatically deletes the current software images. If the reclaimed space is still
insufficient, the device cannot complete the auto-update. You must reboot the device, and then
access the BootWare men u to delete files.
Use irf domain to assign a domain ID to the IRF fabric.
Use
undo irf domain to restore the default.
Syntax
irf domain domain-id
undo irf domain
Default
The IRF domain ID is 0.
Views
System view
Predefined user roles
network-admin
Parameters
domain-id: Specifies a domain ID for the IRF fabric. The value range is 0 to 4294967295.
Usage guidelines
One IRF fabric forms one IRF domain. IRF uses IRF domain IDs to uniquely identify IRF fabrics and
prevent IRF fabrics from interfering with one another.
If one IRF fabric uses another IRF fabric as the intermediate device for LACP MAD, ARP MAD, or ND
MAD, you must assign the two IRF fabrics different domain IDs for correct split detection. False
detection causes IRF split.
An IRF fabric has only one IRF domain ID. Y ou can change the IRF domain ID by using the following
commands:
IDs configured by using these commands overwrite each other.
Examples
# Set the IRF domain ID to 10.
<Sysname> system-view
[Sysname] irf domain 10
irf link-delay
Use irf link-delay to set a delay for the IRF ports to report a link down event.
Use undo irf link-delay to restore the default.
Syntax
irf link-delay interval
irf domain, mad enable, mad arp enable, or mad nd enable. The IRF domain
Default
undo irf link-delay
The delay time is 4 seconds.
11
Views
System view
Predefined user roles
network-admin
Parameters
interval: Sets the IRF link down report delay, in the range of 0 to 10000 milliseconds. If the
interval is set to 0, link down events are reported without any delay.
Usage guidelines
When you configure the IRF link down report delay, follow these restrictions and guidelines:
•Make sure the IRF link down report delay is shorter than the heart beat or hello timeout settings
of upper-layer protocols (for example, CFD and OSPF). If the report delay is longer than the
timeout setting of a protocol, unnecessary recalculations might occur.
•Set the delay to 0 seconds in the following situations:
{ The IRF fabric requires a fast master/subordinate or IRF link switchover.
{ The RRPP, BFD, or GR feature is used.
{ You want to shut down an IRF physical i nterface or reboot an IRF member device. (After you
complete the operation, reconfigure the delay depending on the network condition.)
Examples
# Set the IRF link down report delay to 300 milliseconds.
Use irf mac-address to specify a MAC address as the IRF bridge MAC address.
Use
undo irf mac-address to restore the default.
Syntax
irf mac-address mac-address
undo irf mac-address
Default
An IRF fabric uses the bridge MAC address of the master device as the IRF bridge MAC address.
Views
System view
Predefined user roles
network-admin
Parameters
mac-address: Specifies a MAC address in the format of H-H-H. The MAC address cannot be the
all-zero or all-F MAC address, or a multicast MAC address. You can omit the consecutive zeros at
the beginning of each segment. For example, you can enter f-e2-1 for 000f-00e2-0001.
Usage guidelines
CAUTION:
IRF bridge MAC address change causes transient traffic disruption .
12
When you replace an IRF fabric as a whole, you can configure the new IRF fabric with the bridge
MAC address of the existing IRF fabric before the replacement to minimize service interruption.
You must make sure the IRF bridge MAC address is unique on the switched LAN.
After you specify an IRF bridge MAC address, the IRF fabric always uses the specified address as
the IRF bridge MAC address.
If the IRF fabric splits after you configure the IRF bridge MAC address, both of the split IRF fabrics
use the configured bridge MAC address as the IRF bridge MAC addre ss.
When IRF fabrics merge, IRF ignores the IRF bridge MAC address and checks the bridge MAC
address of each member device in the IRF fabrics. IRF merge fails if any two member devices have
the same bridge MAC address.
After IRF fabrics merge, the merged IRF fabric uses the bridge MAC address of the merging IRF
fabric that won the master election as the IRF bridge MAC address.
Examples
# Configure the IRF fabric to use c4ca-d9e0-8c3c as the IRF bridge MAC address.
The IRF bridge MAC address remains unchanged for 6 minutes after the address owner leaves.
Views
System view
Predefined user roles
network-admin
Parameters
always: Enables the IRF bridge MAC address to be permanent. The IRF bridge MAC ad dress does
not change after the address owner leaves the fabric.
timer: Enables the IRF bridge MAC address to remain unchanged for 6 minutes after the address
owner leaves. If the owner rejoins the IRF fabric with the time limit, the IRF bridge MAC addre ss does
not change. If the owner does not rejoin the IRF fabric within the time limit, the IRF fabric uses the
bridge MAC address of the current master as the bridge MAC address.
Usage guidelines
If the undo form of this command is used, bridge MAC address of the current master replaces the
original IRF bridge MAC as soon as the original address owner leav es.
This command does not take effect if the IRF bridge MAC address is configured by using the
mac-address
irf
mac-address command.
13
If ARP MAD or ND MAD is used with the spanning tree feature, disable IRF bridg e MAC persistence
by using the
bridge MAC address by using the
If the IRF fabric uses a daisy-chain topology and has aggregate links with upstream or downstream
devices, do not execute the
command might result in transmission delay or packet loss after the address owner leaves or
reboots.
undo irf mac-address persistent command. In addition, do not specify an IRF
irf mac-address mac-address command.
undo irf mac-address persistent command. Use of this
If the IRF fabric has multichassis aggregate links, do not use the
persistent
By default, an IRF fabric uses the bridge MAC address of the master device as its bridge MAC
address.
On a switched LAN, the IRF bridge MAC address must be unique for correct traffic transmission.
When IRF fabrics merge, IRF ignores the IRF bridge MAC address and checks the bridge MAC
address of each member device in the IRF fabrics. IRF merge fails if any two member devices have
the same bridge MAC address.
command. Use of this command might cause traffic disruption.
Examples
# Enable the IRF bridge MAC address to persist forever.
Use irf member description to configure a description for an IRF member device.
Use
undo irf member description to restore the default.
Syntax
irf member member-id description text
undo irf mac-address
undo irf member member-id description
Default
No description is configured for an IRF member device.
Views
System view
Predefined user roles
network-admin
Parameters
member-id: Specifies the ID of an IRF member.
text: Specifies a description, a string of 1 to 127 characters.
Examples
# Configure the description as F1Num001 for IRF member 1.
<Sysname> system-view
[Sysname] irf member 1 description F1Num001
irf member priority
Use irf member priority to change the priority of an IRF member device.
14
Use undo irf member priority to restore the default.
Syntax
irf member member-id priority priority
undo irf member member-id priority
Default
The IRF member priority is 1.
Views
System view
Predefined user roles
network-admin
Parameters
member-id: Specifies an IRF member ID. The value range for IRF member IDs is 1 to 10.
priority: Sets priority in the range of 1 to 32. The greater the priority value, the higher the priority.
A member wit h highe r priority is more likely to be the master.
Usage guidelines
The new priority setting takes effect at the next master election, but it does not trigger a master
election.
Examples
# Set the priority of IRF member 2 to 32.
<Sysname> system-view
[Sysname] irf member 2 priority 32
irf member renumber
Use irf member renumber to change the member ID of an IRF member device.
Use
undo irf member renumber to restore the previous IRF member ID of the device.
Syntax
irf member member-id renumber new-member-id
undo irf member member-id renumber
Default
The IRF member ID is 1.
Views
System view
Predefined user roles
network-admin
Parameters
member-id: Specifies the ID of an IRF member. The value range for IRF member IDs is 1 to 10.
new-member-id: Assigns a new ID to the IRF member . The value range for IRF member IDs is 1 to
10.
15
Usage guidelines
CAUTION:
IRF member ID change can invalidate member ID-related settings, including interface and file path
settings, and cause data loss. Make sure you fully understand its impact on your live network.
To have the new ID take effect, you must reboot the IRF member. To cancel the member ID change
before you reboot the member device, use the
command, set the new member ID to be the same as the old member ID.
When adding a device into an IRF fabric, you must assign a unique IRF member ID to the device. If
its IRF member ID has been used in the IRF fabric, the device cannot join the IRF fabric.
Interchanging member IDs between IRF member devices might cause undesirable configuration
changes and data loss. For example, the IRF member IDs of Device A and Device B are 2 and 3,
respectively. After you interchange their member IDs, their port settings also interchange.
Examples
# Change the ID of an IRF member device from 1 to 2.
<Sysname> display irf
[Sysname] irf member 1 renumber 2
Renumbering the member ID may result in configuration change or loss. Continue?[Y/N]Y
# Before rebooting the device, cancel the change in the preceding example.
[Sysname] undo irf member 1 renumber
Renumbering the member ID may result in configuration change or loss. Continue?[Y/N]y
undo irf member renumber command. In the
If you reboot the device after executing the irf member 1 renumber 2 command, the device
member ID changes to 2 at system reboot. Using
the member ID to 1. You must use the
member ID.
irf-port
Use irf-port to enter IRF port view.
Use undo irf-port to remove all port bindings on an IRF port.
Use irf-port-configuration active to activate IRF ports.
Syntax
irf-port-configuration active
Views
System view
Predefined user roles
network-admin
Usage guidelines
After connecting the physical interfaces between two devices and binding them to the correct IRF
ports, you must use this command to activate the settings on the IRF ports. This command merges
the two devices into one IRF fabric.
The system activates the IRF port settings automatically in the following situations:
• The configuration file that the device starts with contains IRF port bindings.
• You are binding physical interfaces to an IRF port after an IRF fabric is formed.
Examples
To configure and activate IRF-port 1/2 when the port is in DIS state:
# Bind Ten-GigabitEthernet 1/0/1 to IRF-port 1/2.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] shutdown
[Sysname-Ten-GigabitEthernet1/0/1] quit
[Sysname] irf-port 1/2
[Sysname-irf-port1/2] port group interface Ten-GigabitEthernet 1/0/1
You must perform the following tasks for a successful IRF setup:
Save the configuration after completing IRF configuration.
Execute the "irf-port-configuration active" command to activate the IRF ports.
[Sysname-irf-port1/2] quit
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] undo shutdown
[Sysname-Ten-GigabitEthernet1/0/1] quit
# Save the configuration so the IRF port settings can take effect after the device reboots.
[Sysname] save
The current configuration will be written to the device. Are you sure? [Y/N]:y
Please input the file name(*.cfg)[flash:/startup.cfg]
17
(To leave the existing filename unchanged, press the enter key):
flash:/startup.cfg exists, overwrite? [Y/N]:y
Do not configure ARP MAD together with LACP MAD or BFD MAD, because they handle collisions
differently.
When you configure ARP MAD on a VLAN interface, follow these restrictions and guidelines:
Category Restrictions and guidelines
ARP MAD VLAN
ARP MAD and feature
configuration
• Do not enable ARP MAD on VLAN-interface 1.
• If you are using an intermediate device, perform the following tasks:
{On the IRF fabric and the intermediate device, create a VLAN for
ARP MAD.
{On the IRF fabric and the intermediate device, assign the ports of
ARP MAD links to the ARP MAD VLAN.
{On the IRF fabric, create a VLAN interface for the ARP MAD VLAN.
•As a best practice, do not use the ARP MAD VLAN for any other
purposes.
If an intermediate device is used, make sure the following requirements are
met:
•Run the spanning tree feature between the IRF fabric and the
intermediate device to ensure that there is only one ARP MAD link in
forwarding state. For more information about the spanning tree feature
and its configuration, see Layer 2—LAN Switching Configuration Guide.
•Enable the IRF fabric to change its bridge MAC address as soon as the
address owner leaves.
•If the intermediate device is also an IRF fabric, assign the two IRF fabrics
different domain IDs for correct split detection.
18
When you configure ARP MAD that uses management Ethernet ports, follow these restrictions and
guidelines:
When you use the mad arp enable command, the system prompts you to enter a domain ID. If you
do not want to change the current domain ID, press enter at the prompt.
An IRF fabric has only one IRF domain ID. Y ou can change the IRF domain ID by using the following
commands:
IDs configured by using these commands overwrite each other.
Examples
# Enable ARP MAD on VLAN-interface 3.
<Sysname> system-view
[Sysname] interface vlan-interface 3
[Sysname-Vlan-interface3] mad arp enable
You need to assign a domain ID (range: 0-4294967295)
[Current domain is: 0]: 1
The assigned domain ID is: 1
Category Restrictions and guidelines
Management Ethernet
ports for ARP MAD
ARP MAD VLAN
ARP MAD and feature
configuration
Connect a management Ethernet port on each member device to the
common Ethernet ports on the intermediate device.
On the intermediate device, create a VLAN for ARP MAD, and assign the
ports used for ARP MAD to the VLAN. On the IRF fabric, you do not need to
assign the management Ethernet ports to the VLAN.
•Enable the IRF fabric to change its bridge MAC address as soon as the
address owner leaves.
•If the intermediate device is also an IRF fabric, assign the two IRF fabrics
different domain IDs for correct split detection.
irf domain, mad enable, mad arp enable, or mad nd enable. The IRF domain
Do not configure BFD MAD together with ARP MAD or ND MAD, because they handle collisions
differently.
When you configure BFD MAD on a VLAN interface, follow these guidelines:
Category Restrictions and guidelines
BFD MAD VLAN
BFD MAD VLAN and
feature compatibility
MAD IP address
When you configure BFD MAD that uses management Ethernet ports, follow these restrictions and
guidelines:
• Do not enable BFD MAD on VLAN-interface 1.
• If you are using an intermediate device, perform the following tasks:
{On the IRF fabric and the intermediate device, create a VLAN for
BFD MAD.
{On the IRF fabric and the intermediate device, assign the ports of
BFD MAD links to the BFD MAD VLAN.
{On the IRF fabric, create a VLAN interface for the BFD MAD VLAN.
•Make sure the IRF fabrics on the network use different BFD MAD
VLANs.
•Make sure the BFD MAD VLAN contains only ports on the BFD MAD
links. Exclude a port from the BFD MAD VLAN if that port is not on a BFD
MAD link. If you have assigned that port to all VLANs by using the
trunk permit vlan all
trunk permit
command to exclude that port from the BFD MAD
command, use the undo port
port
VLAN.
Do not use the BFD MAD VLAN for any purposes other than configuring BFD
MAD.
•Use only the
mad bfd enable and mad ip address commands
on the BFD MAD-enabled VLAN interface. If you configure other
features, both BFD MAD and other features on the interface might run
incorrectly.
•Disable the spanning tree feature on any Layer 2 Ethernet ports in the
BFD MAD VLAN. The MAD feature is mutually exclusive with the
spanning tree feature.
•T o avoid network issues, only use the
mad ip address command to
configure IP addresses on the BFD MAD-enabled VLAN interface. Do
not configure an IP address by using the
ip address command or
configure a VRRP virtual address on the BFD MAD-enabled VLAN
interface.
•Make sure all the MAD IP addresses are on the same subnet.
Category Restrictions and guidelines
Management Ethernet
ports for BFD MAD
BFD MAD VLAN
MAD IP address
Connect a management Ethernet port on each member device to the
common Ethernet ports on the intermediate device.
•On the intermediate device, create a VLAN for BFD MAD, and assign the
ports used for BFD MAD to the VLAN. On the IRF fabric, you do not need
to assign the management Ethernet ports to the VLAN.
•Make sure the IRF fabrics on the network use different BFD MAD
VLANs.
•Make sure the BFD MAD VLAN on the intermediate device contains only
ports on the BFD MAD links.
• Use the
mad ip address command instead of the ip address
command to configure MAD IP addresses on the BFD MAD-enabled
management Ethernet ports.
•Make sure all the MAD IP addresses are on the same subnet.
20
When you configure BFD MAD on a Layer 3 aggregate interface, follow these restrictions and
guidelines:
Category Restrictions and guidelines
•Make sure the Layer 3 aggregate interface operates in static
aggregation mode.
BFD MAD-enabled Layer 3
aggregate interface
BFD MAD VLAN
•Make sure the member ports in the aggregation group do not exceed the
maximum number of Selected ports allowed for an aggregation group. If
the number of member ports exceeds the maximum number of Selected
ports, some member ports cannot become Selected. BFD MAD will be
unable to work correctly and its state will change to Faulty.
•On the intermediate device (if any), assign the ports on the BFD MAD
links to the same VLAN. Do not assign the ports to an aggregate
interface. If the ports are hybrid ports, make sure these ports are
untagged members of their PVIDs.
•If the intermediate device acts as a BFD MAD intermediate device for
multiple IRF fabrics, assign different BFD MAD VLANs to the IRF fabrics.
•Do not use the BFD MAD VLAN on the intermediate device for any
purposes other than BFD MAD.
•Make sure the BFD MAD VLAN on the intermediate device contains only
ports on the BFD MAD links. Exclude a port from the BFD MAD VLAN if
that port is not on a BFD MAD link. If you have assigned that port to all
VLANs by using the
use the
from the BFD MAD VLAN.
undo port trunk permit command to exclude that port
port trunk permit vlan all command,
BFD MAD-enabled Layer 3
aggregate interface and
feature compatibility
Use only the
the BFD MAD-enabled interface. If you configure other features, both BFD
MAD and other features on the interface might run incorrectly.
•T o avoid network issues, only use the
configure IP addresses on the BFD MAD-enabled interface. Do not
configure an IP address by using the
configure a VRRP virtual address on the BFD MAD-enabled interface.
•Make sure all the MAD IP addresses are on the same subnet.
mad bfd enable
mad ip address
and
mad ip address command to
ip address command or
commands on
Default
Views
undo mad enable
LACP MAD is disabled.
Aggregate interface view
21
Predefined user roles
network-admin
Usage guidelines
LACP MAD handles collisions differently than ARP MAD and ND MAD. To avoid conflicts, do not
enable LACP MAD together with ARP MAD and ND MAD on an IRF fabric.
LACP MAD requires an H3C device that supports extended LACPDUs to act as the intermediate
device. You must set up a dynamic link aggregation group that spans all IRF member devices
between the IRF fabric and the intermediate device. To enable dynamic link aggregation, configure
link-aggregation mode dynamic command on the aggregate interface.
the
If one IRF fabric uses another IRF fabric as the intermediate device for LACP MAD, you must assi gn
the two IRF fabrics different domain IDs for correct split detection. False detection ca uses IRF split.
When you use the
not want to change the current domain ID, press enter at the prompt.
An IRF fabric has only one IRF domain ID. Y ou can change the IRF domain ID by using the following
commands:
IDs configured by using these commands overwrite each other.
Examples
# Enable LACP MAD on Bridge-Aggregation 1, a Layer 2 dynamic agg regate interface.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] link-aggregation mode dynamic
[Sysname-Bridge-Aggregation1] mad enable
You need to assign a domain ID (range: 0-4294967295)
[Current domain is: 0]: 1
The assigned domain ID is: 1
MAD LACP only enable on dynamic aggregation interface.
# Enable LACP MAD on Route-Aggregation 1, a Layer 3 dynamic aggregate interface.
<Sysname> system-view
[Sysname] interface route-aggregation 1
[Sysname-Route-Aggregation1] link-aggregation mode dynamic
[Sysname-Route-Aggregation1] mad enable
You need to assign a domain ID (range: 0-4294967295)
[Current domain is: 0]: 1
The assigned domain ID is: 1
MAD LACP only enable on dynamic aggregation interface.
mad enable command, the system prompts yo u to ente r a domain I D. If you do
irf domain, mad enable, mad arp enable, or mad nd enable. The IRF domain
Related commands
irf domain
mad exclude interface
Use mad exclude interface to exclude an interface from being shut down when the IRF fabric
transits to the Recovery state upon detection of a multi-active collision.
Use
undo mad exclude interface to configure the IRF fabric to shut down an interface when
it transits to the Recovery state upon detection of a multi-active collision.
Except for the service interfaces automatically excluded by the system, all service interfaces are shut
down when the IRF fabric transits to the Recovery state. The system automatically excludes the
following service interfaces from being shut down:
• IRF physical interfaces.
• Interfaces used for BFD MAD.
• Member interfaces of an aggregate interface if the aggregate interface is excluded from being
shut down.
Views
System view
Predefined user roles
network-admin
Parameters
interface-type interface-number: Specifies a service interface by its type and number.
Usage guidelines
If an interface must be kept in up state for special purposes such as Telnet connection, exclude the
interface from the shutdown action. As a best practice to avoid incorrect traffic forwarding, do not
exclude any interfaces except the interfaces used for Telnet.
The interfaces that have been shut down by MAD come up when the member devices re boot to join
the recovered IRF fabric. If the active IRF fabric fails before the IRF link is recovered, use the
restore
brings up all interfaces that were shut down by MAD.
command on the inactive IRF fabric to recover the inactive IRF fabric. This command also
Examples
# Exclude Ten-GigabitEthernet 1/0/1 from being shut down when the MAD status transits to
Recovery.
ip-address: Specifies an IP address in dotted decimal notation.
mask: Specifies a subnet mask in decimal dotted notation.
mask-length: Specifies a subnet mask in length, in the range of 0 to 32.
member
member-id: Specifies the ID of an IRF member .
Usage guidelines
To use BFD MAD, configure a MAD IP address for each IRF member. Make sure all the MAD IP
addresses are on the same subnet.
Do not configure a MAD IP address by using the
address on the BFD MAD-enabled port or interface.
The master attempts to establish BFD sessions with other member devices by using its MAD IP
address as the source IP address.
•If the IRF fabric is integrated, only the MAD IP address of the master takes effe ct. The master
cannot establish a BFD session with any other member. If you execute the
session
•When the IRF fabric splits, the IP addresses of the masters in the partitioned IRF fabrics take
effect. The masters can establish a BFD session. If you execute the
command, the state of the BFD session between the two devices is Up.
Examples
# Assign a M A D IP address to IRF member 1 on VLAN-interface 3.
<Sysname> system-view
[Sysname] interface vlan-interface 3
[Sysname-Vlan-interface3] mad ip address 192.168.0.1 255.255.255.0 member 1
# Assign a M A D IP address to IRF member 2 on VLAN-interface 3.
[Sysname-Vlan-interface3] mad ip address 192.168.0.2 255.255.255.0 member 2
ip address command or configure a VRRP virtual
display bfd
command, the state of the BFD sessions is Down.
display bfd session
Related commands
mad bfd enable
mad nd enable
Use mad nd enable to enable ND MAD.
Use
undo mad nd enable to disable ND MAD.
Syntax
mad nd enable
undo mad nd enable
Default
ND MAD is disabled.
Views
VLAN interface view
24
Predefined user roles
network-admin
Usage guidelines
Do not configure ND MAD together with LACP MAD or BFD MAD, because they handle collisions
differently.
Do not configure ND MAD on VLAN-interface 1.
If one IRF fabric uses another IRF fabric as the intermediate device for ND MAD, you must assign
the two IRF fabrics different domain IDs for correct split detection. False detection ca uses IRF split.
When you use the
do not want to change the current domain ID, press enter at the prompt.
An IRF fabric has only one IRF domain ID. Y ou can change the IRF domain ID by using the following
commands:
IDs configured by using these commands overwrite each other.
Examples
# Enable ND MAD on VLAN-interface 3.
<Sysname> system-view
[Sysname] interface vlan-interface 3
[Sysname-Vlan-interface3] mad nd enable
You need to assign a domain ID (range: 0-4294967295)
[Current domain is: 0]: 1
The assigned domain ID is: 1
Related commands
irf domain
mad restore
Use mad restore to restore the normal MAD state of the IRF fabric in Recovery state.
Syntax
mad nd enable command, the system prompts you to enter a domain ID. If you
irf domain, mad enable, mad arp enable, or mad nd enable. The IRF domain
mad restore
Views
System view
Predefined user roles
network-admin
Usage guidelines
If the active IRF fabric has failed to work before the IRF split problem is fixed, use this command to
restore an IRF fabric in Recovery state. The recovered IRF fabric will take over the active IRF fabric
role.
Examples
# Restore the normal MAD state of the IRF fabric in Recovery state.
<Sysname> system-view
[Sysname] mad restore
This command will restore the device from multi-active conflict state. Continue? [Y/N]:Y
Restoring from multi-active conflict state, please wait...
25
port group interface
Use port group interface to bind a physical interface to an IRF port.
Use
undo port group interface to remove the binding of a physical interface to an IRF port.
Syntax
port group interface interface-type interface-number
undo port group interface interface-name
Default
No physical interfaces are bound to an IRF port.
Views
IRF port view
Predefined user roles
network-admin
Parameters
interface-type interface-number: Specifies a physical interface by its type and number.
interface-name: Specifies a physical interface in the interface-typeinterface-number
format. No space is allowed between the
arguments.
interface-type and interface-number
Usage guidelines
Execute this command multiple times to bind multiple physical interfaces to an IRF port. You can bind
a maximum of four physical interfaces to an IRF port.
Use the
from an IRF port. To bring up the physical interface after a binding or binding removal operation, use
the
The system does not dynamically remove IRF port bindings when IRF links are lost, for example,
because an interface card is removed. To remove IRF port binding s, you must use the undo port
shutdown command to shut down a physical interface before you bind it to or remove it
undo shutdown command.
group interface
For more information about IRF port binding requirements, see Virtual Technologies Configuration
Guide.
Examples
# Bind Ten-GigabitEthernet 1/0/1 to IRF-port 1/1 on IRF member 1.