Example network configuration with Access 3340 appliance

Artikel: 100049877
Zuletzt veröffentlicht: 2021-04-10
Bewertungen: 6 0
Produkt(e): Appliances

Example network configuration with Access 3340 appliance

Support for multiple subnets was introduced at patch 7.4.2.200 and improved at patch 7.4.2.301.  In the following scenarios patch 7.4.2.301 is assumed.

 

Scenario 1. Bonding the public interfaces.

Bonding can be configured during initial cluster configuration. In this example, bonding is configured after the cluster has been configured. The required bonding mode is 'active-backup'.

va742> network ip addr show

IP             Netmask/Prefix  Device     Node            Type     Status
--             --------------  ------     ----            ----     ------
192.168.10.125 255.255.255.0   eth4       va742-01        Physical
192.168.10.126 255.255.255.0   eth5       va742-01        Physical
192.168.10.127 255.255.255.0   eth4       va742-02        Physical
192.168.10.128 255.255.255.0   eth5       va742-02        Physical
192.168.10.130 255.255.255.0   eth4       va742-01        Virtual  ONLINE (Con IP)
192.168.10.140 255.255.255.0   eth4       va742-02        Virtual  ONLINE
192.168.10.141 255.255.255.0   eth4       va742-01        Virtual  ONLINE
192.168.10.142 255.255.255.0   eth5       va742-02        Virtual  ONLINE
192.168.10.143 255.255.255.0   eth5       va742-01        Virtual  ONLINE

va742> network bond create eth4,eth5 active-backup

va742> network ip addr show

IP             Netmask/Prefix  Device     Node            Type     Status
--             --------------  ------     ----            ----     ------
192.168.10.125 255.255.255.0   bond0      va742-01        Physical
192.168.10.127 255.255.255.0   bond0      va742-02        Physical
192.168.10.126 255.255.255.0              ( unused )      Physical
192.168.10.128 255.255.255.0              ( unused )      Physical
192.168.10.130 255.255.255.0   bond0      va742-01        Virtual  ONLINE (Con IP)
192.168.10.140 255.255.255.0   bond0      va742-01        Virtual  ONLINE
192.168.10.141 255.255.255.0   bond0      va742-01        Virtual  ONLINE
192.168.10.142 255.255.255.0   bond0      va742-02        Virtual  ONLINE
192.168.10.143 255.255.255.0   bond0      va742-02        Virtual  ONLINE

Tidy up the configuration by removing the unused physical IP addresses and the unwanted virtual IP addresses.

va742> network ip addr del 192.168.10.142
va742> network ip addr del 192.168.10.143
va742> network ip addr del 192.168.10.128
va742> network ip addr del 192.168.10.126
va742> network ip addr show

IP             Netmask/Prefix  Device     Node            Type     Status
--             --------------  ------     ----            ----     ------
192.168.10.125 255.255.255.0   bond0      va742-01        Physical
192.168.10.127 255.255.255.0   bond0      va742-02        Physical
192.168.10.130 255.255.255.0   bond0      va742-01        Virtual  ONLINE (Con IP)
192.168.10.140 255.255.255.0   bond0      va742-02        Virtual  ONLINE
192.168.10.141 255.255.255.0   bond0      va742-01        Virtual  ONLINE

 

 

Scenario 2. Configuring a VLAN.

A VLAN device can only be configured after the the initial cluster configuration. In this example a single subnet 192.168.10.0/24 has been configured and the requirement is to configure a VLAN device using physical device bond0 with a tag of 21. The VLAN uses a different subnet of 192.168.30.0/24

Initial network configuration:

va742> network ip addr show

IP             Netmask/Prefix  Device     Node            Type     Status
--             --------------  ------     ----            ----     ------
192.168.10.125 255.255.255.0   bond0      va742-01        Physical
192.168.10.127 255.255.255.0   bond0      va742-02        Physical
192.168.10.130 255.255.255.0   bond0      va742-01        Virtual  ONLINE (Con IP)
192.168.10.140 255.255.255.0   bond0      va742-02        Virtual  ONLINE 
192.168.10.141 255.255.255.0   bond0      va742-01        Virtual  ONLINE

We must first add 2 new IP addresses on the new subnet to be used with the VLAN device

va742> network ip addr add 192.168.30.126 255.255.255.0 physical
va742> network ip addr add 192.168.30.128 255.255.255.0 physical

va742> network ip addr show

IP             Netmask/Prefix  Device     Node            Type     Status
--             --------------  ------     ----            ----     ------
192.168.10.125 255.255.255.0   bond0      va742-01        Physical
192.168.10.127 255.255.255.0   bond0      va742-02        Physical
192.168.30.126 255.255.255.0              ( unused )      Physical
192.168.30.128 255.255.255.0              ( unused )      Physical
192.168.10.130 255.255.255.0   bond0      va742-01        Virtual  ONLINE (Con IP)
192.168.10.140 255.255.255.0   bond0      va742-02        Virtual  ONLINE 
192.168.10.141 255.255.255.0   bond0      va742-01        Virtual  ONLINE

Now  add the VLAN device. The new device is configured with the 2 unused IP addresses.

va742> network vlan add bond0 21
va742> network ip addr show

IP             Netmask/Prefix  Device     Node            Type     Status
--             --------------  ------     ----            ----     ------
192.168.10.125 255.255.255.0   bond0      va742-01        Physical
192.168.10.127 255.255.255.0   bond0      va742-02        Physical
192.168.30.126 255.255.255.0   bond0.21   va742-01        Physical
192.168.30.128 255.255.255.0   bond0.21   va742-02        Physical
192.168.10.130 255.255.255.0   bond0      va742-01        Virtual  ONLINE (Con IP)
192.168.10.140 255.255.255.0   bond0      va742-02        Virtual  ONLINE
192.168.10.141 255.255.255.0   bond0      va742-01        Virtual  ONLINE

Check the routing table for this subnet. The following output is snipped to show only the relevant routing table
va742> network ip route show

IPv4 routing table: 1
=====================
Destination   Gateway  Genmask        Flags  MSS  Window  irtt  Iface
============  =======  =============  =====  ===  ======  ====  ========
192.168.30.0  0.0.0.0  255.255.255.0  U      0    0       0     bond0.21

Add a default route for the new subnet

va742> network ip route add all 0.0.0.0 0.0.0.0 via 192.168.30.1 dev bond0.21 scope=local
va742> network ip route show

IPv4 routing table: 1
=====================
Destination   Gateway       Genmask        Flags  MSS  Window  irtt  Iface
============  ============  =============  =====  ===  ======  ====  ========
0.0.0.0       192.168.30.1  0.0.0.0        UG     0    0       0     bond0.21
192.168.30.0  0.0.0.0       255.255.255.0  U      0    0       0     bond0.21

 

Add 2 virtual IP addresses using the new subnet:

va742> network ip addr add 192.168.30.140 255.255.255.0 virtual bond0.21
va742> network ip addr add 192.168.30.141 255.255.255.0 virtual bond0.21
va742> network ip addr show

IP             Netmask/Prefix  Device     Node            Type     Status
--             --------------  ------     ----            ----     ------
192.168.10.125 255.255.255.0   bond0      va742-01        Physical
192.168.10.127 255.255.255.0   bond0      va742-02        Physical
192.168.30.126 255.255.255.0   bond0.21   va742-01        Physical
192.168.30.128 255.255.255.0   bond0.21   va742-02        Physical
192.168.10.130 255.255.255.0   bond0      va742-01        Virtual  ONLINE (Con IP)
192.168.10.140 255.255.255.0   bond0      va742-02        Virtual  ONLINE 
192.168.10.141 255.255.255.0   bond0      va742-01        Virtual  ONLINE
192.168.30.140 255.255.255.0   bond0.21   va742-01        Virtual  ONLINE
192.168.30.141 255.255.255.0   bond0.21   va742-02        Virtual  ONLINE

 

Scenario 3. Splitting existing configuration into management and data subnets.

This functionality was added with patch 7.4.2.100. See the patch release notes for more detailed examples.
Patch 7.4.2.100 readme

The initial network configuration:
   eth1, eth4 and eth5 are on the same subnet 192.168.10.0/24 default gateway 192.168.10.1
   Access cluster VIP is on eth4
   
It is required to split into separate management and data subnets:
   management subnet using eth1 interface. 192.168.10.0/24 default gateway 192.168.10.1
   Access cluster VIP should use eth1 interface
   data subnet using eth4 and eth5. 192.168.30.0/24 default gateway 192.168.30.1

Initial Configuration:
   
va742-01.Network> Show Status
eth1   : 1Gb/s   TP    PLUGGED|UP           192.168.10.120   - No IPv6 -  

va742-02.Network> Show Status
eth1   : 1Gb/s   TP    PLUGGED|UP           192.168.10.121   - No IPv6 - 
 
va742> network ip addr show

IP             Netmask/Prefix  Device     Node            Type     Status
--             --------------  ------     ----            ----     ------
192.168.10.125 255.255.255.0   eth4       va742-01        Physical
192.168.10.126 255.255.255.0   eth5       va742-01        Physical
192.168.10.127 255.255.255.0   eth4       va742-02        Physical
192.168.10.128 255.255.255.0   eth5       va742-02        Physical
192.168.10.130 255.255.255.0   eth4       va742-01        Virtual  ONLINE (Con IP)
192.168.10.140 255.255.255.0   eth4       va742-02        Virtual  ONLINE
192.168.10.141 255.255.255.0   eth4       va742-01        Virtual  ONLINE
192.168.10.142 255.255.255.0   eth5       va742-02        Virtual  ONLINE
192.168.10.143 255.255.255.0   eth5       va742-01        Virtual  ONLINE

Add eth1 interface to Access Cluster configuration

va742> network device add eth1

va742> network ip addr show

IP             Netmask/Prefix  Device     Node            Type     Status
--             --------------  ------     ----            ----     ------
192.168.10.121 255.255.255.0   eth1       va742-02        Physical
192.168.10.120 255.255.255.0   eth1       va742-01        Physical
192.168.10.125 255.255.255.0   eth4       va742-01        Physical
192.168.10.126 255.255.255.0   eth5       va742-01        Physical
192.168.10.127 255.255.255.0   eth4       va742-02        Physical
192.168.10.128 255.255.255.0   eth5       va742-02        Physical
192.168.10.130 255.255.255.0   eth4       va742-01        Virtual  ONLINE (Con IP)
192.168.10.140 255.255.255.0   eth4       va742-02        Virtual  ONLINE
192.168.10.141 255.255.255.0   eth4       va742-01        Virtual  ONLINE
192.168.10.142 255.255.255.0   eth5       va742-02        Virtual  ONLINE
192.168.10.143 255.255.255.0   eth5       va742-01        Virtual  ONLINE

Move Console VIP to eth1 interface

va742> network ip addr modify 192.168.10.130 192.168.10.130 255.255.255.0 eth1
va742> network ip addr show

IP             Netmask/Prefix  Device     Node            Type     Status
--             --------------  ------     ----            ----     ------
192.168.10.121 255.255.255.0   eth1       va742-02        Physical
192.168.10.120 255.255.255.0   eth1       va742-01        Physical
192.168.10.125 255.255.255.0   eth4       va742-01        Physical
192.168.10.126 255.255.255.0   eth5       va742-01        Physical
192.168.10.127 255.255.255.0   eth4       va742-02        Physical
192.168.10.128 255.255.255.0   eth5       va742-02        Physical
192.168.10.130 255.255.255.0   eth1       va742-02        Virtual  ONLINE (Con IP)
192.168.10.140 255.255.255.0   eth4       va742-02        Virtual  ONLINE
192.168.10.141 255.255.255.0   eth4       va742-01        Virtual  ONLINE
192.168.10.142 255.255.255.0   eth5       va742-02        Virtual  ONLINE
192.168.10.143 255.255.255.0   eth5       va742-01        Virtual  ONLINE

Move physical IP's for eth4 and eth5 interfaces to the new subnet


va742> network ip addr modify 192.168.10.125 192.168.30.125 255.255.255.0
va742> network ip addr modify 192.168.10.126 192.168.30.126 255.255.255.0
va742> network ip addr modify 192.168.10.127 192.168.30.127 255.255.255.0
va742> network ip addr modify 192.168.10.128 192.168.30.128 255.255.255.0

Move Virtual  IP's for eth4 and eth5 interfaces to the new subnet

va742> network ip addr modify 192.168.10.140 192.168.30.140 255.255.255.0
va742> network ip addr modify 192.168.10.141 192.168.30.141 255.255.255.0
va742> network ip addr modify 192.168.10.142 192.168.30.142 255.255.255.0
va742> network ip addr modify 192.168.10.143 192.168.30.143 255.255.255.0

va742> network ip addr show

IP             Netmask/Prefix  Device     Node            Type     Status
--             --------------  ------     ----            ----     ------
192.168.10.121 255.255.255.0   eth1       va742-02        Physical
192.168.10.120 255.255.255.0   eth1       va742-01        Physical
192.168.30.125 255.255.255.0   eth4       va742-01        Physical
192.168.30.126 255.255.255.0   eth5       va742-01        Physical
192.168.30.127 255.255.255.0   eth4       va742-02        Physical
192.168.30.128 255.255.255.0   eth5       va742-02        Physical
192.168.10.130 255.255.255.0   eth1       va742-02        Virtual  ONLINE (Con IP)
192.168.30.140 255.255.255.0   eth4       va742-01        Virtual  ONLINE
192.168.30.141 255.255.255.0   eth4       va742-01        Virtual  ONLINE
192.168.30.142 255.255.255.0   eth5       va742-01        Virtual  ONLINE
192.168.30.143 255.255.255.0   eth5       va742-01        Virtual  ONLINE


Check routing table. Note the output is snipped to only show the relevant routing tables

va742> network ip route show
IPv4 routing table: 5
=====================
Destination   Gateway  Genmask        Flags  MSS  Window  irtt  Iface
============  =======  =============  =====  ===  ======  ====  =====
192.168.30.0  0.0.0.0  255.255.255.0  U      0    0       0     eth5

IPv4 routing table: 4
=====================
Destination   Gateway  Genmask        Flags  MSS  Window  irtt  Iface
============  =======  =============  =====  ===  ======  ====  =====
192.168.30.0  0.0.0.0  255.255.255.0  U      0    0       0     eth4

Add the required default route for the new subnet

va742> network ip route add all 0.0.0.0 0.0.0.0 via 192.168.30.1 dev any scope=local
va742> network ip route show

IPv4 routing table: 5
=====================
Destination   Gateway       Genmask        Flags  MSS  Window  irtt  Iface
============  ============  =============  =====  ===  ======  ====  =====
0.0.0.0       192.168.30.1  0.0.0.0        UG     0    0       0     eth5
192.168.30.0  0.0.0.0       255.255.255.0  U      0    0       0     eth5

IPv4 routing table: 4
=====================
Destination   Gateway       Genmask        Flags  MSS  Window  irtt  Iface
============  ============  =============  =====  ===  ======  ====  =====
0.0.0.0       192.168.30.1  0.0.0.0        UG     0    0       0     eth4
192.168.30.0  0.0.0.0       255.255.255.0  U      0    0       0     eth4

 

Scenario 4. Configuring multiple subnets for public interfaces.

This functionality was added with patch 7.4.2.200. See the patch release notes for more detailed examples.
Patch 7.4.2.200 readme

The initial network configuration:
   eth4 and eth5 are on the same data subnet 192.168.30.0/24 default gateway 192.168.30.1
   eth1 is on a separate management subnet 192.168.10.0/24 default gateway 192.168.10.1
   Access console VIP uses eth1 interface and is on the management subnet.

It is required to split the data subnet into two. The original subnet will be used on the eth4 interface whilst a new subnet will use eth5 interface. The new subnet will be 192.168.20.0/24 default gateway 192.168.20.1

Initial Configuration:

va742> network ip addr show

IP             Netmask/Prefix  Device     Node            Type     Status
--             --------------  ------     ----            ----     ------
192.168.10.121 255.255.255.0   eth1       va742-02        Physical
192.168.10.120 255.255.255.0   eth1       va742-01        Physical
192.168.30.125 255.255.255.0   eth4       va742-01        Physical
192.168.30.126 255.255.255.0   eth5       va742-01        Physical
192.168.30.127 255.255.255.0   eth4       va742-02        Physical
192.168.30.128 255.255.255.0   eth5       va742-02        Physical
192.168.10.130 255.255.255.0   eth1       va742-02        Virtual  ONLINE (Con IP)
192.168.30.140 255.255.255.0   eth4       va742-01        Virtual  ONLINE
192.168.30.141 255.255.255.0   eth4       va742-01        Virtual  ONLINE
192.168.30.142 255.255.255.0   eth5       va742-01        Virtual  ONLINE
192.168.30.143 255.255.255.0   eth5       va742-01        Virtual  ONLINE

Move the required physical IP's to the new subnet

va742> network ip addr modify 192.168.30.126 192.168.20.126 255.255.255.0
va742> network ip addr modify 192.168.30.128 192.168.20.128 255.255.255.0

Move the required virtual IP's to the new subnet

va742> network ip addr modify 192.168.30.142 192.168.20.142 255.255.255.0
va742> network ip addr modify 192.168.30.143 192.168.20.143 255.255.255.0

Check routing table. Note the output is snipped to only show the relevant routing tables

va742> network ip route show

IPv4 routing table: 1
=====================
Destination   Gateway  Genmask        Flags  MSS  Window  irtt  Iface
============  =======  =============  =====  ===  ======  ====  =====
192.168.20.0  0.0.0.0  255.255.255.0  U      0    0       0     eth5

Add the required default route for the new subnet

va742> network ip route add all 0.0.0.0 0.0.0.0 via 192.168.20.1 dev eth5 scope=local
va742> network ip route show

IPv4 routing table: 1
=====================
Destination   Gateway       Genmask        Flags  MSS  Window  irtt  Iface
============  ============  =============  =====  ===  ======  ====  =====
0.0.0.0       192.168.20.1  0.0.0.0        UG     0    0       0     eth5
192.168.20.0  0.0.0.0       255.255.255.0  U      0    0       0     eth5

 

 

War dieser Inhalt hilfreich?