
7

Cisco ASA以太通道技术
source link: https://blog.51cto.com/linweiwei/5343221
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.

交换机以太通道介绍
冗余接口只允许一主一备无法充分使用两个接口,而EtherChannel可以同时实现负载均衡和HA
EtherChannel醉云可以8个物理链路捆绑到一个逻辑链路中
端口必须具备相同的功能,duplex speed
EtherChannel醉云可以8个物理链路捆绑到一个逻辑链路中
端口必须具备相同的功能,duplex speed
ASA以太通道介绍
支持802.3ad和标准的LACP
最多支持8个主用和8个备用(LACP)
支持所有模式(transparent、routed、multi-context)
成员共享MAC、可以配置MAC,5505不支持EtherChannel
最多支持8个主用和8个备用(LACP)
支持所有模式(transparent、routed、multi-context)
成员共享MAC、可以配置MAC,5505不支持EtherChannel

交换机配置
#接口配置
interface range ethernet 0/0 -2
switchport mode access
switchport access vlan 1
channel-group 1 mode active #可选模式如下图
exit
interface range ethernet 0/0 -2
switchport mode access
switchport access vlan 1
channel-group 1 mode active #可选模式如下图
exit

#以太通道配置
interface port-channel
switchport mode access vlan 1
#vlan配置
int vlan 1
no shutdown
ip address 7.7.1.10 255.255.255.0
end
interface port-channel
switchport mode access vlan 1
#vlan配置
int vlan 1
no shutdown
ip address 7.7.1.10 255.255.255.0
end

总配置预览

防火墙配置
#接口加入以太通道
interface ethernet 0
channel-group 1 mode active #可选模式如下图
interface ethernet 0
channel-group 1 mode active #可选模式如下图

interface ethernet 1
channel-group 1 mode active
interface ethernet 2
channel-group 1 mode active
#以太通道接口统一配置
interface port-channel 1
no shutdown
nameif inside
security-level 100
ip address 7.7.1.254 255.255.255.0
channel-group 1 mode active
interface ethernet 2
channel-group 1 mode active
#以太通道接口统一配置
interface port-channel 1
no shutdown
nameif inside
security-level 100
ip address 7.7.1.254 255.255.255.0

SW查看配置结果
接口后面P代表建立以太通道成功,缩写释义可以查看下列Flags部分

ASA查看配置结果

3个端口使用以太通道技术后,总带宽是叠加的

Recommend
About Joyk
Aggregate valuable and interesting links.
Joyk means Joy of geeK