Example for Configuring the Access Layer for a Wired Campus Network Using eSight (eSight V300R005C00 and Earlier Versions)

Prerequisites

SNMP read and write communities have been configured for devices. In addition, the devices have been added to eSight, and can successfully communicate with eSight.
Telnet parameters have been configured on eSight.
The LLDP protocol has been enabled on SVF-capable devices.

Networking Requirements

Company M has constructed a wired campus network on which many access devices are deployed sparsely. It is difficult to manage and configure these access devices. The network administrator Jack requires that he can uniformly manage and configure the access devices to reduce management costs.

As shown in Figure 1, two switches at the aggregation layer form a cluster and function as the parents to connect to multiple access switches (ASs).

In this example, the S12708, S5700-28P-LI, and S2750-28TP-EI are used as the parent, level-1 AS, and level-2 AS, respectively. The eSight software version is V300R005C00.

Figure 1 Configuring the access layer for a wired campus network

Configuration Roadmap

The configuration roadmap is as follows:

Configure CSS/iStack on the parents to ensure high reliability of the super virtual fabric (SVF) system.
Configure SVF system capabilities.
1. Create an SVF enabling template to enable SVF on the parent and configure the SVF client management IP address pool, file server, and forwarding mode.
2. Create an AS predeployment template to predeploy ASs on the SVF parent before powering on them and add the ASs to a whitelist. After the ASs are powered on, the SVF parent permits the ASs to access the SVF network.
3. Create a level-1 AS fabric port template to set parameters for the fabric ports that connect the SVF parent to level-1 ASs.
4. Create a level-2 AS fabric port template to set parameters for the fabric ports that connect level-1 ASs to level-2 ASs.
5. Create a system configuration matrix to deploy the template instances to the SVF parent.
Clear the configurations of ASs, restart the ASs, and then connect the parent to level-1 ASs and level-1 ASs to level-2 ASs using cables.
Configure SVF service capabilities.
1. Create port groups.
2. Create user interface VLAN templates to set pass VLANs for user-side ports.
3. Create a user interface service template to set network security parameters for user-side ports.
4. Create a service configuration matrix to deploy the template instances to the port groups.

Data Plan

**Table 1** Device group
Group Name	Device Name	Device IP
SVF Parent	SVF-S12708	10.137.240.114

**Table 2** Port group
Group Name	Device	Port
PortGroup1	as1	ALL
PortGroup1	as2	ALL
PortGroup1	as4	ALL
PortGroup2	as3	ALL
PortGroup2	as5	ALL

**Table 3** SVF enabling template
Instance Name	VLAN ID	IP Address	Mask
Temp1	11	192.168.11.1	24

**Table 4** AS predeployement template
Instance Name	AS Name	AS Type	MAC Address	Whether the AS Is Added to Whitelist
ASTemp	as1	S5700-28P-LI-AC	0200-0000-0011	Yes
	as2	S5700-28P-LI-AC	0200-0000-0022	Yes
	as3	S5700-28P-LI-AC	0200-0000-0033	Yes
	as4	S2750-28TP-EI-AC	0200-0000-0044	Yes
	as5	S2750-28TP-EI-AC	0200-0000-0055	Yes

**Table 5** Level-1 AS fabric port template
Instance Name	Fabric Port ID	Eth-Trunk ID	GE Interface Number
ParentToL1as	1	1	1/1/0/1
	1	1	2/1/0/1
	2	2	1/1/0/2
	2	2	2/1/0/2
	3	3	1/1/0/3
	3	3	2/1/0/3

**Table 6** Level-2 AS fabric port template
Instance Name	AS Name	Fabric Port ID	Eth-Trunk ID	GE Interface Number
L2AS	1	4	4	0/0/23
	1	4	4	0/0/24
	3	5	5	0/0/23
	3	5	5	0/0/24

**Table 7** User interface VLAN template
Instance Name	Default VLAN
VLAN10	10
VLAN20	20

**Table 8** User interface service template
Instance Name	User Access Port
AccessTemp	ON

Procedure

Configure CSS/iStack on the parents to ensure high reliability of the super virtual fabric (SVF) system. For details, see "CSS Configuration" or "Stack Configuration".
Create a template instance and enable SVF on the parent.
1. Choose Configuration > Configuration Management > SVF Configuration Management from the main menu.
2. Choose Template Management from the navigation tree, choose SVF Device Templates > SVF System Config > Enable SVF in Template, and click Create.
3. Set Instance Name to Temp1, set VLAN ID, IP Address, and Mask in the Configure SVF Client Management Address Pool area to 11, 192.168.11.1, and 24 respectively, and click Confirm. The Enable SVF template is displayed on the page.
Create a template instance and set AS access parameters.
1. Choose Template Management from the navigation tree, choose SVF Device Templates > SVF System Config > AS PreDeploy in Template, and click Create.
2. Set Instance Name to ASTemp and set other parameters as shown in the following figure.
Create a template instance Level-1 AS Fabric Port.
1. Choose Template Management from the navigation tree, choose SVF Device Templates > SVF System Config > Level-1 AS Fabric Port in Template, and click Create.
2. Set Instance Name to ParentToL1as, set other parameters as shown in the following figure, and click Confirm. The Level-1 AS Fabric Port template is displayed on the page.
Create a template instance Level-2 AS Fabric Port.
1. Choose Template Management from the navigation tree, choose SVF Device Templates > SVF System Config > Level-2 AS Fabric Port in Template, and click Create.
2. Set Instance Name to L2AS, set other parameters as shown in the following figure, and click Confirm. The Level-2 AS Fabric Port template is displayed on the page.
Deploy the template instances to the parent.
1. Choose Service Config > SVF System Config from the navigation tree. The default service configuration matrix is displayed.
2. Click next to Resources and select SVF-S12708 as the default SVF Parent.
3. In the service configuration matrix, place the mouse in each blank cell, click to select the created template instances one by one, and click Confirm.
4. In the system configuration matrix, place the mouse in the lower right corner of each cell with a template instance, and click to deploy the template instance to the parent.
After logging in to each AS through the CLI, you can run the reset saved-configuration command to delete the AS configuration and then run the reboot command to restart the AS. If a message is displayed asking whether you want to save the configuration, select N. And then connect the parent to level-1 ASs and level-1 ASs to level-2 ASs using cables.
Create port groups.
1. Choose Resource > Resource Management > Network Device from the main menu. Device resources on the entire network are displayed on the page.
2. Click in the upper right corner of the page and set IP Address to 10.137.240.114. The SVF device with the specified IP address is displayed on the page.
3. Click the device name link in Name to access the NE Manager of the device.
4. Choose SVF Feature > AS Port from the navigation tree, and click Create Group.
5. Set Group Name to PortGroup1, and click Confirm.
6. Set Group Name to PortGroup2, and click Confirm.
7. Enter as1 in the AS Name search box and click Search. Select all the ports of as1, click Add to Group, and select PortGroup1.
8. Repeat the preceding step to add ports of as2 and as4 to PortGroup1, and ports of as3 and as5 to PortGroup2.
Create user interface VLAN templates.
1. Choose Configuration > Configuration Management > SVF Configuration Management from the main menu.
2. Choose Template Management from the navigation tree, choose SVF Device Templates > SVF Service Config > User Interface VLAN in Template, and click Create.
3. Set Instance Name to VLAN10, set other parameters as shown in the following figure, and click Confirm. The user interface VLAN template VLAN10 is displayed on the page.
4. Click Create, set Instance Name to VLAN20, set other parameters as shown in the following figure, and click Confirm. The user interface VLAN template VLAN20 is displayed on the page.
Create a user interface service template.
1. Choose Template Management from the navigation tree, choose SVF Device Templates > SVF Service Config > User Interface Service in Template, and click Create.
2. Set Instance Name to AccessTemp, set other parameters as shown in the following figure, and click Confirm. The user interface service template AccessTemp is displayed on the page.
Deploy the SVF user interface VLAN and service templates to port groups.
1. Choose Service Config > SVF Port Config from the navigation tree. The default service configuration matrix is displayed.
2. Click next to Resources, select PortGroup1 and PortGroup2, and click Confirm.
3. In the service configuration matrix, place the mouse in each blank cell, click to select the created template instances one by one, and click Confirm.
4. In the service configuration matrix, place the mouse in the lower right corner of each cell with a template instance, and click to deploy the template instance to the port group.

Result

After the SVF access layer configuration is complete, verify the configuration as follows:

Choose Monitor > Topology > Topology Management from the main menu. The SVF topology is displayed. Double-click the icon to view the layout in the SVF system.
Choose Resource > Resource Management > Access Users Management from the main menu. You can view the list of online users on the page that is displayed.