Traditional Layer 2 Networking Scenarios

scenario overview scenario overview the traditional layer 2 network solution is based on the classic spine leaf architecture, enabling visualised, automated deployment and management through a centralised controller this solution adheres to the design principles of network stratification and separation of responsibilities, providing a stable, efficient, and easily maintainable standardised foundational network platform for environments such as campuses and data centres it combines a reliable architecture proven over decades with modern centralised management capabilities, ensuring non blocking, low latency forwarding of service traffic within layer 2 domains while achieving centralised and highly available layer 3 gateway functionality centralised policy management and automated deployment through a unified controller, the solution abstracts complex vlan, port, spanning tree, and gateway configurations into intuitive policy templates operations personnel can deploy configurations across the entire network in bulk and with precision via a graphical interface, eliminating the need for individual device logins this fundamentally prevents misconfigurations and inconsistencies that may arise from manual command line operations, reducing network deployment time from days to hours intelligent unified operations management and proactive insights at the deployment and management level, this solution achieves centralised policy distribution and device management through a unified controller beyond this, the controller possesses robust real time monitoring and intelligent analysis capabilities it continuously collects operational status and performance metrics from all network devices, intelligently calculates health scores for each device based on multi dimensional data, and provides comprehensive logging with precise real time alerts this mechanism significantly simplifies network operations, enabling administrators to proactively identify potential risks, rapidly pinpoint issues, and resolve them, thereby comprehensively enhancing operational efficiency and network reliability ultimate reliability and high performance in classic architecture employing a spine leaf classic network topology, the leaf layer functions as pure layer 2 equipment, dedicated to high speed access and local switching the spine layer acts as layer 3 gateways and policy enforcement points, enabling centralised, efficient routing of cross subnet traffic this clear division of responsibilities renders network behaviour entirely predictable, providing upper layer services with consistently low latency, high bandwidth stable connections scheme design scheme design network architecture traditional layer 2 gateways are deployed on spine devices, with leaf devices operating purely as layer 2 switches this approach is suitable for wired networks in campus server zones or traditional access/aggregation networks in small to medium campuses it provides classic layer 2 forwarding to meet requirements for traditional layer 2 architectures dhcp deployment dhcp is centrally deployed on spine devices controller deployment controllers are deployed in the cloud, enabling unified management through a graphical interface this facilitates centralised policy distribution, configuration management, and status monitoring, significantly enhancing operational efficiency particularly for device configuration and deployment, this approach substantially reduces workload service planning service plan service type ip segment gateway service vlan ssid wireless service 180 10 0 0/18 180 10 0 1/18 1080 new ssid wired service& ap management 180 10 18 0/24 180 10 18 1/24 1888 device import device import administrators can create or import devices in bulk to specified sites/organizations when an added inventory device connects to the controller and comes online, the controller will automatically assign it to the designated organization/site based on its mac address add devices one by one add devices one by one click \[configuration] \[inventory information] \[+] to create an inventory device fill in the relevant information as prompted on the page import via excel import via excel click \[upload devices] click \[download template] and enter the information for the devices to be added to the inventory according to the template's specifications mac the device's mac address this information is typically found on the device's label device type the device model name the device hostname by default, it is the device's mac address configtag after an ap connects to the controller, it will automatically pull the configuration file corresponding to this tag by default, the tag value is default firmwaretag when performing firmware upgrades, devices requiring an upgrade can be filtered based on their firmware tag type by default, the tag value is default loopback the device's loopback address for all devices operating at layer 3, this address serves as the device's in band management address aclscaleprofile optional values are default or large scale by default, the value is default license the ap's license file for bulk imports, you can either enter the json formatted license file content directly in the excel sheet, or add all devices to inventory first and then import the license files in bulk afterward description descriptive information about the device click \[choose file] to upload the completed template, then click \[test upload data] the controller will automatically check if the uploaded data complies with the specifications and display the results in the test report once completed, users can view the created devices in the \[inventory information] view service configuration service configuration design topology design topology navigate to the \[configuration] page in the controller's navigation bar click \[plan topology] , select the \[traditional l2 network] , enter the model and quantity of spine and leaf devices, then click \[finish] to finalise the network topology pre planning the controller will generate a recommended network topology based on pre planned typical network topologies the generated topology is displayed as follows users may click the \[edit] button on the device side, select the device from inventory to apply to the current topology in the right hand slide out panel, then choose the interconnect interface mac uniquely select a device via its mac address loopback0 ip configure the ip address for the device's loopback0 interface, which will be used for in band management of the device hostname configure the hostname of the device device role assign the device role as spine or leaf inter port local port the interface on the current device neighbor select the peer device connected to the local interface neighbor port the interface on the peer device interconnected with the current device's local interface upon completing all configurations, click \[save] in the upper right corner of the page, then select \[confirm] in the pop up window basic network basic network click the top right corner \[basic network] basic basic in traditional layer 2 network scenarios, the in band management method for leaf devices involves creating a vlanif interface as the in band management interface to connect to the controller on this page, administrators can specify a vlan id as the in band management vlan, configure the management ip address range and the in band management gateway address (which will be configured on the spine device), select the vlan member interfaces, and set the mode to access when joining the vlan the controller will allocate a management ip address to each leaf switch from the specified address range, displaying the allocation results in the table below access/trunk select this mode based on whether the interface transmits and receives vlan tagged packets access accepts packets without vlan tags typically configured as the management vlan for switches or aps, or as a wired service vlan trunk accepts vlan tagged packets, typically configured for wireless service vlans note as a switch interface can only be configured with one access mode vlan, this in band management vlan also serves as both the wired service vlan and ap management vlan egress router egress router select the interface id for the uplink interface on the spine device and configure its ip address in traditional layer 2 scenarios, the spine only supports connecting to external networks via static route configuration to ensure normal network operation, a default route is typically required device device configure device management related information timezone configure the system time zone ntp configure ntp server snmp configure snmp community syslog configure syslog server ip address tacacs+ configure tacacs server ip address device acl configure acl rules restricting ssh, snmp, telnet connections to device after completing all configurations, click \[save] switch configuration switch configuration switch configuration switch configuration click \[create] on the right to set up the switch configuration unlike full three layer networks, in traditional two layer networks, the service network is deployed on spine devices therefore, when selecting devices, it is also necessary to add devices of the spine type spine spine creating a service vlan vlan create a service vlan ip configure the address as the gateway for this service vlan access/trunk select this mode based on whether the interface transmits or receives vlan tagged packets access accepts packets without vlan tags, typically configured for ap management vlans or wired service vlans trunk accepts vlan tagged packets, typically configured for wireless service vlans members click the dropdown arrow and select the member interfaces for the vlan on the spine device typically, this includes all interfaces connected to leaf switches leaf leaf leaf switches operate in pure layer 2 configuration on this interface, only the vlan id and member interfaces need to be specified; all other configurations are generated by the controller poe poe the access switch features poe functionality, which can be directly enabled in the wired service configuration to supply power to pd devices click \[create] select the interface where the poe function is to be enabled and set the startup delay time poe delay this refers to a brief, intentional time delay introduced at a poe switch port between when it begins to supply power and when it actually delivers power to the powered device (pd) wired clients information collection wired clients information collection interfaces with this feature enabled will report information about the connected wired terminals to the controller dhcp dhcp the controller allows users to configure the dhcp server function on spine devices after entering the site, click \[configuration] \[switch configuration] \[dhcp] to access the dhcp server configuration interface then, click the \[+] button on the page to create a new configuration create wired services and ap management address pool create wired services and ap management address pool name user defined network specify the network segment where the ip address assigned by the dhcp server to the dhcp client is located gateway address specify the gateway address assigned by the dhcp server to the dhcp client dns specify the dns server address address pool specify the address range allocated by the dhcp server to dhcp clients lease time specify the ip address lease time click on \[dhcp option] and fill in the relevant information controller ip dhcp options specifically designed for wireless ap discovery controllers, fill in the controller ip address the controller supports configuring mac binding ip function, which users can fill in as needed create wireless services address pool create wireless services address pool after completing all configurations, click \[save] wi fi configuration wi fi configuration click \[wi fi configuration] \[+] to configure the necessary basic information for the wireless ap, e g ssid settings, security policy the controller can automatically generate the corresponding the controller supports the configuration of different wireless service configurations, and after the ap goes online, it will determine which configuration should be issued to the ap based on the \[config tag] attributes of the configuration ssid ssid lan(optional) lan(optional) when the ap is one that has an extended wired interface and is capable of accessing terminals by wired means, such as a panel ap, the user can configure the access method for wired terminals through the configuration in lans upstreamports specify the up link interfaces for wired terminal to access the network through ap, usually it is the interface for ap to connect to the switch, and keep the same with \[upstreamports] in \[ssid] – \[advanced] settings, the default is wan downstreamports interfaces for wired terminal access downstream vlan tag whether the wired terminal carries vlan tag vlan id the ap receives messages from wired terminals that add this vlan tag to identify dhcp snooping trusted dhcp snooping trusted interface, if the wired terminal needs to obtain ip address through dhcp service, this switch needs to be on configuration release configuration release switch switch switches support both in band and out of band management methods operation and maintenance personnel can flexibly choose based on current network conditions for devices in the factory default state, whenever either the management port or service port is in an "up" state, they will actively initiate a dhcp request to obtain a temporary management ip address and the ip address of the cloud based controller from the dhcp server they will then connect to the controller to retrieve configuration information once all switches are successfully connected to the controller, click \[topology consistency verification] on the upper right side of the \[design topology] view to confirm whether the generated topology matches the planned topology after verification, the controller can deploy configurations to the switches push basic network configuration push basic network configuration click \[configuration] \[design topology] \[basic network] \[push configuration] to issue the basic configuration for all devices by default, the controller will select all switches click the \[next] \[start] button to start issuing basic network configurations for the switches push switch configuration push switch configuration switch configuration switch configuration on the \[configuration] \[switch configuration] view, select the configuration to be deployed and click the \[push configuration] button in the pop up window, click \[next] \[start] to deploy the switch configuration to the switch dhcp dhcp on the \[configuration] \[switch configuration] \[dhcp] interface, select the configuration to be deployed and click the \[push configuration] button to deliver the configuration ap ap the ap does not need to manually issue the configuration after the configuration of the device is issued and takes effect, the poe power supply function of the switch is turned on, and the ap can power on and work when the ap connects to the controller with the information obtained through the dhcp service, the controller will automatically send the configuration to the corresponding ap based on the comparison between the tag identification stored in the ap inventory and the tag identification in the planning configuration