HCIP------真机实验

最新推荐文章于 2024-10-06 08:39:05 发布
最新推荐文章于 2024-10-06 08:39:05 发布
阅读量784 收藏 30
点赞数 7
文章标签： 网络 服务器 运维
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://blog.csdn.net/2201_75642447/article/details/142501635
版权

生产区交换需求

1.D-1，D-2之间链路聚合

D-1

[D-1]interface Eth-Trunk 1
[D-1-Eth-Trunk1]mode manual load-balance

[D-1-Eth-Trunk1]trunkport GigabitEthernet 0/0/2 0/0/3

D-2

[D-2]interface Eth-Trunk 1
[D-2-Eth-Trunk1]mode manual load-balance 
[D-2-Eth-Trunk1]trunkport GigabitEthernet 0/0/2 0/0/3

MSTP实例映射：

instance 1  vlan  21

instance 2  vlan  22 100

[D-1]vlan batch 21 to 23 100

[D-1]port-group group-member g0/0/1 g0/0/4

[D-1-port-group]port link-type trunk 
[D-1-GigabitEthernet0/0/1]port link-type trunk 
[D-1-GigabitEthernet0/0/4]port link-type trunk 

[D-1-port-group]port trunk allow-pass vlan 21 to 23 100
[D-1-GigabitEthernet0/0/1]port trunk allow-pass vlan 21 to 23 100
[D-1-GigabitEthernet0/0/4]port trunk allow-pass vlan 21 to 23 100

[D-1]interface Eth-Trunk 1

[D-1-Eth-Trunk1]port link-type trunk 

[D-1-Eth-Trunk1]port trunk allow-pass vlan 21 to 23 100

[D-1]stp mode mstp

[D-1]stp region-configuration 

[D-1-mst-region]region-name SC

[D-1-mst-region]revision-level 10

[D-1-mst-region]instance 1 vlan 21
[D-1-mst-region]instance 2 vlan 22 100
[D-1-mst-region]active region-configuration 

[D-2]vlan batch 21 to 23 100 
[D-2]port-group group-member g0/0/4 g0/0/5    
[D-2-port-group]port link-type trunk 
[D-2-GigabitEthernet0/0/4]port link-type trunk 
[D-2-GigabitEthernet0/0/5]port link-type trunk  
[D-2-port-group]port trunk allow-pass vlan 21 22 23 100
[D-2-GigabitEthernet0/0/4]port trunk allow-pass vlan 21 22 23 100
[D-2-GigabitEthernet0/0/5]port trunk allow-pass vlan 21 22 23 100

[D-2]interface Eth-Trunk 1

[D-2-Eth-Trunk1]port link-type trunk

[D-2-Eth-Trunk1]port trunk allow-pass vlan 21 to 23 100

[D-2]stp mode mstp

[D-2]stp region-configuration 

[D-2-mst-region]region-name SC

[D-2-mst-region]instance 1 vlan 21 
[D-2-mst-region]instance 2 vlan 22 100

[A-1]vlan batch 21 to 23 100

[A-1]port-group group-member g0/0/1 g0/0/2   
[A-1-port-group]port link-type trunk 
[A-1-GigabitEthernet0/0/1]port link-type trunk 
[A-1-GigabitEthernet0/0/2]port link-type trunk   
[A-1-port-group]port trunk allow-pass vlan 21 to 23 100
[A-1-GigabitEthernet0/0/1]port trunk allow-pass vlan 21 to 23 100
[A-1-GigabitEthernet0/0/2]port trunk allow-pass vlan 21 to 23 100

s

[A-1]stp mode mstp
[A-1]stp region-configuration 
[A-1-mst-region]region-name SC
[A-1-mst-region]revision-level 10
[A-1-mst-region]instance 1 vlan 21
[A-1-mst-region]instance 2 vlan 22 100
[A-1-mst-region]active region-configuration 

[A-2]vlan batch 21 to 23 100

[A-2]port-group group-member g0/0/1 g0/0/2
[A-2-GigabitEthernet0/0/1]port link-type trunk 
[A-2-GigabitEthernet0/0/2]port link-type trunk 
[A-2]stp mode mstp
[A-2]stp region-configuration 
[A-2-mst-region]region-name SC
[A-2-mst-region]revision-level 10
[A-2-mst-region]instance 1 vlan 21 
[A-2-mst-region]instance 2 vlan 22 100
[A-2-mst-region]active region-configuration

[A-3]vlan batch 21 to 23 100 
[A-3]port-group group-member g0/0/1
[A-3-GigabitEthernet0/0/1]port link-type trunk 
[A-3]stp mode mstp 
[A-3]stp region-configuration 
[A-3-mst-region]region-name SC
[A-3-mst-region]revision-level 10
[A-3-mst-region]instance 1 vlan 21
[A-3-mst-region]instance 2 vlan 22 100
[A-3-mst-region]active region-configuration 

D-1为实例1，0的根，实例2的备份根

[D-1]stp instance 0 root primary 
[D-1]stp instance 1 root primary
[D-1]stp instance 2 root secondary 

所有access接口配置为边缘接口，并配置BPDU保护

[A-1]port-group group-member g0/0/3 to g0/0/24

[A-1-port-group]port link-type access

[A-1-port-group]port default vlan 21

[A-1-port-group]stp edged-port enable 

[A-1]stp bpdu-protection 

[A-2]port-group group-member g0/0/3 to g0/0/24

[A-2-port-group]port link-type access 

[A-2-port-group]port default vlan 22

[A-2-port-group]stp edged-port enable 

[A-2]stp bpdu-protection

[A-3]port-group group-member g0/0/2 to g0/0/24
[A-3-port-group]port link-type access 
[A-3-port-group]port default vlan 23
[A-3-port-group]stp edged-port enable

[A-3]stp bpdu-protection 

D-1为vlanif 21 的master，D-2为backup

[D-1]interface Vlanif 21
[D-1-Vlanif21]ip address 10.1.21.1 24
[D-1-Vlanif21]vrrp vrid 1 virtual-ip 10.1.21.254
[D-1-Vlanif21]vrrp vrid 1 priority 105

[D-2]interface Vlanif 21
[D-2-Vlanif21]ip address 10.1.21.2 24

[D-2-Vlanif21]vrrp vrid 1 virtual-ip 10.1.21.254

[D-1]interface Vlanif 22
[D-1-Vlanif22]ip address 10.1.22.1 24
[D-1-Vlanif22]vrrp vrid 1 virtual-ip 10.1.22.254

[D-2]interface Vlanif 22
[D-2-Vlanif22]ip address 10.1.22.2 24
[D-2-Vlanif22]vrrp vrid 1 virtual-ip 10.1.22.254
[D-2-Vlanif22]vrrp vrid 1 priority 105

[D-1]interface Vlanif 100
[D-1-Vlanif100]ip add    
[D-1-Vlanif100]ip address 10.1.100.65 26

[D-1-Vlanif100]vrrp vrid 1 virtual-ip 10.1.100.95

D-1与D-2的VRRP需监控上行链路，双上行都down时切换网关，抢占延时为20s

[D-2-Vlanif21]vrrp vrid 1 track interface g0/0/6 reduced 3
[D-2-Vlanif21]vrrp vrid 1 track interface g0/0/7 reduced 3

[D-1-Vlanif21]vrrp vrid 1 preempt-mode timer delay 20

[D-2-Vlanif22]vrrp vrid 1 track interface g0/0/6 reduced 3
[D-2-Vlanif22]vrrp vrid 1 track interface g0/0/7 reduced 3

[D-1-Vlanif22]vrrp vrid 1 preempt-mode timer delay 20

办公区需求

1.交换机之间trunk使用最少vlan透传原则

2.D-5，D-6之间做链路聚合

[D-5]interface Eth-Trunk 1
[D-5-Eth-Trunk1]mode lacp-static 
[D-5-Eth-Trunk1]trunkport GigabitEthernet 0/0/2 0/0/3

[D-6]interface Eth-Trunk 1  
[D-6-Eth-Trunk1]mode lacp-static    
[D-6-Eth-Trunk1]trunkport GigabitEthernet 0/0/2 0/0/3

MSTP name配置为BG

MSTP实例映射为：

instance 1 vlan 11、12、13

instance 2 vlan 14、15、16、100

[D-5]vlan batch 11 to 16 100

[D-5]port-group group-member g0/0/1 g0/0/4
[D-5-GigabitEthernet0/0/1]port link-type trunk 
[D-5-GigabitEthernet0/0/4]port link-type trunk 

[D-5-port-group]port trunk allow-pass vlan 11 to 16 100
[D-5-GigabitEthernet0/0/1]port trunk allow-pass vlan 11 to 16 100
[D-5-GigabitEthernet0/0/4]port trunk allow-pass vlan 11 to 16 100
s

[D-5-Eth-Trunk1]port link-type trunk 

[D-5-Eth-Trunk1]port trunk allow-pass vlan 11 to 16 100

[D-5]stp mode mstp
[D-5]stp region-configuration 
[D-5-mst-region]region-name BG
[D-5-mst-region]revision-level 10
[D-5-mst-region]instance 1 vlan 11 12 13 
[D-5-mst-region]instance 2 vlan 14 15 16 100 
[D-5-mst-region]active region-configuration

[D-6]port-group group-member g0/0/1 g0/0/4
[D-6-GigabitEthernet0/0/1]port link-type trunk 
[D-6-GigabitEthernet0/0/4]port link-type trunk 

[D-6-port-group]port trunk allow-pass vlan 11 to 16 100
[D-6-GigabitEthernet0/0/1]port trunk allow-pass vlan 11 to 16 100
[D-6-GigabitEthernet0/0/4]port trunk allow-pass vlan 11 to 16 100
[

[D-6]stp mode mstp 
[D-6]stp region-configuration 
[D-6-mst-region]region-name BG
[D-6-mst-region]revision-level 10
[D-6-mst-region]instance 1 vlan 11 12 13
[D-6-mst-region]instance 2 vlan 14 15 16 100
[D-6-mst-region]active region-configuration 

[A-4]vlan batch 11 to 16 100

[A-4]port-group group-member g0/0/1 g0/0/2  
[A-4-port-group]port link-type trunk 
[A-4-GigabitEthernet0/0/1]port link-type trunk 
[A-4-GigabitEthernet0/0/2]port link-type trunk 

[A-4-port-group]port  trunk allow-pass vlan 11 to 16 100
[A-4-GigabitEthernet0/0/1]port  trunk allow-pass vlan 11 to 16 100
[A-4-GigabitEthernet0/0/2]port  trunk allow-pass vlan 11 to 16 100

[A-4]stp mode mstp
[A-4]stp region-configuration 
[A-4-mst-region]region-name BG
[A-4-mst-region]revision-level 10
[A-4-mst-region]instance 1 vlan 11 to 13
[A-4-mst-region]instance 2 vlan 14 to 16 100
[A-4-mst-region]active region-configuration 

[A-5]vlan batch 11 to 16 100
[A-5]port-group group-member g0/0/1 g0/0/2   
[A-5-port-group]port link-type trunk 
[A-5-GigabitEthernet0/0/1]port link-type trunk 
[A-5-GigabitEthernet0/0/2]port link-type trunk  
[A-5-port-group]port trunk allow-pass vlan 11 to 16 100
[A-5-GigabitEthernet0/0/1]port trunk allow-pass vlan 11 to 16 100
[A-5-GigabitEthernet0/0/2]port trunk allow-pass vlan 11 to 16 100

s

[A-5]stp mode mstp
[A-5]stp region-configuration 
[A-5-mst-region]region-name BG
[A-5-mst-region]revision-level 10
[A-5-mst-region]instance 1 vlan 11 to 13
[A-5-mst-region]instance 2 vlan 14 to 16 100
[A-5-mst-region]active region-configuration 

D-5为实例1，0的根，实例2的备份根

[D-5]stp instance 0 root primary 
[D-5]stp instance 1 root primary
[D-5]stp instance 2 root primary

D-6为实例2的根，实例1，0的备份根

[D-6]stp instance 2 root primary 
[D-6]stp instance 0 root secondary  
[D-6]stp instance 1 root secondary 

所有access接口配置为边缘接口，并配置BPDU保护

[A-4]port-group group-member g0/0/3 to g0/0/5

[A-4-port-group]port link-type access 
[A-4-GigabitEthernet0/0/3]port link-type access 
[A-4-GigabitEthernet0/0/4]port link-type access 
[A-4-GigabitEthernet0/0/5]port link-type access 
[A-4-port-group]port default vlan 11
[A-4-GigabitEthernet0/0/3]port default vlan 11
[A-4-GigabitEthernet0/0/4]port default vlan 11
[A-4-GigabitEthernet0/0/5]port default vlan 11
[A-4-port-group]stp edged-port enable 
[A-4-GigabitEthernet0/0/3]stp edged-port enable 
[A-4-GigabitEthernet0/0/4]stp edged-port enable 
[A-4-GigabitEthernet0/0/5]stp edged-port enable 

[A-4]port-group group-member g0/0/6 to g0/0/10 
[A-4-port-group]port link-type access 
[A-4-GigabitEthernet0/0/6]port link-type access 
[A-4-GigabitEthernet0/0/7]port link-type access 
[A-4-GigabitEthernet0/0/8]port link-type access 
[A-4-GigabitEthernet0/0/9]port link-type access 
[A-4-GigabitEthernet0/0/10]port link-type access 
[A-4-port-group]port default vlan 12
[A-4-GigabitEthernet0/0/6]port default vlan 12
[A-4-GigabitEthernet0/0/7]port default vlan 12
[A-4-GigabitEthernet0/0/8]port default vlan 12
[A-4-GigabitEthernet0/0/9]port default vlan 12
[A-4-GigabitEthernet0/0/10]port default vlan 12 
[A-4-port-group]stp edged-port enable 
[A-4-GigabitEthernet0/0/6]stp edged-port enable 
[A-4-GigabitEthernet0/0/7]stp edged-port enable 
[A-4-GigabitEthernet0/0/8]stp edged-port enable 
[A-4-GigabitEthernet0/0/9]stp edged-port enable 
[A-4-GigabitEthernet0/0/10]stp edged-port enable 

s

[A-4]port-group group-member g0/0/11 to g0/0/15
[A-4-port-group]port link-type access 
[A-4-GigabitEthernet0/0/11]port link-type access 
[A-4-GigabitEthernet0/0/12]port link-type access 
[A-4-GigabitEthernet0/0/13]port link-type access 
[A-4-GigabitEthernet0/0/14]port link-type access 
[A-4-GigabitEthernet0/0/15]port link-type access  
[A-4-port-group]port default vlan 13
[A-4-GigabitEthernet0/0/11]port default vlan 13
[A-4-GigabitEthernet0/0/12]port default vlan 13
[A-4-GigabitEthernet0/0/13]port default vlan 13
[A-4-GigabitEthernet0/0/14]port default vlan 13
[A-4-GigabitEthernet0/0/15]port default vlan 13 
[A-4-port-group]stp edged-port enable 
[A-4-GigabitEthernet0/0/11]stp edged-port enable 
[A-4-GigabitEthernet0/0/12]stp edged-port enable 
[A-4-GigabitEthernet0/0/13]stp edged-port enable 
[A-4-GigabitEthernet0/0/14]stp edged-port enable 
[A-4-GigabitEthernet0/0/15]stp edged-port enable 

[A-4]stp bpdu-protection 

[A-5]port-group group-member g0/0/3 to g0/0/5 
[A-5-port-group]port link-type access 
[A-5-GigabitEthernet0/0/3]port link-type access 
[A-5-GigabitEthernet0/0/4]port link-type access 
[A-5-GigabitEthernet0/0/5]port link-type access    
[A-5-port-group]port default vlan 14
[A-5-GigabitEthernet0/0/3]port default vlan 14
[A-5-GigabitEthernet0/0/4]port default vlan 14
[A-5-GigabitEthernet0/0/5]port default vlan 14   
[A-5-port-group]stp edged-port enable 
[A-5-GigabitEthernet0/0/3]stp edged-port enable 
[A-5-GigabitEthernet0/0/4]stp edged-port enable 
[A-5-GigabitEthernet0/0/5]stp edged-port enable 

s

[A-5]port-group group-member g0/0/6 to g0/0/10 
[A-5-port-group]port link-type access 
[A-5-GigabitEthernet0/0/6]port link-type access 
[A-5-GigabitEthernet0/0/7]port link-type access 
[A-5-GigabitEthernet0/0/8]port link-type access 
[A-5-GigabitEthernet0/0/9]port link-type access 
[A-5-GigabitEthernet0/0/10]port link-type access  
[A-5-port-group]port default vlan 15
[A-5-GigabitEthernet0/0/6]port default vlan 15
[A-5-GigabitEthernet0/0/7]port default vlan 15
[A-5-GigabitEthernet0/0/8]port default vlan 15
[A-5-GigabitEthernet0/0/9]port default vlan 15
[A-5-GigabitEthernet0/0/10]port default vlan 15
[A-5-port-group]stp edged-port enable 
[A-5-GigabitEthernet0/0/6]stp edged-port enable 
[A-5-GigabitEthernet0/0/7]stp edged-port enable 
[A-5-GigabitEthernet0/0/8]stp edged-port enable 
[A-5-GigabitEthernet0/0/9]stp edged-port enable 
[A-5-GigabitEthernet0/0/10]stp edged-port enable 

s

[A-5]port-group group-member g0/0/11 to g0/0/15   
[A-5-port-group]port link-type access 
[A-5-GigabitEthernet0/0/11]port link-type access 
[A-5-GigabitEthernet0/0/12]port link-type access 
[A-5-GigabitEthernet0/0/13]port link-type access 
[A-5-GigabitEthernet0/0/14]port link-type access 
[A-5-GigabitEthernet0/0/15]port link-type access 
[A-5-port-group]port default vlan 16
[A-5-GigabitEthernet0/0/11]port default vlan 16
[A-5-GigabitEthernet0/0/12]port default vlan 16
[A-5-GigabitEthernet0/0/13]port default vlan 16
[A-5-GigabitEthernet0/0/14]port default vlan 16
[A-5-GigabitEthernet0/0/15]port default vlan 16 
[A-5-port-group]stp edged-port enable 
[A-5-GigabitEthernet0/0/11]stp edged-port enable 
[A-5-GigabitEthernet0/0/12]stp edged-port enable 
[A-5-GigabitEthernet0/0/13]stp edged-port enable 
[A-5-GigabitEthernet0/0/14]stp edged-port enable 
[A-5-GigabitEthernet0/0/15]stp edged-port enable 

[A-5]stp bpdu-protection 

D-5为vlanif 11、12、13的master，D-6为backup

[D-5]interface Vlanif 11 
[D-5-Vlanif11]ip address 10.1.11.1 24
[D-5-Vlanif11]vrrp vrid 1 virtual-ip 10.1.11.254
[D-5-Vlanif11]vrrp vrid 1 priority 105

s

[D-5-Vlanif11]interface vlanif 12
[D-5-Vlanif12]ip address 10.1.12.1 24
[D-5-Vlanif12]vrrp vrid 1 virtual-ip 10.1.12.254

[D-5-Vlanif12]vrrp vrid 1 priority 105

s

[D-5]interface Vlanif 13
[D-5-Vlanif13]ip address 10.1.13.1 24 
[D-5-Vlanif13]vrrp vrid 1 virtual-ip 10.1.13.254
[D-5-Vlanif13]vrrp vrid 1 priority 105

[D-6]interface Vlanif 11
[D-6-Vlanif11]ip address 10.1.11.2 24
[D-6-Vlanif11]vrrp vrid 1 virtual-ip 10.1.11.254

s

[D-6]interface Vlanif 12
[D-6-Vlanif12]ip address 10.1.12.2 24
[D-6-Vlanif12]vrrp vrid 1 virtual-ip 10.1.12.254

s

[D-6]interface Vlanif 13
[D-6-Vlanif13]ip address 10.1.13.2 24
[D-6-Vlanif13]vrrp vrid 1 virtual-ip 10.1.13.254

D-6为vlanif  14、15、16的master，D-5为backup

[D-5]interface Vlanif 14
[D-5-Vlanif14]ip address 10.1.14.1 24
[D-5-Vlanif14]vrrp vrid 1 virtual-ip 10.1.14.254

s

[D-5]interface Vlanif 15
[D-5-Vlanif15]ip address 10.1.15.1 24
[D-5-Vlanif15]vrrp vrid 1 virtual-ip 10.1.15.254

s

[D-5]interface Vlanif 16
[D-5-Vlanif16]ip address 10.1.16.1 24
[D-5-Vlanif16]vrrp vrid 1 virtual-ip 10.1.16.254

[D-6]interface Vlanif 14
[D-6-Vlanif14]ip address 10.1.14.2 24
[D-6-Vlanif14]vrrp vrid 1 virtual-ip 10.1.14.254
[D-6-Vlanif14]vrrp vrid 1 priority 105

s

[D-6]interface Vlanif 15
[D-6-Vlanif15]ip address 10.1.15.2 24
[D-6-Vlanif15]vrrp vrid 1 virtual-ip 10.1.15.254

s

[D-6]interface Vlanif 16
[D-6-Vlanif16]ip address 10.1.16.2 24
[D-6-Vlanif16]vrrp vrid 1 virtual-ip 10.1.16.254

D-5与D-6的VRRP需监控上行链路，双上行都down时切换网关，抢占延时为20s

[D-5]interface vlanif 11
[D-5-Vlanif11]vrrp vrid 1 track interface g0/0/5 reduced 3
[D-5-Vlanif11]vrrp vrid 1 track interface g0/0/6 reduced 3

[D-6-Vlanif11]vrrp vrid 1 preempt-mode timer delay 20

 [D-5]interface Vlanif 12 
[D-5-Vlanif12]vrrp vrid 1 track interface g0/0/5 reduced 3
[D-5-Vlanif12]vrrp vrid 1 track interface g0/0/6 reduced 3

[D-6-Vlanif12]vrrp vrid 1 preempt-mode timer delay 20

[D-5]interface Vlanif 13 
[D-5-Vlanif13]vrrp vrid 1 track interface g0/0/5 reduced 3
[D-5-Vlanif13]vrrp vrid 1 track interface g0/0/6 reduced 3 

[D-6-Vlanif13]vrrp vrid 1 preempt-mode timer delay 20

[D-6]interface Vlanif 14

[D-6-Vlanif14]vrrp vrid 1 track interface g0/0/5 reduced 3
[D-6-Vlanif14]vrrp vrid 1 track interface g0/0/6 reduced 3

[D-5-Vlanif14]vrrp vrid 1 preempt-mode timer delay 20

[D-6]interface Vlanif 15
[D-6-Vlanif15]vrrp vrid 1 track interface g0/0/5 reduced 3
[D-6-Vlanif15]vrrp vrid 1 track interface g0/0/6 reduced 3

[D-5-Vlanif15]vrrp vrid 1 preempt-mode timer delay 20

[D-6]interface Vlanif 16
[D-6-Vlanif16]vrrp vrid 1 track interface g0/0/5 reduced 3
[D-6-Vlanif16]vrrp vrid 1 track interface g0/0/6 reduced 3

[D-5-Vlanif16]vrrp vrid 1 preempt-mode timer delay 20

服务器区交换需求

二层使用MSTP+VRRP实现破环和冗余。

1. 交换机之间trunk使用最少vlan透传原则

2. C-1,C-2之间链路做聚合

[C-1]interface Eth-Trunk 1
[C-1-Eth-Trunk1]trunkport GigabitEthernet 0/0/3 0/0/4

[C-2]interface Eth-Trunk 1
[C-2-Eth-Trunk1]trunkport GigabitEthernet 0/0/3 0/0/4

3. D-3,D-4之间链路做聚合

[D-3]interface Eth-Trunk 1 
[D-3-Eth-Trunk1]trunkport GigabitEthernet 0/0/1 0/0/2

 [D-4]interface Eth-Trunk 1
[D-4-Eth-Trunk1]trunkport GigabitEthernet 0/0/1 0/0/2

4. MSTP name配置为WFQ

5. MSTP 实例映射为:

instance 1  vlan 31、33、100

instance 2  vlan    32、34、35

[D-3]vlan batch 31 to 35 100

[D-3]interface Eth-Trunk 1 
[D-3-Eth-Trunk1]port link-type trunk 
[D-3-Eth-Trunk1]port trunk allow-pass vlan 31 to 35 100

[D-3]stp mode mstp
[D-3]stp region-configuration 
[D-3-mst-region]region-name WFQ
[D-3-mst-region]revision-level 10
[D-3-mst-region]instance 1 vlan 31 33 100
[D-3-mst-region]instance 2 vlan 32 34 35
[D-3-mst-region]active region-configuration 

[D-4]vlan batch 31 to 35 100

[D-4]interface Eth-Trunk 1
[D-4-Eth-Trunk1]port link-type trunk 
[D-4-Eth-Trunk1]port trunk allow-pass vlan 31 to 35 100

s

[D-4]stp mode mstp
[D-4]stp region-configuration 
[D-4-mst-region]region-name WFQ
[D-4-mst-region]revision-level 10
[D-4-mst-region]instance 1 vlan 31 33 100
[D-4-mst-region]instance 2 vlan 32 34 35
[D-4-mst-region]active region-configuration 

6. C-1为实例1，0的根，实例2的备份根

[C-1]stp instance 0 root primary 
[C-1]stp instance 1 root primary
[C-1]stp instance 2 root secondary 

7. C-2为实例2的根，实例1，0的备份根

[C-2]stp instance 2 root primary 
[C-2]stp instance 0 root secondary 
[C-2]stp instance 1 root secondary

8. 所有access接口配置为边缘接口，并配置BPDU保护

 [D-3]port-group group-member g0/0/5 to g0/0/7  
[D-3-port-group]port link-type access 
[D-3-GigabitEthernet0/0/5]port link-type access 
[D-3-GigabitEthernet0/0/6]port link-type access 
[D-3-GigabitEthernet0/0/7]port link-type access 
[D-3-port-group]port default vlan 31
[D-3-GigabitEthernet0/0/5]port default vlan 31
[D-3-GigabitEthernet0/0/6]port default vlan 31
[D-3-GigabitEthernet0/0/7]port default vlan 31 
[D-3-port-group]stp edged-port enable 
[D-3-GigabitEthernet0/0/5]stp edged-port enable 
[D-3-GigabitEthernet0/0/6]stp edged-port enable 
[D-3-GigabitEthernet0/0/7]stp edged-port enable 

s

[D-3]port-group group-member G0/0/8 to g0/0/12
[D-3-port-group]port link-type access 
[D-3-GigabitEthernet0/0/8]port link-type access 
[D-3-GigabitEthernet0/0/9]port link-type access 
[D-3-GigabitEthernet0/0/10]port link-type access 
[D-3-GigabitEthernet0/0/11]port link-type access 
[D-3-GigabitEthernet0/0/12]port link-type access 
[D-3-port-group]port default vlan 33
[D-3-GigabitEthernet0/0/8]port default vlan 33
[D-3-GigabitEthernet0/0/9]port default vlan 33
[D-3-GigabitEthernet0/0/10]port default vlan 33
[D-3-GigabitEthernet0/0/11]port default vlan 33
[D-3-GigabitEthernet0/0/12]port default vlan 33    
[D-3-port-group]stp edged-port enable 
[D-3-GigabitEthernet0/0/8]stp edged-port enable 
[D-3-GigabitEthernet0/0/9]stp edged-port enable 
[D-3-GigabitEthernet0/0/10]stp edged-port enable 
[D-3-GigabitEthernet0/0/11]stp edged-port enable 
[D-3-GigabitEthernet0/0/12]stp edged-port enable 

[D-3]stp bpdu-protection 

 [D-4]port-group group-member g0/0/5 to g0/0/7
[D-4-port-group]port link-type access 
[D-4-GigabitEthernet0/0/5]port link-type access 
[D-4-GigabitEthernet0/0/6]port link-type access 
[D-4-GigabitEthernet0/0/7]port link-type access 
[D-4-port-group]port default vlan 32
[D-4-GigabitEthernet0/0/5]port default vlan 32
[D-4-GigabitEthernet0/0/6]port default vlan 32
[D-4-GigabitEthernet0/0/7]port default vlan 32   
[D-4-port-group]stp edged-port enable 
[D-4-GigabitEthernet0/0/5]stp edged-port enable 
[D-4-GigabitEthernet0/0/6]stp edged-port enable 
[D-4-GigabitEthernet0/0/7]stp edged-port enable 

s

[D-4]port-group group-member g0/0/8 to g0/0/12
[D-4-port-group]port link-type access 
[D-4-GigabitEthernet0/0/8]port link-type access 
[D-4-GigabitEthernet0/0/9]port link-type access 
[D-4-GigabitEthernet0/0/10]port link-type access 
[D-4-GigabitEthernet0/0/11]port link-type access 
[D-4-GigabitEthernet0/0/12]port link-type access 
[D-4-port-group]port default vlan 34
[D-4-GigabitEthernet0/0/8]port default vlan 34
[D-4-GigabitEthernet0/0/9]port default vlan 34
[D-4-GigabitEthernet0/0/10]port default vlan 34
[D-4-GigabitEthernet0/0/11]port default vlan 34
[D-4-GigabitEthernet0/0/12]port default vlan 34  
[D-4-port-group]stp edged-port enable 
[D-4-GigabitEthernet0/0/8]stp edged-port enable 
[D-4-GigabitEthernet0/0/9]stp edged-port enable 
[D-4-GigabitEthernet0/0/10]stp edged-port enable 
[D-4-GigabitEthernet0/0/11]stp edged-port enable 
[D-4-GigabitEthernet0/0/12]stp edged-port enable 

s

[D-4]port-group group-member g0/0/13 to g0/0/22 
[D-4-port-group]port link-type acc
[D-4-GigabitEthernet0/0/13]port link-type acc
[D-4-GigabitEthernet0/0/14]port link-type acc
[D-4-GigabitEthernet0/0/15]port link-type acc
[D-4-GigabitEthernet0/0/16]port link-type acc
[D-4-GigabitEthernet0/0/17]port link-type acc
[D-4-GigabitEthernet0/0/18]port link-type acc
[D-4-GigabitEthernet0/0/19]port link-type acc
[D-4-GigabitEthernet0/0/20]port link-type acc
[D-4-GigabitEthernet0/0/21]port link-type acc
[D-4-GigabitEthernet0/0/22]port link-type acc  
[D-4-port-group]port default vlan 35
[D-4-GigabitEthernet0/0/13]port default vlan 35
[D-4-GigabitEthernet0/0/14]port default vlan 35
[D-4-GigabitEthernet0/0/15]port default vlan 35
[D-4-GigabitEthernet0/0/16]port default vlan 35
[D-4-GigabitEthernet0/0/17]port default vlan 35
[D-4-GigabitEthernet0/0/18]port default vlan 35
[D-4-GigabitEthernet0/0/19]port default vlan 35
[D-4-GigabitEthernet0/0/20]port default vlan 35
[D-4-GigabitEthernet0/0/21]port default vlan 35
[D-4-GigabitEthernet0/0/22]port default vlan 35  
[D-4-port-group]stp edged-port enable 
[D-4-GigabitEthernet0/0/13]stp edged-port enable 
[D-4-GigabitEthernet0/0/14]stp edged-port enable 
[D-4-GigabitEthernet0/0/15]stp edged-port enable 
[D-4-GigabitEthernet0/0/16]stp edged-port enable 
[D-4-GigabitEthernet0/0/17]stp edged-port enable 
[D-4-GigabitEthernet0/0/18]stp edged-port enable 
[D-4-GigabitEthernet0/0/19]stp edged-port enable 
[D-4-GigabitEthernet0/0/20]stp edged-port enable 
[D-4-GigabitEthernet0/0/21]stp edged-port enable 
[D-4-GigabitEthernet0/0/22]stp edged-port enable 

9. C-1为vlanif 31、33的master，D-2为backup

[C-1]vlan batch 31 to 100 
[C-1]vlan batch 31 to 36 100 
[C-1]interface Vlanif 31
[C-1-Vlanif31]ip address 10.1.31.2 24
[C-1-Vlanif31]vrrp vrid 1 virtual-ip 10.1.31.254
[C-1-Vlanif31]vrrp vrid 1 priority 105

[C-1]interface Vlanif 33
[C-1-Vlanif33]ip address 10.1.33.2 24
[C-1-Vlanif33]vrrp vrid 1 virtual-ip 10.1.33.254  
[C-1-Vlanif33]vrrp vrid 1 priority 105

s

[C-1]interface Vlanif 32 
[C-1-Vlanif32]ip address 10.1.32.2 24
[C-1-Vlanif32]vrrp vrid 1 virtual-ip 10.1.32.254

s

[C-1]interface Vlanif 34
[C-1-Vlanif34]ip address 10.1.34.2 24
[C-1-Vlanif34]vrrp vrid 1 virtual-ip 10.1.34.254

s

[C-1]interface Vlanif 35
[C-1-Vlanif35]ip address 10.1.35.2 24
[C-1-Vlanif35]vrrp vrid 1 virtual-ip 10.1.35.254

10. C-2为vlanif 32、34、35的master，D-1为backup

[D-4]interface Vlanif 31 
[D-4-Vlanif31]ip address 10.1.31.1 24
[D-4-Vlanif31]vrrp vrid 1 virtual-ip 10.1.31.254

s

[D-4]interface Vlanif 33
[D-4-Vlanif33]ip address 10.1.33.1 24
[D-4-Vlanif33]vrrp vrid 1 virtual-ip 10.1.33.254

s

[D-4]interface Vlanif 32
[D-4-Vlanif32]ip address 10.1.32.1 24
[D-4-Vlanif32]vrrp vrid 1 virtual-ip 10.1.32.254
[D-4-Vlanif32]vrrp vrid 1 priority 105

s

[D-4]interface Vlanif 34
[D-4-Vlanif34]ip address 10.1.34.1 24
[D-4-Vlanif34]vrrp vrid 1 virtual-ip 10.1.34.254
[D-4-Vlanif34]vrrp vrid 1 priority 105

s

[D-4]interface  Vlanif 35
[D-4-Vlanif35]ip address 10.1.35.1 24
[D-4-Vlanif35]vrrp vrid 1 virtual-ip 10.1.35.254
[D-4-Vlanif35]vrrp vrid 1 priority 105

11. C-1与C-2的VRRP需监控上行链路，双上行都down时切换网关，抢占延时为20s

[C-1]interface Vlanif 31

[C-1-Vlanif31]vrrp vrid 1 track interface g0/0/9 reduced 3

[C-1-Vlanif31]vrrp vrid 1 preempt-mode timer delay 20

s

[C-1]interface Vlanif 32
[C-1-Vlanif32]vrrp vrid 1 track interface g0/0/9 reduced 3
[C-1-Vlanif32]vrrp vrid 1 preempt-mode timer delay 20

s

[C-1]interface Vlanif 33
[C-1-Vlanif33]vrrp vrid 1 track interface g0/0/9 reduced 3
[C-1-Vlanif33]vrrp vrid 1 preempt-mode timer delay 20

s

[C-1]interface Vlanif 34
[C-1-Vlanif34]vrrp vrid 1 track interface g0/0/9 reduced 3
[C-1-Vlanif34]vrrp vrid 1 preempt-mode timer delay 20

s

[C-1]interface Vlanif 35
[C-1-Vlanif35]vrrp vrid 1 track interface g0/0/9 reduced 3
[C-1-Vlanif35]vrrp vrid 1 preempt-mode timer delay 20

.昕..
关注
华为云计算产品系列 | 华为HCIE-Cloud Computing模拟考试环境搭建
背锅神童的博客
04-03 1281
HCIE、Cloud Computing、华为、华为云
HCIP --- 真机实验
weixin_58299245的博客
08-17 1929
Eth-Trunk、MSTP、边缘接口、BPDU保护、SVI、VRRP
HCIP真机实验
weixin_72202802的博客
04-28 2242
通过本次实验我明白了放通VLAN时选择逐个放通而不是全部放通（all）的原因是逐个放通VLAN可以提供更精细的控制和更好的安全性也可以减少消耗。通过逐个放通，网络管理员可以明确地知道哪些VLAN需要被放通，哪些不需要，从而避免不必要的安全风险。配置之前关闭交换机配置可以实现对特定设备的隔离。例如，当需要对某个设备进行排查或者修复时，关闭交换机配置可以避免其他设备的干扰，提高维护效率。关闭交换机配置可以增强网络的安全性。
[HCIP] 07 - BGP路由协议
weixin_42728126的博客
08-05 821
一、 BGP 介绍 路由分为IGP内部路由协议和EGP外部路由协议，在EGP中引入了AS（自治系统），在IGP中没有AS，路由协议创建的是进程，只有BGP会用到AS。 二、 BGP作用 AS内IGP，AS间EGP： AS间都是使用BGP联通，AS内部可以使用：OSPF、RIP、ISIS，AS之间无需感知，只需要知道在一个AS内。 三、路由协议发展史 四、AS自治系统 如： 五、BGP特点 RIP ：UDP ，端口520 ，环境小，路由少，UDP快； OSPF： UDP，端口 89。
网工必考：HCIP认证（华为认证ICT高级网络工程师）
热门推荐
XMWS-IT
10-27 1万+
华为HCIP课程介绍 HCIP认证概述 HCIP-R&S认证定位于中小型网络的构建和管理。 HCIP-R&S认证包括但不限于：网络基础知识，交换机和路由器原理，TCP/IP协议簇，路由协议，访问控制，eSight、Agile Controller产品介绍，SDN、VXLAN、NFV的基本知识等。 通过HCIP-R&S认证，将证明您对中小型网络有全面深入...
HCIA-Datacom 个人学习笔记
weixin_50845482的博客
08-14 531
display interface Ethernet 0/0/0 只查看e0/0/0。
HCIP真机实验{好垃圾请大神指点一下}
2303_80156525的博客
08-02 215
要求：R1-R2-R3-R4-R5 RIP 100 运行版本2 R6-R7 RIP 200 运行版本1。2.R1创建环回 172.16.1.1/24 172.16.2.1/24 172.16.3.1/24、6.R1 telnet R2环回实际telnet 到R7上。4.减少路由条目数量，R1-R2之间增加路由传递安全性。7.R6-R7路由器丌能学习到达R1环回路由。5.R5创建一个环回模拟运营商，丌能通告。3.要求R3使用R2访问R1环回。有的错了请大神指点改正一下。其余根据此里按需配置。
【HCIP】OSPF综合实验报告
2201_75944685的博客
04-16 1226
划到/30可以划分64条/30的网段，每条+4。合理划分172.16.0.0/16网段。划到19网段，共8个取6个，2个备用。划到/29可以划分32条/29的网段。
hcip 交换实验1
m0_62383843的博客
08-08 175
VLAN配置
HCIA-HarmonyOS Device Developer V1.0 文档与实验手册.zip
02-24
获得 HCIA-HarmonyOS 认证后，开发者可以进一步提升自己的 HarmonyOS 技能，例如向 HCIP-HarmonyOS Application Developer 或 HCDP-HarmonyOS Distributed Developer 进阶，以满足更高级别的开发需求。 总之，...
hcip真机实验阶段二
08-27
hcip真机实验阶段二包括配置阶段和实验配置。配置阶段主要包括底层配置、路由配置、路由策略、测试和排错。底层配置是指对设备进行底层设置，而路由配置则是配置路由信息。在实验配置中，主要进行三层配置。底层配置...
HCIP-IERS部署企业级路由交换网络_组播协议_组播、IGMP及PIM DM协议
君逍遥o
07-25 175
你是公司的网络管理员。公司准备使用组播来进行一些业务的转发。在当前网络上，网络规模较小，你决定使用PIM的DM模式来实现组播路由信息的学习。组播转发的实现过程中，你需要考虑到主机应用对IGMP不同版本的兼容，同时需要考虑使用合适的方式测试网络中组播是否正常工作。为了提升网络的效率和安全性，你采用了PIM DM的一些手段，包括PIM邻居的控制、嫁接和其他安全措施。同时实现网络的组播转发之前，你也遇到了一些网络故障，经过一些故障排除步骤，最终网络正常工作了。
Linux 再入门整理：详解 /etc/fstab 文件
一只奋斗的猪
10-01 1229
`/etc/fstab` 文件是 Linux 系统中用于定义和管理文件系统的挂载信息的配置文件。它的作用是告诉系统在启动时，应该如何自动挂载各种文件系统。挂载是 Linux 操作系统中一种将存储设备与目录树关联的操作。通过挂载，存储设备中的文件可以通过目录访问。
毕业设计——springboot+netty+websocket实现一个简单的ChatGpt机器人聊天
【CSDN】
09-29 919
WebSocket是html5开始浏览器和服务端进行全双工通信的网络技术。在该协议下，与服务端只需要一次握手，之后建立一条快速通道，开始互相传输数据，实际是基于TCP双向全双工，比http半双工提高了很大的性能，常用于网络在线聊天室等。申请key的教程在项目resources目录readme.md文件中。1、接入了chatGpt接口，只需要替换成自己的key就行。2、实现了与机器人的聊天，可以优化做成智能客服。
从零开始实现RPC框架---------项目介绍及环境准备
qq_41934502的博客
10-02 413
从零开始实现rpc架构项目介绍
【华为HCIP实战课程六】OSPF邻居关系排错网络子网掩码问题，网络工程师
最新发布
Bert_Wang的博客
10-06 119
因为R3和R4直连的链路为PPP链路，则可以学到对端链路的32位主机路由，可以正常建立OSPF邻居关系。R3和R4虽然不在同一网段，此时R3是可以ping通R4的互联地址 10.1.34.4。R3仍然可以正常和R4建立邻居关系，因为此时虽然没有对端直连路由但是有对端ospf路由。R4可以查看对端的接口的ospf路由，可以正常建立ospf邻居关系。此时我们把R3和R4链路类型更改为HDLC。R3和R4已经建立正常的ospf邻居关系。更改IP地址前R3接口IP地址。
【STM32】 TCP/IP通信协议（3）--LwIP网络接口
m0_73409202的博客
09-30 653
LwIP协议栈支持多种不同的，由于网卡是直接跟硬件平台打交道，硬件不同则处理也是不同。那Iwip如何兼容这些不同的网卡呢？LwIP提供统一的接口，底层函数需要用户自行完成，例如网卡的初始化、接收和发送数据等。当LwIP底层接收到网络数据时，需要经过层层递交才会传入内核处理；相反，LwIP发送数据时也会调用网卡的发送数据。对于没有接触过LwIP的人新手来说，我们如何编写这个底层代码呢？不用担心，LwIP提供了一个ethernetif.c 文件作为底层接口的驱动模版。用户只根据自己的网络设备进行参照修改即可。
HTTP协议讲解，请求报文与响应报文都是什么？网络控制台查看HTTP请求
m0_70325779的博客
09-30 974
服务器拒绝用户请求，有可能因为用户的权限不足，没有相应的访问权限，紧接着刚才的401，401是用户没有验证身份，如果用户验证了身份，但是没有访问权限，就会爆出403。而我们本地启动自己的项目代码的时候，是可以看到HTML文件和JS文件的，还可以在JS文件中打断点进行调试，如下图，我启动了本地的前端项目，可以看到这里就有JS文件和HTML文件，我们将鼠标点击在行头，就可以标记断点进行调试，如下图蓝色的三行几位断点，当JS代码运行到此处时，就会卡住，和我们使用IDEA进行DEBUG一样的道理。
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值