eNSP下园区网综合实验分步配置（2）MSTP、VRRP、BFD

筐瓢大师小吕

已于 2022-04-25 21:30:25 修改

阅读量3.5k

点赞数 2

分类专栏：数通

于 2022-04-21 22:13:09 首次发布

本文链接：https://blog.csdn.net/m0_51770049/article/details/124027330

版权

MSTP VRRP BFD 网络冗余流量控制

关键词由CSDN通过智能技术生成

数通专栏收录该内容

47 篇文章 30 订阅

订阅专栏

MSTP配置：

//所有核心、汇聚设备及服务器交换机（SW1、SW2、SW3、SW4、SW8）都做如下命令，接入层设备可以不做。
[SW]stp region-configuration 
[SW-mst-region]region-name A //mst域的名称
[SW-mst-region]revision-level 1 //修订号为1
[SW-mst-region]instance 1 vlan 2 3 200 //将vlan 2 3 200映射到实例1
[SW-mst-region]instance 2 vlan 4 5 //将vlan 4 5映射到实例2
[SW-mst-region]active region-configuration //激活配置
----------------
SW1（核心）：
[HeXin-SW1]stp instance 1 root primary //该设备成为实例1的根桥
[HeXin-SW1]stp instance 2 root secondary //该设备成为实例2的备份根桥

SW2（核心）：
[HeXin-SW2]stp instance 2 root primary 
[HeXin-SW2]stp instance 1 root secondary

在SW3（汇聚）上查看MSTP摘要：

[HuiJu-SW3]dis stp bri
 MSTID  Port                        Role  STP State     Protection
   0    GigabitEthernet0/0/1        DESI  FORWARDING      NONE
   0    GigabitEthernet0/0/4        DESI  FORWARDING      NONE
   0    GigabitEthernet0/0/5        DESI  FORWARDING      NONE
   0    Eth-Trunk1                  DESI  FORWARDING      NONE
   1    GigabitEthernet0/0/1        DESI  FORWARDING      NONE
   1    GigabitEthernet0/0/4        ROOT  FORWARDING      NONE
   1    GigabitEthernet0/0/5        ALTE  DISCARDING      NONE
   1    Eth-Trunk1                  DESI  FORWARDING      NONE
   2    GigabitEthernet0/0/1        DESI  FORWARDING      NONE
   2    GigabitEthernet0/0/4        DESI  FORWARDING      NONE
   2    GigabitEthernet0/0/5        DESI  FORWARDING      NONE
   2    Eth-Trunk1                  DESI  FORWARDING      NONE

//注：请注意查看vlan200是否创建

如此，达到vlan 2 3的流量通过SW3 Gigabitethernet 0/0/4到达SW1；

vlan 4 5的流量通过SW4 Gigabitethernet 0/0/1到达SW2。（画图）

STP优化：

边缘端口配置：

SW5（接入）：
[JieRu-SW5]int Ethernet0/0/2	
[JieRu-SW5-Ethernet0/0/2]stp edged-port enable 

SW6（接入）：
[JieRu-SW6]int Ethernet 0/0/3
[JieRu-SW6-Ethernet0/0/3]stp edged-port enable 

SW7（接入）：
[JieRu-SW7]int Ethernet0/0/1
[JieRu-SW7-Ethernet0/0/1]stp edged-port enable
[JieRu-SW7-Ethernet0/0/1]qu
[JieRu-SW7]int eth	
[JieRu-SW7]int Ethernet0/0/2
[JieRu-SW7-Ethernet0/0/2]stp edged-port enable

SW8：
[SW8]int Ethernet0/0/3
[SW8-Ethernet0/0/3]stp edged-port enable
[SW8-Ethernet0/0/3]qu
[SW8]int Ethernet0/0/4
[SW8-Ethernet0/0/4]stp edged-port enable 
[SW8-Ethernet0/0/4]qu

取消核心设备上联口的STP功能：

该接口的Down及Up不影响生成树计算（该接口也不会产生环路）。

SW1（核心）：
[HeXin-SW1]int GigabitEthernet 0/0/6
[HeXin-SW1-GigabitEthernet0/0/6]stp disable

SW2（核心）：
[HeXin-SW2]int GigabitEthernet 0/0/6
[HeXin-SW2-GigabitEthernet0/0/6]stp disable

捆绑链路设置静态Cost值：

SW1及SW2（核心）：
[HeXin-SW1]int Eth-Trunk 2
[HeXin-SW1-Eth-Trunk2]stp instance 1 cost 10000
[HeXin-SW1-Eth-Trunk2]stp instance 2 cost 10000

[HeXin-SW2]int Eth-Trunk 2
[HeXin-SW2-Eth-Trunk2]stp instance 1 cost 10000
[HeXin-SW2-Eth-Trunk2]stp instance 2 cost 10000

VRRP配置：

SW1（核心）：
[HeXin-SW1]int vlanif 2
[HeXin-SW1-Vlanif2]ip add 192.168.2.254 24
[HeXin-SW1-Vlanif2]vrrp vrid 2 virtual-ip 192.168.2.1
[HeXin-SW1-Vlanif2]vrrp vrid 2 priority 105
[HeXin-SW1-Vlanif2]qu
[HeXin-SW1]int vlanif 3
[HeXin-SW1-Vlanif3]ip add 192.168.3.254 24
[HeXin-SW1-Vlanif3]vrrp vrid 3 virtual-ip 192.168.3.1
[HeXin-SW1-Vlanif3]vrrp vrid 3 priority 105
[HuiJu-SW3-Vlanif3]qu
[HeXin-SW1]interface vlanif 200
[HeXin-SW1-Vlanif200]ip add 192.168.200.254 24
[HeXin-SW1-Vlanif200]vrrp vrid 200 virtual-ip 192.168.200.1
[HeXin-SW1-Vlanif200]vrrp vrid 200 priority 105
[HeXin-SW1-Vlanif200]qu
[HeXin-SW1]int vlanif 4
[HeXin-SW1-Vlanif4]ip add 192.168.4.254 24
[HeXin-SW1-Vlanif4]vrrp vrid 4 virtual-ip 192.168.4.1
[HeXin-SW1-Vlanif4]qu
[HeXin-SW1]int vlanif 5
[HeXin-SW1-Vlanif5]ip add 192.168.5.254 24
[HeXin-SW1-Vlanif5]vrrp vrid 5 virtual-ip 192.168.5.1
[HeXin-SW1-Vlanif5]qu
[HeXin-SW1]int vlanif 800
[HeXin-SW1-Vlanif800]ip add 192.168.12.2 24
[HeXin-SW1-Vlanif800]qu

SW2（核心）：
[HeXin-SW2]int vlanif 4
[HeXin-SW2-Vlanif4]ip add 192.168.4.253 24
[HeXin-SW2-Vlanif4]vrrp vrid 4 virtual-ip 192.168.4.1
[HeXin-SW2-Vlanif4]vrrp vird 4 priority 105
[HeXin-SW2-Vlanif4]quit
[HeXin-SW2]int vlanif 5
[HeXin-SW2-Vlanif5]ip add 192.168.5.253 24
[HeXin-SW2-Vlanif5]vrrp vrid 5 virtual-ip 192.168.5.1
[HeXin-SW2-Vlanif5]vrrp vird 5 priority 105
[HeXin-SW2-Vlanif5]qu
[HeXin-SW2]int vlanif 200
[HeXin-SW2-Vlanif200]ip add 192.168.200.253 24
[HeXin-SW2-Vlanif200]vrrp vrid 200 virtual-ip 192.168.200.1
[HeXin-SW2]int vlanif 2
[HeXin-SW2-Vlanif2]ip add 192.168.2.253 24
[HeXin-SW2-Vlanif2]vrrp vrid 2 virtual-ip 192.168.2.1
[HeXin-SW2-Vlanif2]qu
[HeXin-SW2]int vlanif 3
[HeXin-SW2-Vlanif3]ip add 192.168.3.253 24
[HeXin-SW2-Vlanif3]vrrp vrid 3 virtual-ip 192.168.3.1
[HeXin-SW2-Vlanif3]qu
[HeXin-SW2]int vlanif 801
[HeXin-SW2-Vlanif801]ip add 192.168.23.2 24
[HeXin-SW2-Vlanif801]qu

在SW1（核心）上查看VRRP摘要：

[HeXin-SW1]dis vrrp brief
VRID  State        Interface                Type     Virtual IP     
----------------------------------------------------------------
2     Master       Vlanif2                  Normal   192.168.2.1    
3     Master       Vlanif3                  Normal   192.168.3.1    
4     Backup       Vlanif4                  Normal   192.168.4.1    
5     Backup       Vlanif5                  Normal   192.168.5.1    
200   Master       Vlanif200                Normal   192.168.200.1  
----------------------------------------------------------------
Total:5     Master:3     Backup:2     Non-active:0

在SW2（核心）上查看VRRP摘要：

[HeXin-SW2]dis vrrp bri
VRID  State        Interface                Type     Virtual IP     
----------------------------------------------------------------
2     Backup       Vlanif2                  Normal   192.168.2.1    
3     Backup       Vlanif3                  Normal   192.168.3.1    
4     Master       Vlanif4                  Normal   192.168.4.1    
5     Master       Vlanif5                  Normal   192.168.5.1    
200   Backup       Vlanif200                Normal   192.168.200.1  
----------------------------------------------------------------
Total:5     Master:2     Backup:3     Non-active:0

此时PC1能访问其网关（在DHCP未配置前先设置静态地址192.168.2.2/24，网关为192.168.2.1）

PC>ping 192.168.2.1

Ping 192.168.2.1: 32 data bytes, Press Ctrl_C to break
From 192.168.2.1: bytes=32 seq=1 ttl=255 time=250 ms
From 192.168.2.1: bytes=32 seq=2 ttl=255 time=47 ms
From 192.168.2.1: bytes=32 seq=3 ttl=255 time=46 ms
From 192.168.2.1: bytes=32 seq=4 ttl=255 time=63 ms
From 192.168.2.1: bytes=32 seq=5 ttl=255 time=47 ms

--- 192.168.2.1 ping statistics ---
  5 packet(s) transmitted
  5 packet(s) received
  0.00% packet loss
  round-trip min/avg/max = 46/90/250 ms

BFD配置：

SW1（核心）：
[HeXin-SW1]bfd //使能BFD
[HeXin-SW1-bfd]qu
[HeXin-SW1]bfd B bind peer-ip 192.168.12.1 source-ip 192.168.12.2 auto
//注意，此时路由器接口还未做配置
[HeXin-SW1-bfd-session-b]commit 

R1：
<Huawei>sys
[Huawei]sysname R1
[R1]un in en
[R1]int GigabitEthernet 0/0/0
[R1-GigabitEthernet0/0/0]ip add 192.168.12.1 24
[R1-GigabitEthernet0/0/0]qu
[R1]int GigabitEthernet 0/0/1
[R1-GigabitEthernet0/0/1]ip add 192.168.23.1 24
[R1-GigabitEthernet0/0/1]qu
//注意，Gigabitethernet 0/0/2不做配置（PPPOE拨号）
[R1]int GigabitEthernet 2/0/0
[R1-GigabitEthernet2/0/0]ip add 13.1.1.1 24
[R1-GigabitEthernet2/0/0]qu
[R1]int GigabitEthernet 3/0/0
[R1-GigabitEthernet3/0/0]ip add 14.1.1.1 24
[R1-GigabitEthernet3/0/0]qu
[R1]bfd //使能BFD
[R1-bfd]qu
[R1]bfd B bind peer-ip 192.168.12.2 source-ip 192.168.12.1 auto
[R1-bfd-session-b]commit

路由器型号采用AR3260（策略路由），eNSP版本为1.3.00.100。

在SW1（核心）上查看BFD摘要：

[HeXin-SW1]dis bfd session all
--------------------------------------------------------------------------------
Local Remote     PeerIpAddr      State     Type        InterfaceName            
--------------------------------------------------------------------------------

8192  8192       192.168.12.1    Up        S_AUTO_PEER       -                  
--------------------------------------------------------------------------------
     Total UP/DOWN Session Number : 1/0

State为UP。

SW1（核心）：
[HeXin-SW1]int vlanif 2
[HeXin-SW1-Vlanif2]vrrp vrid 2 track bfd-session session-name B
[HeXin-SW1-Vlanif2]vrrp vrid 2 track interface GigabitEthernet 0/0/1
[HeXin-SW1-Vlanif2]qu
[HeXin-SW1]int vlanif 3
[HeXin-SW1-Vlanif3]vrrp vrid 3 track bfd-session session-name B
[HeXin-SW1-Vlanif3]vrrp vrid 3 track interface GigabitEthernet 0/0/1
[HeXin-SW1-Vlanif3]qu
[HeXin-SW1]int vlanif 200
[HeXin-SW1-Vlanif200]vrrp vrid 200 track bfd-session session-name B
[HeXin-SW1-Vlanif200]vrrp vrid 200 track interface GigabitEthernet 0/0/5
[HeXin-SW1-Vlanif200]qu

SW2（核心）与路由器之间的BFD配置：

SW2（核心）：
[HeXin-SW2]bfd
[HeXin-SW2-bfd]qu
[HeXin-SW2]bfd C bind peer-ip 192.168.23.1 source-ip 192.168.23.2 auto	
[HeXin-SW2-bfd-session-c]commit 

R1：
[R1]bfd C bind peer-ip 192.168.23.2 source-ip 192.168.23.1 auto
[R1-bfd-session-c]commit 

同理，可在SW2上通过display bfd session all查看摘要

[HeXin-SW2]int vlanif 4
[HeXin-SW2-Vlanif4]vrrp vrid 4 track bfd-session session-name C
[HeXin-SW2-Vlanif4]vrrp vrid 4 track interface GigabitEthernet 0/0/3
[HeXin-SW2-Vlanif4]qu
[HeXin-SW2]int vlanif 5
[HeXin-SW2-Vlanif5]vrrp vrid 5 track bfd-session session-name C
[HeXin-SW2-Vlanif5]vrrp vrid 5 track interface GigabitEthernet 0/0/3
[HeXin-SW2-Vlanif5]qu