实施策略:
中心交换机采用HSRP协议,使catalyst5509和catalyst6509实现双机冗余.把所用VLAN分为两部分,一小部分由5509承担,剩余的由6509承担,然后把5509和6509配置在不同的HSRP组,互为冗余,而且实现了负载均衡.在5509和6509之间,采用千兆双链路,这样增加了网络的性能和韧性。当任一交换机失效后,另一交换机立即由备份状态转为活跃状态来转发数据,而不至于使整个网络瘫痪.为了提高在故障状态的应急反应能力,在服务器端口和uplink口上采用快速反应策略.而所有这些,对用户是完全透明的.
5509交换机做VLAN50,VLAN51,VLAN70,VLAN71,VLAN72,VLAN73的主交换机,6509做备份交换机;6509交换机做VLAN1,VLAN2,VLAN4,VLAN5,VLAN6, VLAN7,VLAN8,VLAN9,VLAN10,VLAN100的主交换机,5509做备份交换机.这样就实现了中心交换机的冗余,而且采用了负载均衡的技术,提高了整个网络的性能.服务器采用双网卡,当一台交换机失效后,网卡自动切换.
1.5509的配置。(黑体部分为修改的新配置)
5509RSM配置
version 11.3
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname 5509RSM
!
enable secret 5 $1$i2lO$v2zHhrvi0ZBfxAHdnhoGa0
!
ip subnet-zero
mls rp ip
!
!
interface Vlan1
ip address 133.3.1.198 255.255.255.0
standby 1 ip 133.3.1.199
standby 1 priority 100
standby 1 preempt
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp management-interface
mls rp ip
!
interface Vlan2
ip address 133.3.2.198 255.255.255.0
standby 1 ip 133.3.2.199
standby 1 priority 100
standby 1 preempt
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan4
ip address 133.3.4.198 255.255.255.0
standby 1 ip 133.3.4.199
standby 1 priority 100
standby 1 preempt
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan5
ip address 133.3.5.198 255.255.255.0
standby 1 ip 133.3.5.199
standby 1 priority 100
standby 1 preempt
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan6
ip address 133.3.6.198 255.255.255.0
standby 1 ip 133.3.6.199
standby 1 priority 100
standby 1 preempt
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan7
ip address 133.3.7.198 255.255.255.0
standby 1 ip 133.3.7.199
standby 1 priority 100
standby 1 preempt
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan8
ip address 133.3.8.198 255.255.255.0
standby 1 ip 133.3.8.199
standby 1 priority 100
standby 1 preempt
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan9
ip address 133.3.9.198 255.255.255.0
standby 1 ip 133.3.9.199
standby 1 priority 100
standby 1 preempt
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan10
ip address 133.3.10.198 255.255.255.0
standby 1 ip 133.3.10.199
standby 1 priority 100
standby 1 preempt
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan11
ip address 133.3.11.198 255.255.255.0
standby 2 ip 133.3.11.199
standby 2 priority 110
standby 2 preempt
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan12
ip address 133.3.12.198 255.255.255.0
standby 2 ip 133.3.12.199
standby 2 priority 110
standby 2 preempt
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan13
ip address 133.3.13.198 255.255.255.0
standby 2 ip 133.3.13.199
standby 2 priority 110
standby 2 preempt
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan14
ip address 133.3.14.198 255.255.255.0
standby 2 ip 133.3.14.199
standby 2 priority 110
standby 2 preempt
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan15
ip address 133.3.15.198 255.255.255.0
standby 2 ip 133.3.15.199
standby 2 priority 110
standby 2 preempt
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan16
ip address 133.3.16.198 255.255.255.0
standby 2 ip 133.3.16.199
standby 2 priority 110
standby 2 preempt
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan50
ip address 133.3.50.198 255.255.255.0
standby 2 ip 133.3.50.199
standby 2 priority 110
standby 2 preempt
ip access-group 100 in
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan51
ip address 133.3.51.198 255.255.255.0
standby 2 ip 133.3.51.199
standby 2 priority 110
standby 2 preempt
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan70
ip address 133.3.70.198 255.255.255.0
standby 2 ip 133.3.70.199
standby 2 priority 110
standby 2 preempt
ip access-group 102 in
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan71
ip address 133.3.71.198 255.255.255.0
standby 2 ip 133.3.71.199
standby 2 priority 110
standby 2 preempt
ip access-group 103 in
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan72
ip address 133.3.72.198 255.255.255.0
standby 2 ip 133.3.72.199
standby 2 priority 110
standby 2 preempt
ip access-group 104 in
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan73
ip address 133.3.73.198 255.255.255.0
standby 2 ip 133.3.73.199
standby 2 priority 110
standby 2 preempt
ip access-group 105 in
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan96
ip address 133.3.96.199 255.255.255.0
shutdown
mls rp ip
!
interface Vlan97
ip address 133.3.97.198 255.255.255.0
standby 2 ip 133.3.97.199
standby 2 priority 110
standby 2 preempt
ip access-group 106 in
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan98
ip address 133.3.98.198 255.255.255.0
standby 2 ip 133.3.98.199
standby 2 priority 110
standby 2 preempt
no ip proxy-arp
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan99
ip address 133.3.99.198 255.255.255.0
standby 2 ip 133.3.99.199
standby 2 priority 110
standby 2 preempt
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan100
ip address 133.3.100.198 255.255.255.0
standby 1 ip 133.3.100.199
standby 1 priority 100
standby 1 preempt
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
ip classless
ip route 0.0.0.0 0.0.0.0 133.3.98.1
ip route 202.97.178.224 255.255.255.248 133.3.51.100
!
access-list 106 deny ip 133.3.97.0 0.0.0.255 133.3.1.0 0.0.0.255
access-list 106 deny ip 133.3.97.0 0.0.0.255 133.3.2.0 0.0.0.255
access-list 106 deny ip 133.3.97.0 0.0.0.255 133.3.4.0 0.0.0.255
access-list 106 deny ip 133.3.97.0 0.0.0.255 133.3.5.0 0.0.0.255
access-list 106 deny ip 133.3.97.0 0.0.0.255 133.3.6.0 0.0.0.255
access-list 106 deny ip 133.3.97.0 0.0.0.255 133.3.7.0 0.0.0.255
access-list 106 deny ip 133.3.97.0 0.0.0.255 133.3.8.0 0.0.0.255
access-list 106 deny ip 133.3.97.0 0.0.0.255 133.3.9.0 0.0.0.255
access-list 106 deny ip 133.3.97.0 0.0.0.255 133.3.10.0 0.0.0.255
access-list 106 deny ip 133.3.97.0 0.0.0.255 133.3.50.0 0.0.0.255
access-list 106 deny ip 133.3.97.0 0.0.0.255 133.3.51.0 0.0.0.255
access-list 106 deny ip 133.3.97.0 0.0.0.255 133.3.70.0 0.0.0.255
access-list 106 deny ip 133.3.97.0 0.0.0.255 133.3.71.0 0.0.0.255
access-list 106 deny ip 133.3.97.0 0.0.0.255 133.3.72.0 0.0.0.255
access-list 106 deny ip 133.3.97.0 0.0.0.255 133.3.73.0 0.0.0.255
access-list 106 deny ip 133.3.97.0 0.0.0.255 133.3.100.0 0.0.0.255
access-list 106 permit ip any any
access-list 106 permit ip 133.3.97.0 0.0.0.255 133.3.1.0 0.0.0.255
!
line con 0
logging synchronous
transport input none
line aux 0
line vty 0 4
password wcq
login
!
end
2.6509的配置
6509RSM配置 (黑体字是HSRP配置)
hostname 6509RSM
!
enable secret 5 $1$i2lO$v2zHhrvi0ZBfxAHdnhoGa0
!
ip subnet-zero
mls rp ip
!
!
interface Vlan1
ip address 133.3.1.200 255.255.255.0
standby 1 ip 133.3.1.199
standby 1 priority 110
standby 1 preempt
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp management-interface
mls rp ip
!
interface Vlan2
ip address 133.3.2.200 255.255.255.0
standby 1 ip 133.3.2.199
standby 1 priority 110
standby 1 preempt
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan4
ip address 133.3.4.200 255.255.255.0
standby 1 ip 133.3.4.199
standby 1 priority 110
standby 1 preempt
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan5
ip address 133.3.5.200 255.255.255.0
standby 1 ip 133.3.5.199
standby 1 priority 110
standby 1 preempt
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan6
ip address 133.3.6.200 255.255.255.0
standby 1 ip 133.3.6.199
standby 1 priority 110
standby 1 preempt
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan7
ip address 133.3.7.200 255.255.255.0
standby 1 ip 133.3.7.199
standby 1 priority 110
standby 1 preempt
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan8
ip address 133.3.8.200 255.255.255.0
standby 1 ip 133.3.8.199
standby 1 priority 110
standby 1 preempt
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan9
ip address 133.3.9.200 255.255.255.0
standby 1 ip 133.3.9.199
standby 1 priority 110
standby 1 preempt
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan10
ip address 133.3.10.200 255.255.255.0
standby 1 ip 133.3.10.199
standby 1 priority 110
standby 1 preempt
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan11
ip address 133.3.11.200 255.255.255.0
standby 2 ip 133.3.11.199
standby 2 priority 100
standby 2 preempt
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan12
ip address 133.3.12.200 255.255.255.0
standby 2 ip 133.3.12.199
standby 2 priority 100
standby 2 preempt
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan13
ip address 133.3.13.200 255.255.255.0
standby 2 ip 133.3.13.199
standby 2 priority 100
standby 2 preempt
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan14
ip address 133.3.14.200 255.255.255.0
standby 2 ip 133.3.14.199
standby 2 priority 100
standby 2 preempt
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan15
ip address 133.3.15.200 255.255.255.0
standby 2 ip 133.3.15.199
standby 2 priority 100
standby 2 preempt
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan16
ip address 133.3.16.200 255.255.255.0
standby 2 ip 133.3.16.199
standby 2 priority 100
standby 2 preempt
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan50
ip address 133.3.50.200 255.255.255.0
standby 2 ip 133.3.50.199
standby 2 priority 100
standby 2 preempt
ip access-group 100 in
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan51
ip address 133.3.51.200 255.255.255.0
standby 2 ip 133.3.51.199
standby 2 priority 100
standby 2 preempt
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan70
ip address 133.3.70.200 255.255.255.0
standby 2 ip 133.3.70.199
standby 2 priority 100
standby 2 preempt
ip access-group 102 in
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan71
ip address 133.3.71.200 255.255.255.0
standby 2 ip 133.3.71.199
standby 2 priority 100
standby 2 preempt
ip access-group 103 in
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan72
ip address 133.3.72.200 255.255.255.0
standby 2 ip 133.3.72.199
standby 2 priority 100
standby 2 preempt
ip access-group 104 in
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan73
ip address 133.3.73.200 255.255.255.0
standby 2 ip 133.3.73.199
standby 2 priority 100
standby 2 preempt
ip access-group 105 in
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan96
ip address 133.3.96.200 255.255.255.0
standby 2 ip 133.3.96.199
standby 2 priority 100
standby 2 preempt
shutdown
mls rp ip
!
interface Vlan97
ip address 133.3.97.200 255.255.255.0
standby 2 ip 133.3.97.199
standby 2 priority 100
standby 2 preempt
ip access-group 106 in
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan98
ip address 133.3.98.200 255.255.255.0
standby 2 ip 133.3.98.199
standby 2 priority 100
standby 2 preempt
no ip proxy-arp
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan99
ip address 133.3.99.200 255.255.255.0
standby 2 ip 133.3.99.199
standby 2 priority 100
standby 2 preempt
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
interface Vlan100
ip address 133.3.100.200 255.255.255.0
standby 1 ip 133.3.100.199
standby 1 priority 110
standby 1 preempt
no ip directed-broadcast
mls rp vtp-domain yingkouport
mls rp ip
!
ip classless
ip route 0.0.0.0 0.0.0.0 133.3.98.1
ip route 202.97.178.224 255.255.255.248 133.3.51.100
!
access-list 106 deny ip 133.3.97.0 0.0.0.255 133.3.1.0 0.0.0.255
access-list 106 deny ip 133.3.97.0 0.0.0.255 133.3.2.0 0.0.0.255
access-list 106 deny ip 133.3.97.0 0.0.0.255 133.3.4.0 0.0.0.255
access-list 106 deny ip 133.3.97.0 0.0.0.255 133.3.5.0 0.0.0.255
access-list 106 deny ip 133.3.97.0 0.0.0.255 133.3.6.0 0.0.0.255
access-list 106 deny ip 133.3.97.0 0.0.0.255 133.3.7.0 0.0.0.255
access-list 106 deny ip 133.3.97.0 0.0.0.255 133.3.8.0 0.0.0.255
access-list 106 deny ip 133.3.97.0 0.0.0.255 133.3.9.0 0.0.0.255
access-list 106 deny ip 133.3.97.0 0.0.0.255 133.3.10.0 0.0.0.255
access-list 106 deny ip 133.3.97.0 0.0.0.255 133.3.50.0 0.0.0.255
access-list 106 deny ip 133.3.97.0 0.0.0.255 133.3.51.0 0.0.0.255
access-list 106 deny ip 133.3.97.0 0.0.0.255 133.3.70.0 0.0.0.255
access-list 106 deny ip 133.3.97.0 0.0.0.255 133.3.71.0 0.0.0.255
access-list 106 deny ip 133.3.97.0 0.0.0.255 133.3.72.0 0.0.0.255
access-list 106 deny ip 133.3.97.0 0.0.0.255 133.3.73.0 0.0.0.255
access-list 106 deny ip 133.3.97.0 0.0.0.255 133.3.100.0 0.0.0.255
access-list 106 permit ip any any
access-list 106 permit ip 133.3.97.0 0.0.0.255 133.3.1.0 0.0.0.255
!
line con 0
logging synchronous
transport input none
line aux 0
line vty 0 4
password wcq
login
!
end
3.与中心交换机相连的二级交换机采用uplinkfast策略
基于ios的交换机配置方式:
switch(config)#uplinkfast
基于set的交换机配置方式
switch>(enable) set spantree uplink enable