二层交换机---STP生成树协议（下）及实验

STP的五种端口状态

disable

此状态端口处于关闭状态

blocking

此状态端口处于阻塞状态，仅仅接收bpdu报文，不发送BPDU报文，不学习mac地址，如果计时器到期还未接收到BPDU报文此端口会变为listening状态

listening

此状态端口处于监听状态，不接受转发流量，接收并发送BPDU报文，不学习mac地址，确定端口角色，再进行选举

learning

此状态端口处于学习状态，不接受转发流量，接受并发送BPDU报文，学习MAC地址

forwarding

此端口处于转发状态，接收并转发数据帧，接受并发送BPDU报文，学习MAC地址

TCN BPDU

此报文只会在拓扑图变更的时候发送

STP分类

stp协议分为三种
①stp：普通stp
②rstp：快速生成树
③mstp：多生成树

实验

先配置R1上的接口地址

**[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]ip add 192.168.10.1 24
[R1-GigabitEthernet0/0/0]
Apr 11 2021 16:16:08-08:00 R1 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP 
on the interface GigabitEthernet0/0/0 has entered the UP state. 
[R1-GigabitEthernet0/0/0]
[R1-GigabitEthernet0/0/0]int g0/0/1
[R1-GigabitEthernet0/0/1]ip add 192.168.20.1 24
Apr 11 2021 16:16:23-08:00 R1 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP 
on the interface GigabitEthernet0/0/1 has entered the UP state. 
[R1-GigabitEthernet0/0/1]
[R1-GigabitEthernet0/0/1]int lo 0
[R1-LoopBack0]ip add 1.1.1.1 32

按照图上要求将三个交换机的端口状态改为不带标签放行vlan 10 和20
sw1上

[sw1-Ethernet0/0/1]dis th
#
interface Ethernet0/0/1
 port hybrid untagged vlan 10 20
#
[sw1-Ethernet0/0/2]dis th
#
interface Ethernet0/0/2
 port hybrid pvid vlan 10
 port hybrid untagged vlan 10 20
#
[sw1-Ethernet0/0/3]dis th
#
interface Ethernet0/0/3
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
#

sw2上

[sw2-Ethernet0/0/1]dis th
#
interface Ethernet0/0/1
 port hybrid untagged vlan 10 20
#
[sw2-Ethernet0/0/2]dis th
#
interface Ethernet0/0/2
 port hybrid pvid vlan 20
 port hybrid untagged vlan 10 20
#
[sw2-Ethernet0/0/3]dis th
#
interface Ethernet0/0/3
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
#

sw3上

[sw3-Ethernet0/0/1]dis th
#
interface Ethernet0/0/1
 port hybrid pvid vlan 10
 port hybrid untagged vlan 10 20
#
[sw3-Ethernet0/0/2]dis th
#
interface Ethernet0/0/2
 port hybrid pvid vlan 20
 port hybrid untagged vlan 10 20
#
[sw3-Ethernet0/0/3]dis th
#
interface Ethernet0/0/3
 port hybrid pvid vlan 10
 port hybrid untagged vlan 10 20
#

然后在sw1上配置mstp，先配置一个域，然后域名，创建两个实例，然后激活域。然后配置在实例1中sw1是主实例二sw1是从

[sw1]stp region-configuration
[sw1-mst-region]re	
[sw1-mst-region]region-name 1
[sw1-mst-region]ins 1 vl 10
[sw1-mst-region]ins 2 vlan 20
[sw1-mst-region]act	
[sw1-mst-region]active reg
Info: This operation may take a few seconds. Please wait for a moment...done.
[sw1-mst-region]qu
[sw1]
[sw1]stp ins 1 ro	
[sw1]stp ins 1 root p	
[sw1]stp ins 1 root primary 
[sw1]stp ins 2 ro s	
[sw1]stp ins 2 ro secondary 
[sw1]dis stp br
 MSTID  Port                        Role  STP State     Protection
   0    Ethernet0/0/1               DESI  FORWARDING      NONE
   0    Ethernet0/0/2               DESI  FORWARDING      NONE
   0    Ethernet0/0/3               ROOT  FORWARDING      NONE
   1    Ethernet0/0/1               DESI  FORWARDING      NONE
   1    Ethernet0/0/2               DESI  FORWARDING      NONE
   1    Ethernet0/0/3               DESI  FORWARDING      NONE
   2    Ethernet0/0/1               DESI  FORWARDING      NONE
   2    Ethernet0/0/2               DESI  FORWARDING      NONE
   2    Ethernet0/0/3               ROOT  FORWARDING      NONE
[sw1]

同理在sw2上配置，创建相同的域和域名，实例1中sw2是从，实例2中sw2是主

[sw2]stp region-configuration 
[sw2-mst-region]re	
[sw2-mst-region]region-name 1
[sw2-mst-region] ins 1 vl 10
[sw2-mst-region]ins 2 vl 20
[sw2-mst-region]ac reg
Info: This operation may take a few seconds. Please wait for a moment...done.
[sw2-mst-region]qu
[sw2]stp ins 1 roo s	
[sw2]stp ins 1 roo secondary 
[sw2]stp ins 2 ro p
[sw2]dis stp br
 MSTID  Port                        Role  STP State     Protection
   0    Ethernet0/0/1               DESI  FORWARDING      NONE
   0    Ethernet0/0/2               DESI  FORWARDING      NONE
   0    Ethernet0/0/3               DESI  FORWARDING      NONE
   1    Ethernet0/0/1               DESI  FORWARDING      NONE
   1    Ethernet0/0/2               DESI  FORWARDING      NONE
   1    Ethernet0/0/3               ROOT  FORWARDING      NONE
   2    Ethernet0/0/1               DESI  FORWARDING      NONE
   2    Ethernet0/0/2               DESI  FORWARDING      NONE
   2    Ethernet0/0/3               DESI  FORWARDING      NONE

在sw3上配置域和域名，创建两个实例就行，不需要做主从

[sw3]stp re	
[sw3]stp region-configuration 
[sw3-mst-region]re	
[sw3-mst-region]region-name 1
[sw3-mst-region]ins 1 vl 10
[sw3-mst-region]ins 2 vl 20
[sw3-mst-region]ac reg
Info: This operation may take a few seconds. Please wait for a moment...done.
[sw3-mst-region]
[sw3-mst-region]dis stp br
 MSTID  Port                        Role  STP State     Protection
   0    Ethernet0/0/1               ALTE  DISCARDING      NONE
   0    Ethernet0/0/2               ROOT  FORWARDING      NONE
   0    Ethernet0/0/3               DESI  FORWARDING      NONE
   0    Ethernet0/0/4               DESI  FORWARDING      NONE
   1    Ethernet0/0/1               ROOT  FORWARDING      NONE
   1    Ethernet0/0/2               ALTE  DISCARDING      NONE
   1    Ethernet0/0/3               DESI  FORWARDING      NONE
   1    Ethernet0/0/4               DESI  FORWARDING      NONE
   2    Ethernet0/0/1               ALTE  DISCARDING      NONE
   2    Ethernet0/0/2               ROOT  FORWARDING      NONE
   2    Ethernet0/0/3               DESI  FORWARDING      NONE
   2    Ethernet0/0/4               DESI  FORWARDING      NONE

此时能看到实例1时sw3阻塞了e0/0/2接口，按照选举规则应当阻塞就是此端口
实例2阻塞了e0/0/1，选举规则应当阻塞此端口。
此时用pc1，pc2与R1的loopback 0通信，发现可以通信，实验成功。