华为1+x网络通信与维护
一、实验拓扑图
二、VLAN信息
三、IP地址规划
四、链路聚合
园区本地服务器区,为校园用户提供内网服务。为了保证链路的稳定性,同时在不升
级硬件设备的前提下最大限度的提升带宽。在Agg01与Agg02之间配置链路聚合。请
通过Lacp模式实现二层链路聚合,成员接口为GE0/0/21、GE0/0/22、G0/0/23,链路聚合接口ID为1,并只允许最大活动链路为1
[HZ-HZxiaoyuan-Agg01-S5731]int eth 1
[HZ-HZxiaoyuan-Agg01-S5731-Eth-Trunk1]mode lacp-static
[HZ-HZxiaoyuan-Agg01-S5731-Eth-Trunk1]max active-linknumber 1
[HZ-HZxiaoyuan-Agg01-S5731-Eth-Trunk1]trunkport g0/0/21
[HZ-HZxiaoyuan-Agg01-S5731-Eth-Trunk1]trunkport g0/0/22
[HZ-HZxiaoyuan-Agg01-S5731-Eth-Trunk1]trunkport g0/0/23
[HZ-HZxiaoyuan-Agg02-S5731]int eth 1
[HZ-HZxiaoyuan-Agg02-S5731-Eth-Trunk1]mode lacp-static
[HZ-HZxiaoyuan-Agg02-S5731-Eth-Trunk1]max active-linknumber 1
[HZ-HZxiaoyuan-Agg02-S5731-Eth-Trunk1]trunkport g0/0/21
[HZ-HZxiaoyuan-Agg02-S5731-Eth-Trunk1]trunkport g0/0/22
[HZ-HZxiaoyuan-Agg02-S5731-Eth-Trunk1]trunkport g0/0/23
五、VLAN
[HZ-HZxiaoyuan-Agg01-S5731]
vlan batch 10 20 100
int g0/0/2
port link-type trunk
port trunk allow-pass vlan 10 20
undo port trunk allow-pass vlan 1
interface GigabitEthernet0/0/3
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 10 20
interface GigabitEthernet0/0/24
port link-type access
port default vlan 100
interface Eth-Trunk1
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 10 20
[HZ-HZxiaoyuan-Agg02-S5731]
vlan batch 10 20 101
interface GigabitEthernet0/0/2
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 10 20
interface GigabitEthernet0/0/3
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 10 20
interface GigabitEthernet0/0/24
port link-type access
port default vlan 101
interface Eth-Trunk1
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 10 20
[HZ-HZxiaoyuan-Acc01-S5731]
Vlan batch 10 20
interface GigabitEthernet0/0/3
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 10 20
interface GigabitEthernet0/0/4
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 10 20
interface GigabitEthernet0/0/24
port link-type access
port default vlan 20
[HZ-HZxiaoyuan-Acc02-S5731]
vlan batch 10 20
interface GigabitEthernet0/0/1
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 10 20
interface GigabitEthernet0/0/2
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 10 20
interface GigabitEthernet0/0/23
port link-type access
port default vlan 10
interface GigabitEthernet0/0/24
port link-type access
port default vlan 10
六、RSTP
为了防止二层网络中出现环路和提高网络可靠性,在Acc01、Acc02和Agg01、Agg02之间配置STP协议。
1.STP模式为RSTP。设置Agg01的优先级为4096使其成为根桥
2.为了阻塞Agg01-Acc01、Agg02-Acc02之间的链路,在接入层交换机的端口上修改cost值,只能为2000000
3. 为了最大限度的保证网络的稳定性,避免主机频繁重启导致的网络波动,要求与PC3相连的交换机端口,不参加STP计算,直接进入Forwarding状态转发。
[HZ-HZxiaoyuan-Agg01-S5731]
Stp mode rstp
Stp priority 4096
[HZ-HZxiaoyuan-Agg02-S5731]
Stp mode rstp
Stp priority 8192
[HZ-HZxiaoyuan-Acc01-S5731]
Stp mode rstp
Int g0/0/3
Stp cost 200000
Int g0/0/24
Stp edged-port enable
[HZ-HZxiaoyuan-Acc02-S5731]
Stp mode rstp
Int g0/0/2
Stp cost 200000
七、VRRP
为了提高校园网的可靠性,容纳更多的流量,现在Agg01和Agg02上做VRRP
1.在vlan10上配置备份组1,虚拟IP为192.168.10.254/24,在vlan20上配置备份组2,虚拟IP为192.168.20.254/24
2.为使Agg01为备份组1的主设备,设置Agg01备份组1的优先级为120,Agg02备份组1的优先级默认,为使Agg02为备份组2的主设备,设置Agg02备份组2的优先级为120,Agg01备份组2的优先级默认,
3.使Agg01和Agg02监控上行端口的流量,当接口down掉,减少优先级40
[HZ-HZxiaoyuan-Agg01-S5731]
Int vlanif 10
vrrp vrid 1 virtual-ip 192.168.10.254
vrrp vrid 1 priority 120
vrrp vrid 1 track interface g0/0/24 reduce 30
int vlanif 20
vrrp vrid 2 virtual-ip 192.168.20.254
[HZ-HZxiaoyuan-Agg02-S5731]
Int vlanif 20
vrrp vrid 2 virtual-ip 192.168.20.254
vrrp vrid 2 priority 120
vrrp vrid 2 track interface g0/0/24 reduce 30
int vlanif 10
vrrp vrid 1 virtual-ip 192.168.10.254
好了,今天的分享就到这里了
需要实验拓扑图的加QQ:2647996100