华为1+x网络通信与维护

华为1+x网络通信与维护

一、实验拓扑图

二、VLAN信息

三、IP地址规划

四、链路聚合

园区本地服务器区，为校园用户提供内网服务。为了保证链路的稳定性，同时在不升
级硬件设备的前提下最大限度的提升带宽。在Agg01与Agg02之间配置链路聚合。请
通过Lacp模式实现二层链路聚合，成员接口为GE0/0/21、GE0/0/22、G0/0/23，链路聚合接口ID为1，并只允许最大活动链路为1

[HZ-HZxiaoyuan-Agg01-S5731]int eth 1
[HZ-HZxiaoyuan-Agg01-S5731-Eth-Trunk1]mode lacp-static
[HZ-HZxiaoyuan-Agg01-S5731-Eth-Trunk1]max active-linknumber 1
[HZ-HZxiaoyuan-Agg01-S5731-Eth-Trunk1]trunkport g0/0/21
[HZ-HZxiaoyuan-Agg01-S5731-Eth-Trunk1]trunkport g0/0/22
[HZ-HZxiaoyuan-Agg01-S5731-Eth-Trunk1]trunkport g0/0/23

[HZ-HZxiaoyuan-Agg02-S5731]int eth 1
[HZ-HZxiaoyuan-Agg02-S5731-Eth-Trunk1]mode lacp-static
[HZ-HZxiaoyuan-Agg02-S5731-Eth-Trunk1]max active-linknumber 1
[HZ-HZxiaoyuan-Agg02-S5731-Eth-Trunk1]trunkport g0/0/21
[HZ-HZxiaoyuan-Agg02-S5731-Eth-Trunk1]trunkport g0/0/22
[HZ-HZxiaoyuan-Agg02-S5731-Eth-Trunk1]trunkport g0/0/23

五、VLAN

[HZ-HZxiaoyuan-Agg01-S5731]
vlan batch 10 20 100
int g0/0/2
 port link-type trunk
 port trunk allow-pass vlan 10 20
 undo port trunk allow-pass vlan 1
interface GigabitEthernet0/0/3
 port link-type trunk
 undo port trunk allow-pass vlan 1
 port trunk allow-pass vlan 10 20
interface GigabitEthernet0/0/24
 port link-type access
 port default vlan 100
interface Eth-Trunk1
 port link-type trunk
 undo port trunk allow-pass vlan 1
 port trunk allow-pass vlan 10 20

[HZ-HZxiaoyuan-Agg02-S5731]
vlan batch 10 20 101
interface GigabitEthernet0/0/2
 port link-type trunk
 undo port trunk allow-pass vlan 1
 port trunk allow-pass vlan 10 20
interface GigabitEthernet0/0/3
 port link-type trunk
 undo port trunk allow-pass vlan 1
 port trunk allow-pass vlan 10 20
interface GigabitEthernet0/0/24
 port link-type access
 port default vlan 101
interface Eth-Trunk1
 port link-type trunk
 undo port trunk allow-pass vlan 1
 port trunk allow-pass vlan 10 20

[HZ-HZxiaoyuan-Acc01-S5731]
Vlan batch 10 20
interface GigabitEthernet0/0/3
 port link-type trunk
 undo port trunk allow-pass vlan 1
 port trunk allow-pass vlan 10 20
interface GigabitEthernet0/0/4
 port link-type trunk
 undo port trunk allow-pass vlan 1
 port trunk allow-pass vlan 10 20
interface GigabitEthernet0/0/24
 port link-type access
 port default vlan 20

[HZ-HZxiaoyuan-Acc02-S5731]
vlan batch 10 20
interface GigabitEthernet0/0/1
 port link-type trunk
 undo port trunk allow-pass vlan 1
 port trunk allow-pass vlan 10 20
interface GigabitEthernet0/0/2
 port link-type trunk
 undo port trunk allow-pass vlan 1
 port trunk allow-pass vlan 10 20
interface GigabitEthernet0/0/23
 port link-type access
 port default vlan 10
interface GigabitEthernet0/0/24
 port link-type access
 port default vlan 10

六、RSTP

为了防止二层网络中出现环路和提高网络可靠性，在Acc01、Acc02和Agg01、Agg02之间配置STP协议。
1.STP模式为RSTP。设置Agg01的优先级为4096使其成为根桥
2.为了阻塞Agg01-Acc01、Agg02-Acc02之间的链路，在接入层交换机的端口上修改cost值，只能为2000000
3. 为了最大限度的保证网络的稳定性，避免主机频繁重启导致的网络波动，要求与PC3相连的交换机端口，不参加STP计算，直接进入Forwarding状态转发。

[HZ-HZxiaoyuan-Agg01-S5731]
Stp mode rstp
Stp priority 4096

[HZ-HZxiaoyuan-Agg02-S5731]
Stp mode rstp
Stp priority 8192

[HZ-HZxiaoyuan-Acc01-S5731]
Stp mode rstp
Int g0/0/3
 Stp cost 200000
Int g0/0/24
 Stp edged-port enable

[HZ-HZxiaoyuan-Acc02-S5731]
Stp mode rstp
Int g0/0/2
 Stp cost 200000

七、VRRP

为了提高校园网的可靠性，容纳更多的流量，现在Agg01和Agg02上做VRRP
1.在vlan10上配置备份组1，虚拟IP为192.168.10.254/24，在vlan20上配置备份组2，虚拟IP为192.168.20.254/24
2.为使Agg01为备份组1的主设备，设置Agg01备份组1的优先级为120，Agg02备份组1的优先级默认，为使Agg02为备份组2的主设备，设置Agg02备份组2的优先级为120，Agg01备份组2的优先级默认，
3.使Agg01和Agg02监控上行端口的流量，当接口down掉，减少优先级40

[HZ-HZxiaoyuan-Agg01-S5731]
Int vlanif 10
 vrrp vrid 1 virtual-ip 192.168.10.254
 vrrp vrid 1 priority 120
 vrrp vrid 1 track interface g0/0/24 reduce 30
int vlanif 20
 vrrp vrid 2 virtual-ip 192.168.20.254

[HZ-HZxiaoyuan-Agg02-S5731]
Int vlanif 20
 vrrp vrid 2 virtual-ip 192.168.20.254
 vrrp vrid 2 priority 120
 vrrp vrid 2 track interface g0/0/24 reduce 30
int vlanif 10
 vrrp vrid 1 virtual-ip 192.168.10.254

好了，今天的分享就到这里了
需要实验拓扑图的加QQ：2647996100