简单架构配置(MSTP+VRRP+链路聚合)
Vlan划分
SW1至SW4都重命名并创建vlan30 vlan40
在SW1和SW2上配置上vlan30和vlan40的IP地址(24位掩码)
SW1:
<Huawei>system-view
[Huawei]sysname SW1
[SW1]vlan batch 30 40
[SW1]int vlan30
[SW1-Vlanif30]ip add 192.168.30.253 24 //设置vlan30 的IP地址
[SW1-Vlanif30]q
[SW1]int vlan40
[SW1-Vlanif40]ip add 192.168.40.253 24 //设置vlan40 的IP地址
[SW1-Vlanif40]q
SW2:
<Huawei>system-view
[Huawei]sysname SW2
[SW2]vlan batch 30 40
[SW2]int vlan30
[SW2-Vlanif30]ip add 192.168.30.253 24 //设置vlan30 的IP地址
[SW2-Vlanif30]q
[SW2]int vlan40
[SW2-Vlanif40]ip add 192.168.40.253 24 //设置vlan40 的IP地址
[SW2-Vlanif40]q
SW3:
<Huawei>system-view
[Huawei]sysname SW3
[SW3]vlan batch 30 40
[SW3]q
SW4:
<Huawei>system-view
[Huawei]sysname SW4
[SW4]vlan batch 30 40
[SW4]q
端口配置
SW1至SW4的g0/0/3和g0/0/4都为trunk
SW3和SW4的g0/0/1为access,SW3默认只允许vlan30通过,SW4默认只允许vlan40通过
SW1:
[SW1]int g0/0/3
[SW1-GigabitEthernet0/0/3]port link-type trunk
[SW1-GigabitEthernet0/0/3]port trunk allow-pass vlan all
[SW1-GigabitEthernet0/0/3]q
[SW1]int g0/0/4
[SW1-GigabitEthernet0/0/4]port link-type trunk
[SW1-GigabitEthernet0/0/4]port trunk allow-pass vlan all
[SW1-GigabitEthernet0/0/4]q
SW2:
[SW2]int g0/0/3
[SW2-GigabitEthernet0/0/3]port link-type trunk
[SW2-GigabitEthernet0/0/3]port trunk allow-pass vlan all
[SW2-GigabitEthernet0/0/3]q
[SW2]int g0/0/4
[SW2-GigabitEthernet0/0/4]port link-type trunk
[SW2-GigabitEthernet0/0/4]port trunk allow-pass vlan all
[SW2-GigabitEthernet0/0/4]q
SW3:
[SW3]int g0/0/3
[SW3-GigabitEthernet0/0/3]port link-type trunk
[SW3-GigabitEthernet0/0/3]port trunk allow-pass vlan all
[SW3-GigabitEthernet0/0/3]q
[SW3]int g0/0/4
[SW3-GigabitEthernet0/0/4]port link-type trunk
[SW3-GigabitEthernet0/0/4]port trunk allow-pass vlan all
[SW3-GigabitEthernet0/0/4]q
[SW3]int g0/0/1
[SW3-GigabitEthernet0/0/1]port link-type access
[SW3-GigabitEthernet0/0/1]port default vlan 30
[SW3-GigabitEthernet0/0/1]q
SW4:
[SW4]int g0/0/3
[SW4-GigabitEthernet0/0/3]port link-type trunk
[SW4-GigabitEthernet0/0/3]port trunk allow-pass vlan all
[SW4-GigabitEthernet0/0/3]q
[SW4]int g0/0/4
[SW4-GigabitEthernet0/0/4]port link-type trunk
[SW4-GigabitEthernet0/0/4]port trunk allow-pass vlan all
[SW4-GigabitEthernet0/0/4]q
[SW4]int g0/0/1
[SW4-GigabitEthernet0/0/1]port link-type access
[SW4-GigabitEthernet0/0/1]port default vlan 40
[SW4-GigabitEthernet0/0/1]q
链路聚合
SW1和SW2的g0/0/1和g0/0/2端口绑定为Eth-Trunk 1并将Eth-Trunk 1端口类型设置为trunk
SW1:
[SW1]int Eth-Trunk 1 //配置接口Eth-Trunk 1
[SW1-Eth-Trunk1]port link-type trunk //设置Eth-Trunk 1为trunk模式
[SW1-Eth-Trunk1]port trunk allow-pass vlan all
[SW1-Eth-Trunk1]q
[SW1]int GigabitEthernet 0/0/1 //进入g0/0/1接口
[SW1-GigabitEthernet0/0/1]eth-trunk 1 //添加进Eth-Trunk 1
[SW1-GigabitEthernet0/0/1]q
[SW1]int GigabitEthernet 0/0/2 //进入g0/0/2接口
[SW1-GigabitEthernet0/0/2]eth-trunk 1 //添加进Eth-Trunk 1
[SW1-GigabitEthernet0/0/2]q
SW2:
[SW2]int Eth-Trunk 1 //配置接口Eth-Trunk 1
[SW2-Eth-Trunk1]port link-type trunk //设置Eth-Trunk 1为trunk模式
[SW2-Eth-Trunk1]port trunk allow-pass vlan all
[SW2-Eth-Trunk1]q
[SW2]int GigabitEthernet 0/0/1 //进入g0/0/1接口
[SW2-GigabitEthernet0/0/1]eth-trunk 1 //添加进Eth-Trunk 1
[SW2-GigabitEthernet0/0/1]q
[SW2]int GigabitEthernet 0/0/2 //进入g0/0/2接口
[SW2-GigabitEthernet0/0/2]eth-trunk 1 //添加进Eth-Trunk 1
[SW2]display eth-trunk 1
另一种简约的办法 以SW1配置为例
[SW1]int Eth-Trunk 1
[SW1]trunkpork GigabitEthernet 0/0/1 to 0/0/2
//将端口GigabitEthernet 0/0/1和GigabitEthernet 0/0/2都加入Eth-Trunk 1中
分别在SW1和SW2上查看eth-trunk 1配置
VRRP配置
SW1:
[SW1]interface Vlanif30
[SW1-Vlanif30]vrrp vrid 30 virtual-ip 192.168.30.254 //创建组号为30的VRRP备份组并为备份组指定虚拟IP地址为192.168.30.254
[SW1-Vlanif30]vrrp vrid 30 priority 120 //配置VRRP备份组30的优先级为120
[SW1-Vlanif30]q
[SW1]interface Vlanif40
[SW1-Vlanif40]vrrp vrid 40 virtual-ip 192.168.40.254 //创建组号为40的VRRP备份组并为备份组指定虚拟IP地址为192.168.40.254
[SW1-Vlanif40]vrrp vrid 40 priority 100 //配置VRRP备份组40的优先级为100
[SW1-Vlanif40]q
SW2:
[SW2]int Vlanif30
[SW2-Vlanif30]vrrp vrid 30 virtual-ip 192.168.30.254 //创建组号为30的VRRP备份组并为备份组指定虚拟IP地址为192.168.30.254
[SW2-Vlanif30]vrrp vrid 30 priority 100 //配置VRRP备份组30的优先级为100
[SW2-Vlanif30]q
[SW2]int Vlanif40
[SW2-Vlanif40]vrrp vrid 40 virtual-ip 192.168.40.254 //创建组号为40的VRRP备份组并为备份组指定虚拟IP地址为192.168.40.254
[SW2-Vlanif40]vrrp vrid 40 priority 120 //配置VRRP备份组40的优先级为120
[SW2-Vlanif40]q
分别在SW1和SW2上查看vrrp配置
PC配置
配置PC1和PC2的静态IP地址和子网掩码和网关
PC1 ping PC2 (192.168.30.1ping192.168.40.1)
PC1 ping vlan30的虚拟网关 (192.168.30.1ping192.168.30.254)
查看 PC1 ping PC2 的路径
通过查看 PC1 ping PC2 的路径可以得知PC1的真实网关为192.168.30.253
MSTP配置
SW1:
[SW1]stp mode mstp //设置生成树模式为mstp
[SW1]stp region-configuration //进入stp配置模式
[SW1-mst-region]region-name test //生成树名称设置为test
[SW1-mst-region]revision-level 1 //域名级别设置为1
[SW1-mst-region]instance 1 vlan 30 //创建实例1并添加vlan30
[SW1-mst-region]instance 2 vlan 40 //创建实例2并添加vlan40
[SW1-mst-region]active region-configuration //激活生效生成树配置
[SW1-mst-region]q
SW2:
[SW2]stp mode mstp //设置生成树模式为mstp
[SW2]stp region-configuration //进入stp配置模式
[SW2-mst-region]region-name test //生成树名称设置为test
[SW2-mst-region]revision-level 1 //域名级别设置为1
[SW2-mst-region]instance 1 vlan 30 //创建实例1并添加vlan30
[SW2-mst-region]instance 2 vlan 40 //创建实例2并添加vlan40
[SW2-mst-region]active region-configuration //激活生效生成树配置
[SW2-mst-region]q
SW3:
[SW3]stp mode mstp //设置生成树模式为mstp
[SW3]stp region-configuration //进入stp配置模式
[SW3-mst-region]region-name test //生成树名称设置为test
[SW3-mst-region]revision-level 1 //域名级别设置为1
[SW3-mst-region]instance 1 vlan 30 //创建实例1并添加vlan30
[SW3-mst-region]instance 2 vlan 40 //创建实例2并添加vlan40
[SW3-mst-region]active region-configuration //激活生效生成树配置
[SW3-mst-region]q
SW4:
[SW4]stp mode mstp //设置生成树模式为mstp
[SW4]stp region-configuration //进入stp配置模式
[SW4-mst-region]region-name test //生成树名称设置为test
[SW4-mst-region]revision-level 1 //域名级别设置为1
[SW4-mst-region]instance 1 vlan 30 //创建实例1并添加vlan30
[SW4-mst-region]instance 2 vlan 40 //创建实例2并添加vlan40
[SW4-mst-region]active region-configuration //激活生效生成树配置
[SW4-mst-region]q
设置优先级
每一台运行stp的交换机都有唯一的BID,由16位桥优先级(Bridge priority)和48位MAC地址决定。
交换机的每一个端口都有一个端口开销(port cost),用于计算到达根路径的开销,接口带宽越大,cost值越小。
桥优先级可以设置,取值范围为0~65535,默认为32768,修改的优先级必须为4096的倍数,若优先级相同,再比较MAC地址,越小越优先。
例:
4096对应primary
8192对应secondary
SW1:
[SW1]stp instance 1 root primary //设置实例1为主优先级
[SW1]stp instance 2 root secondary //设置实例2为备优先级
[SW1]q
SW2:
[SW2]stp instance 1 root secondary //设置实例1为备优先级
[SW2]stp instance 2 root primary //设置实例2为主优先级
[SW2]q
在此基础上还可以为SW3和SW4上开启边缘端口,缩短接入时间 ,因为边缘端口不参与生成树计算节省系统资源。
SW3:
[SW3]int g0/0/1
[SW3-GigabitEthernet0/0/1]stp edged-port enable
[SW3-GigabitEthernet0/0/1]q
SW4:
[SW3]int g0/0/1
[SW3-GigabitEthernet0/0/1]stp edged-port enable
[SW3-GigabitEthernet0/0/1]q
查看边缘端口
端口角色(role):
DESI(designated)指定端口
ROOT根端口
ALTE(Alternate)代替端口
BACK(Backup)备份端口
端口状态(stp state):
FORWARDING为转发
DISCARDING为丢弃(阻塞)
LEARNING为学习
端口角色和端口状态是存在一定关系的,一般情况下,DESI和ROOT端口的状态为FORWARDING转发状态(或者为LEARNING学习状态,LEARNING状态的短暂的一般出现在生成树形成过程中),ALTE和BACK端口的状态一直为DISCARDING丢弃状态。
查看stp实例的配置