生成树协议+虚拟路由冗余协议+动态主机配置协议综合运用（华为eNSP）

最新推荐文章于 2024-08-20 03:27:40 发布

611#

最新推荐文章于 2024-08-20 03:27:40 发布

阅读量1.8k

点赞数 3

分类专栏：华为eNSP 文章标签：华为网络网络协议

本文链接：https://blog.csdn.net/sixeleven611/article/details/115416508

版权

华为eNSP 专栏收录该内容

6 篇文章 3 订阅

订阅专栏

本文详细介绍了如何结合MSTP（多生成树协议）、VRRP（虚拟路由冗余协议）和DHCP中继在ENSP环境下构建一个具备高可用性和动态地址分配的网络。实验步骤包括配置交换机的VLAN、接口属性、虚接口、生成树协议、DHCP服务以及VRRP，确保不同VLAN间的通信及主机的自动配置。最终通过DHCP服务器提供默认路由，实现了网络的稳定运行和高效管理。

摘要由CSDN通过智能技术生成

生成树协议+虚拟路由冗余协议+动态主机配置协议综合运用
<MSTP+VRRP+DHCP中继>
实验设备：ENSP
首先如下图配置拓扑
在这里插入图片描述

第一步：如图IP地址

PC>ping 192.168.10.2  /*使用同VLAN段直接验证连通性*/

Ping 192.168.10.2: 32 data bytes, Press Ctrl_C to break
From 192.168.10.2: bytes=32 seq=1 ttl=128 time=78 ms
From 192.168.10.2: bytes=32 seq=2 ttl=128 time=78 ms
From 192.168.10.2: bytes=32 seq=3 ttl=128 time=78 ms
From 192.168.10.2: bytes=32 seq=4 ttl=128 time=94 ms
From 192.168.10.2: bytes=32 seq=5 ttl=128 time=62 ms

--- 192.168.10.2 ping statistics ---
  5 packet(s) transmitted
  5 packet(s) received
  0.00% packet loss
  round-trip min/avg/max = 62/78/94 ms

第二步：进行交换机配置

[SW1]vlan batch 10 20 100
[SW2]vlan batch 10 20 100
[SW3]vlan batch 10 20 100
[SW4]vlan batch 10 20 100
[SW5]vlan batch 10 20 100  /*将VLAN 10 20 100加入各交换机 */

第三步：交换机各接口属性配置

[SW1]port-group group-member g0/0/1 to g0/0/4
[SW1-GigabitEthernet0/0/1]port link-type trunk
[SW1-GigabitEthernet0/0/2]port link-type trunk
[SW1-GigabitEthernet0/0/3]port link-type trunk
[SW1-GigabitEthernet0/0/4]port link-type trunk   /*交换机与交换机选择trunk接口*/
[SW1-GigabitEthernet0/0/1]port trunk allow-pass vlan all
[SW1-GigabitEthernet0/0/2]port trunk allow-pass vlan all
[SW1-GigabitEthernet0/0/3]port trunk allow-pass vlan all /*允许所有vlan通过*/
[SW1-GigabitEthernet0/0/4]port trunk allow-pass vlan all /*交换机SW1配置*/

[SW2]port-group group-member g0/0/1 to g0/0/4
[SW2-GigabitEthernet0/0/1]port link-type trunk 
[SW2-GigabitEthernet0/0/2]port link-type trunk 
[SW2-GigabitEthernet0/0/3]port link-type trunk 
[SW2-GigabitEthernet0/0/4]port link-type trunk    /*交换机与交换机选择trunk接口*/
[SW2-GigabitEthernet0/0/1]port trunk allow-pass vlan all
[SW2-GigabitEthernet0/0/2]port trunk allow-pass vlan all
[SW2-GigabitEthernet0/0/3]port trunk allow-pass vlan all /*允许所有vlan通过*/
[SW2-GigabitEthernet0/0/4]port trunk allow-pass vlan all /*交换机SW2配置*/

[SW3-Ethernet0/0/1]port link-type trunk 
[SW3-Ethernet0/0/1]port trunk allow-pass vlan all
[SW3-Ethernet0/0/2]port link-type trunk
[SW3-Ethernet0/0/2]port trunk allow-pass vlan all
[SW3-Ethernet0/0/3]port link-type access  /*主机与交换机连接选择access 接口*/
[SW3-Ethernet0/0/3]port default vlan 10   /*允许vlan10 通过*/
[SW3-Ethernet0/0/4]port link-type access  /*主机与交换机连接选择access 接口*/
[SW3-Ethernet0/0/4]port default vlan 20   /*允许vlan20 通过*/
                                          /*交换机SW3配置 */

[SW4-Ethernet0/0/1]port link-type trunk
[SW4-Ethernet0/0/1]port trunk allow-pass vlan all
[SW4-Ethernet0/0/2]port link-type trunk
[SW4-Ethernet0/0/2]port trunk allow-pass vlan all
[SW4-Ethernet0/0/3]port link-type access  /*主机与交换机连接选择access 接口*/
[SW4-Ethernet0/0/3]port default vlan 10   /*允许vlan10 通过*/
[SW4-Ethernet0/0/4]port link-type access  /*主机与交换机连接选择access 接口*/
[SW4-Ethernet0/0/4]port default vlan 20   /*允许vlan20 通过*/
                                          /*交换机SW4配置 */

[SW5-GigabitEthernet0/0/1]port link-type access  /*路由器是特殊的主机所以选择access接口*/
[SW5-GigabitEthernet0/0/1]port default vlan 100  /*加入vlan100服务器集群*/
[SW5-GigabitEthernet0/0/2]port link-type trunk 
[SW5-GigabitEthernet0/0/2]port trunk allow-pass vlan all
[SW5-GigabitEthernet0/0/3]port link-type trunk 
[SW5-GigabitEthernet0/0/3]port trunk allow-pass vlan all  /*交换机SW5配置*/

第四步：在两台汇入层三层交换机上配置虚接口

虚接口VLANif的作用：在配置好二层VLAN之后，三层交换机上使用vlanif命令建立对应vlan的路由，配置完成后，可以实现VLAN之间的通信。

[SW1-Vlanif10]ip address 192.168.10.254 24
[SW1-Vlanif20]ip address 192.168.20.254 24
[SW1-Vlanif100]ip address 192.168.100.254 24 /*交换机SW1的虚接口配置*/

[SW2-Vlanif10]ip address 192.168.10.253 24
[SW2-Vlanif20]ip address 192.168.20.253 24
[SW2-Vlanif100]ip address 192.168.100.253 24

检查！

PC>ping 192.168.20.2 /*使用PC1 ping PC4 检查虚接口是否配置正确*/

Ping 192.168.20.2: 32 data bytes, Press Ctrl_C to break
From 192.168.20.2: bytes=32 seq=1 ttl=127 time=125 ms
From 192.168.20.2: bytes=32 seq=2 ttl=127 time=78 ms
From 192.168.20.2: bytes=32 seq=3 ttl=127 time=78 ms
From 192.168.20.2: bytes=32 seq=4 ttl=127 time=63 ms
From 192.168.20.2: bytes=32 seq=5 ttl=127 time=78 ms

--- 192.168.20.2 ping statistics ---
  5 packet(s) transmitted
  5 packet(s) received
  0.00% packet loss
  round-trip min/avg/max = 63/84/125 ms

第五步：配置交换机生成树协议

注：只有汇聚层交换机有实例优先级接入层没有

[SW1]stp mode mstp   /*设置生成树协议为Mstp 华为默认Mstp 但是工作中需配置mstp的话习惯改一下*/
[SW1]stp region-configuration             /*STP区域配置*/
[SW1-mst-region]region-name huawei        /*STP区域名称*/
[SW1-mst-region]revision-level 1          /*版本修订号为1*/
[SW1-mst-region]instance 10 vlan 10 100   /*实例10 映射VLAN10和VLAN100*/
[SW1-mst-region]instance 20 vlan 20       /*实例20 映射VLAN20*/
[SW1-mst-region]active region-configuration  /*激活生成树协议*/
[SW1]stp instance 10 priority 0        
[SW1]stp instance 20 priority 4096   /*配置实例优先级  4096的倍数越小越优先*/
/*交换机SW1的MSTP生成树协议配置*/

[SW2]stp mode mstp
[SW2]stp region-configuration
[SW2-mst-region]region-name huawei
[SW2-mst-region]revision-level 1 
[SW2-mst-region]instance 10 vlan 10 100
[SW2-mst-region]instance 20 vlan 20
[SW2-mst-region]active region-configuration  /*解释与上相同*/
[SW2]stp instance 10 priority 4096           
[SW2]stp instance 20 priority 0    /*配置实例20在本机优先*/
/*交换机SW2的MSTP生成树协议配置*/

[SW3]stp mode mstp
[SW3]stp region-configuration
[SW3-mst-region]region-name huawei
[SW3-mst-region]revision-level 1 
[SW3-mst-region]instance 10 vlan 10 100
[SW3-mst-region]instance 20 vlan 20
[SW3-mst-region]active region-configuration
/*只需要加入生成树协议 交换机SW3配置*/

[SW4]stp mode mstp
[SW4]stp region-configuration
[SW4-mst-region]region-name huawei
[SW4-mst-region]revision-level 1 
[SW4-mst-region]instance 10 vlan 10 100
[SW4-mst-region]instance 20 vlan 20
[SW4-mst-region]active region-configuration
/*只需要加入生成树协议 交换机SW4配置*/

[SW5]stp mode mstp
[SW5]stp region-configuration
[SW5-mst-region]region-name huawei
[SW5-mst-region]
[SW5-mst-region]revision-level 1 
[SW5-mst-region]instance 10 vlan 10 100
[SW5-mst-region]instance 20 vlan 20
[SW5-mst-region]active region-configuration
/*只需要加入生成树协议 交换机SW5配置*/

第六步：使用路由器充当DHCP服务器角色

[DHCPsever]dhcp enable /*开启DHCP服务*/
[DHCPsever-GigabitEthernet0/0/0]ip address 192.168.100.100 24 /*设置DHCP服务器地址*/
/*需要给一条默认路由是VRRP的VLAN100虚拟地址 所以等下再给*/
[DHCPsever]ip pool vlan10-pool                              /*创建VLAN10的地址池*/
[DHCPsever-ip-pool-vlan10-pool]network 192.168.10.0 mask 24 /*192.168.10.0 网段*/
[DHCPsever-ip-pool-vlan10-pool]gateway-list 192.168.10.100  /*网关 由VRRP虚拟*/
[DHCPsever-ip-pool-vlan10-pool]dns-list 8.8.8.8             /*DNS服务器地址*/
[DHCPsever]ip pool vlan20-pool                              /*创建VLAN20的地址池*/
[DHCPsever-ip-pool-vlan20-pool]network 192.168.20.0 mask 24 /*192.168.20.0 网段*/
[DHCPsever-ip-pool-vlan20-pool]gateway-list 192.168.20.100  /*网关 由VRRP虚拟*/
[DHCPsever-ip-pool-vlan20-pool]dns-list 8.8.8.8             /*DNS服务器地址*/
[DHCPsever]int GigabitEthernet 0/0/0                        /*进入接口*/
[DHCPsever-GigabitEthernet0/0/0]dhcp select global          /*应用到全局*/

第七步：进入汇入层交换机配置基于中继的DHCP服务

[SW1]dhcp enable   /*开启DHCP服务*/
[SW1-Vlanif10]dhcp select relay /*开启中继模式*/
[SW1-Vlanif10]dhcp relay server-ip 192.168.100.100 /*DHCP服务器地址*/
[SW1-Vlanif20]dhcp select relay  /*开启中继模式*/
[SW1-Vlanif20]dhcp relay server-ip 192.168.100.100 /*DHCP服务器地址*/
                                                   /*交换机SW1配置*/

[SW2]dhcp enable 
[SW2-Vlanif10]dhcp select relay
[SW2-Vlanif10]dhcp relay server-ip 192.168.100.100
[SW2-Vlanif20]dhcp select relay 
[SW2-Vlanif20]dhcp relay server-ip 192.168.100.100 /*解释与上相同 就不多解释*/
                                                   /*交换机SW2配置*/

第八步：汇聚层交换机配置VRRP服务<虚拟冗余路由器协议>

[SW1-Vlanif10]vrrp vrid 10 virtual-ip 192.168.10.100  /*启用VRRP服务 组号10 虚拟地址10.100*/
[SW1-Vlanif10]vrrp vrid 10 priority 120 /*组号10 在交换机SW1中优先级120 默认100*/
[SW1-Vlanif10]vrrp vrid 10 preempt-mode timer delay 1 /*设置抢占时间延迟1秒*/
[SW1-Vlanif20]vrrp vrid 20 virtual-ip 192.168.20.200  /*组号20 虚拟地址20.200*/
[SW1-Vlanif100]vrrp vrid 100 virtual-ip 192.168.100.200 /*组号100 虚拟地址100.200*/
[SW1-Vlanif100]vrrp vrid 100 priority 120 /*组号100 在交换机SW1中优先级120 默认100*/
[SW1-Vlanif100]vrrp vrid 100 preempt-mode timer delay 1/*设置抢占时间延迟1秒*/
                                                      /*交换机SW1配置 */

[SW2-Vlanif10]vrrp vrid 10 virtual-ip 192.168.10.100
[SW2-Vlanif20]vrrp vrid 20 virtual-ip 192.168.20.100
[SW2-Vlanif20]vrrp vrid 20 priority 120
[SW2-Vlanif20]vrrp vrid 20 preempt-mode timer delay 1
[SW2-Vlanif100]vrrp vrid 100 virtual-ip 192.168.100.200 /*解释与上相同不多解释*/
                                                      /*交换机SW2配置 */

第九步：配置DHCP服务器默认路由地址

[DHCPsever]ip route-static 0.0.0.0 0 192.168.100.200
      /*下一跳为两台路由器共同虚拟出来的IP地址  */

检查：

PC>ipconfig /renew

IP Configuration

Address: 4C-1F-CC-02-23-47 conflict with my IP!  

Link local IPv6 address...........: fe80::5689:98ff:feeb:4184
IPv6 address......................: :: / 128
IPv6 gateway......................: ::
IPv4 address......................: 0.0.0.0
Subnet mask.......................: 0.0.0.0
Gateway...........................: 0.0.0.0
Physical address..................: 54-89-98-EB-41-84
DNS server........................: 8.8.8.8
   /*如果出现这样的情况直接更换一台PC 因为能够获取DNS服务器地址 模拟器存在BUG直接*/

PC>ipconfig /release  /*释放旧IP地址*/

IP Configuration

Link local IPv6 address...........: fe80::5689:98ff:fee3:4df7
IPv6 address......................: :: / 128
IPv6 gateway......................: ::
IPv4 address......................: 0.0.0.0
Subnet mask.......................: 0.0.0.0
Gateway...........................: 0.0.0.0
Physical address..................: 54-89-98-E3-4D-F7
DNS server........................:

PC>ipconfig /renew  /*获取新IP地址*/

IP Configuration

Link local IPv6 address...........: fe80::5689:98ff:fee3:4df7
IPv6 address......................: :: / 128
IPv6 gateway......................: ::
IPv4 address......................: 192.168.10.251
Subnet mask.......................: 255.255.255.0
Gateway...........................: 192.168.10.100
Physical address..................: 54-89-98-E3-4D-F7
DNS server........................: 8.8.8.8
/*实验中我也更换了无数PC...出现上述情况多换几台就好了 实验完成*/