MSTP、VRRP
一.实践目的
- 理解mstp原理;熟悉配置命令。
- 验证VRRP的功能;测试VRRP网络中成员的通信。
二.实践拓扑
三.地址规划
四.实践原理
理解生成树协议STP的配置及原理,通过MSTP把一个交换网络划分成多个域,每个域内形成多棵生成树,生成树之间彼此独立,在交换网络中提供冗余备份链路,并且能够解决交换网络中的环路问题,避免广播风暴等。需要回顾端口安全,二层聚合,端口防环等二层技术。
VRRP(虚拟路由冗余协议)就是指将多个路由设备(可以是路由器,也可以是三层交换机)组成一台虚拟路由设备,并在其中指定一台成员路由设备作为主用(Master)设备,其它成员设备作为主用设备不可用时的备用(Backup)设备,然后为这台虚拟路由器分配一个IP地址,作为下游设备的默认网关,这样就可以防止单点故障,上线路由设备容错,为上,下路设备提供程序的连通服务。VRRP除了最基本主备备份功能之外,还可通过配置多个虚拟被备份组,指定不同的设备作为主用设备,实现多路由设备之间的负载分担;还可与各种其他对象一起联动,实现更加强大的监视功能。
五.实践步骤
S26282的配置:
Ruijie(config)#hostname S26281
S26281(config)#vlan 10
S26281(config-vlan)#vlan 20
S26281(config-vlan)#vlan 30
S26281(config-vlan)#vlan 40
S26281(config-vlan)#exit
S26281(config)#int fa 0/1
S26281(config-if-FastEthernet 0/9)#switchport mode access
S26281(config-if-FastEthernet 0/9)#switchport access vlan 10
S26281(config-if-FastEthernet 0/9)#exit
S26281(config)#int fa 0/3
S26281(config-if-FastEthernet 0/1)#switchport mode access
S26281(config-if-FastEthernet 0/1)#switchport access vlan 20
S26281(config-if-FastEthernet 0/1)#exit
S26281(config)#int fa 0/9
S26281(config-if-FastEthernet 0/3)#switchport mode access
S26281(config-if-FastEthernet 0/3)#switchport access vlan 30
S26281(config-if-FastEthernet 0/3)#exit
S26281(config)#int fa 0/11
S26281(config-if-FastEthernet 0/11)#switchport mode access
S26281(config-if-FastEthernet 0/11)#switchport access vlan 40
S26281(config-if-FastEthernet 0/11)#exit
S26282(config)#spanning-tree
S26282(config)#spanning-tree mode mstp //开启多生成树
S26282(config)#spanning-tree mst configuration
S26282(config-mst)#instance 10 vlan 10,20 //映射实例10到VLAN10和20
S26282(config-mst)#instance 20 vlan 30,40 //映射实例20到VLAN30和40
S26281(config)#int range fa 0/5,0/7
S26281(config-if-range)#switchport mode trunk
S26281(config-if-range)#exit
S26281(config)#int range fa 0/9,0/1,0/3,0/11
S26281(config-if-range)#switchport mode access
S26281(config-if-range)#spanning-tree portfast //配置接口为portfast
S26281(config-if-range)#exit
S37601的配置:
Ruijie(config)#hostname S37601
S37601(config)#vlan 10
S37601(config-vlan)#vlan 20
S37601(config-vlan)#vlan 30
S37601(config-vlan)#vlan 40
S37601(config-vlan)#exit
s37601(config)#spanning-tree
s37601(config)#spanning-tree mode mstp
s37601(config)#spanning-tree mst configuration
s37601(config-mst)#instance 10 vlan 10,20
s37601(config-mst)#instance 20 vlan 30,40
s37601(config-mst)#exit
s37601(config)#spanning-tree mst 10 priority 4096 //配置实例10优先级为4096
S37601(config)#intvlan 10
S37601(config-if-VLAN 10)#ip address 192.168.10.253 255.255.255.0
S37601(config-if-VLAN 10)#vrrp 1 ip 192.168.10.254 //配置VRRP1备份网关为192.168.10.254
S37601(config-if-VLAN 10)#vrrp 1 priority 120 //配置优先级为120
S37601(config-if-VLAN 10)#vrrp 1 track fa 0/5 30 //配置上行链路追踪
S37601(config-if-VLAN 10)#exit
S37601(config)#intvlan 20
S37601(config-if-VLAN 20)#ip address 192.168.20.253 255.255.255.0
S37601(config-if-VLAN 20)#vrrp 2 ip 192.168.20.254 //配置VRRP2备份网关为192.168.20.254
S37601(config-if-VLAN 20)#vrrp 2 priority 120 //配置优先级为120
S37601(config-if-VLAN 20)#vrrp 2 track fa 0/5 30 //配置上行链路追踪
S37601(config-if-VLAN 20)#exit
S37601(config)#intvlan 30
S37601(config-if-VLAN 30)#ip address 192.168.30.252 255.255.255.0
S37601(config-if-VLAN 30)#vrrp 3 ip 192.168.30.254
S37601(config-if-VLAN 30)#vrrp 3 track fa 0/7 30
S37601(config-if-VLAN 30)#exit
S37601(config)#intvlan 40
S37601(config-if-VLAN 40)#ip address 192.168.40.252 255.255.255.0
S37601(config-if-VLAN 40)#vrrp 4 ip 192.168.40.254
S37601(config-if-VLAN 40)#vrrp 4 track fa 0/7 30
S37601(config-if-VLAN 40)#exit
S37601(config)#route ospf 1
S37601(config-router)#network 192.168.0.0 0.0.255.255 area 0
S37601(config-router)#network 10.1.1.0 0.0.0.3 area 0
S37602的配置:
Ruijie(config)#hostname S37602
S37602(config)#vlan 10
S37602(config-vlan)#vlan 20
S37602(config-vlan)#vlan 30
S37602(config-vlan)#vlan 40
S37602(config)#int range fa 0/23,0/24 //聚合端口fa 0/23,0/24
S37602(config-if-range)#port-group 1
exit
S37602(config)#intagg 1
S37602(config-if-AggregatePort 1)#switchport mode trunk //配置聚合端口为trunk模式
S37602(config-if-AggregatePort 1)#exit
S37602(config)#int fa 0/7
S37602(config-if-FastEthernet 0/7)#switchport mode trunk
S37602(config-if-FastEthernet 0/7)#exit
s37602(config)#spanning-tree
s37602(config)#spanning-tree mode mstp
s37602(config)#spanning-tree mst configuration
s37602(config-mst)#instance 10 vlan 10,20
s37602(config-mst)#instance 20 vlan 30,40
s37602(config)#spanning-tree mst 20 priority 4096
S37602(config-vlan)#intvlan 10
S37602(config-if-VLAN 10)#ip address 192.168.10.252 255.255.255.0
S37602(config-if-VLAN 10)#vrrp 1 ip 192.168.10.254
S37602(config-if-VLAN 10)#vrrp 1 track fa 0/5 30
S37602(config-if-VLAN 10)#exit
S37602(config)#intvlan 20
S37602(config-if-VLAN 20)#ip address 192.168.20.252 255.255.255.0
S37602(config-if-VLAN 20)#vrrp 2 ip 192.168.20.254
S37602(config-if-VLAN 20)#vrrp 2 track fa 0/5 30
S37602(config-if-VLAN 20)#exit
S37602(config)#intvlan 30
S37602(config-if-VLAN 30)#ip address 192.168.30.253 255.255.255.0
S37602(config-if-VLAN 30)#vrrp 3 ip 192.168.30.254
S37602(config-if-VLAN 30)#vrrp 3 priority 120
S37602(config-if-VLAN 30)#vrrp 3 track fa 0/7 30
S37602(config-if-VLAN 30)#exit
S37602(config)#intvlan 40
S37602(config-if-VLAN 40)#ip address 192.168.40.253 255.255.255.0
S37602(config-if-VLAN 40)#vrrp 4 ip 192.168.40.254
S37602(config-if-VLAN 40)#vrrp 4 priority 120
S37602(config-if-VLAN 40)#vrrp 4 track fa 0/7 30
S37602(config-if-VLAN 40)#exit
S37602(config)#route ospf 1 //配置ospf
S37602(config-router)#network 20.1.1.0 0.0.0.3 area 0 //区域为0
S37602(config-router)#network 192.168.0.0 0.0.255.255 area 0
R1401的配置:
Ruijie(config)#hostname R1401
R1401(config)#route ospf 1 //配置ospf
R1401(config-router)#network 10.1.1.0 0.0.0.3 area 0
R1401(config-router)#network 172.16.1.0 0.0.0.3 area 0
R1401(config-router)#network 100.1.1.0 0.0.0.3 area 0
六.配置结果
S26281(config)#show run
Building configuration...
Current configuration : 1633 bytes
hostname s26281
redundancy
auto-sync time-period 3600
auto-sync standard
switchover timeout 4000
nfpp
vlan 1
vlan 10
vlan 20
vlan 30
vlan 40
no service password-encryption
spanning-treemst configuration
instance 0 vlan 1-49, 51-59, 61-69, 71-79, 81-4094
instance 10 vlan 10,20
instance 20 vlan 30,40
spanning-tree
interfaceFastEthernet 0/1
switchport access vlan 10
spanning-treeportfast
interfaceFastEthernet 0/2
interfaceFastEthernet 0/3
switchport access vlan 20
spanning-treeportfast
interfaceFastEthernet 0/4
interfaceFastEthernet 0/5
switchport mode trunk
interfaceFastEthernet 0/6
interfaceFastEthernet 0/7
switchport mode trunk
interfaceFastEthernet 0/9
switchport access vlan 30
spanning-treeportfast
switchport access vlan 40
spanning-treeportfast
line con 0
linevty 0 4
login
end
S37601#show run
hostname S37601
vlan 1
vlan 10
vlan 20
vlan 30
vlan 40
no service password-encryption
spanning-treemst configuration
instance 0 vlan 1-49, 51-59, 61-69, 71-79, 81-4094
instance 10 vlan 10,20
instance 20 vlan 30,40
spanning-treemst 10 priority 4096
spanning-tree
interfaceFastEthernet 0/1
noswitchport
noip proxy-arp
ip address 10.1.1.2 255.255.255.252
interfaceFastEthernet 0/5
switchport mode trunk
interfaceAggregatePort 1
switchport mode trunk
interface VLAN 10
noip proxy-arp
ip address 192.168.10.1 255.255.255.0
vrrp 1 priority 120
vrrp 1 ip 192.168.10.254
interface VLAN 20
noip proxy-arp
ip address 192.168.20.1 255.255.255.0
vrrp 2 priority 120
vrrp 2 ip 192.168.20.254
interface VLAN 30
noip proxy-arp
ip address 192.168.30.252 255.255.255.0
vrrp 3 ip 192.168.30.254
interface VLAN 40
noip proxy-arp
ip address 192.168.40.1 255.255.255.0
vrrp 4 ip 192.168.40.254
routerospf 1
network 10.1.1.0 0.0.0.3 area 0
network 192.168.0.0 0.0.255.255 area 0
line con 0
linevty 0 4
login
end
S37602(config)#show run
hostname S37602
nfpp
vlan 1
vlan 10
vlan 20
vlan 30
vlan 40
no service password-encryption
spanning-treemst configuration
instance 0 vlan 1-49, 51-59, 61-69, 71-79, 81-4094
instance 10 vlan 10,20
instance 20 vlan 30,40
spanning-treemst 20 priority 4096
spanning-tree
interfaceFastEthernet 0/12
noswitchport
noip proxy-arp
ip address 20.1.1.1 255.255.255.252
interfaceFastEthernet 0/23
port-group 1
interfaceFastEthernet 0/24
port-group 1
interfaceAggregatePort 1
switchport mode trunk
interface VLAN 10
noip proxy-arp
ip address 192.168.10.1 255.255.255.0
vrrp 1 ip 192.168.10.254
interface VLAN 20
noip proxy-arp
ip address 192.168.20.1 255.255.255.0
vrrp 2 ip 192.168.20.254
interface VLAN 30
noip proxy-arp
ip address 192.168.30.1 255.255.255.0
vrrp 3 priority 120
vrrp 3 ip 192.168.30.254
interface VLAN 40
noip proxy-arp
ip address 192.168.40.1 255.255.255.0
vrrp 4 priority 120
vrrp 4 ip 192.168.40.254
routerospf 1
network 172.16.1.0 0.0.0.3 area 0
network 192.168.0.0 0.0.255.255 area 0
line con 0
linevty 0 4
login
end
路由器:
R1401(CONFIG)#SHOW RUN
HOSTNAME R1401
NO SERVICE PASSWORD-ENCRYPTION
CONTROL-PLANE
CONTROL-PLANE PROTOCOL
NO ACPP
CONTROL-PLANE MANAGE
NO PORT-FILTER
NO ARP-CAR
NO ACPP
CONTROL-PLANE DATA
NO GLEAN-CAR
NO ACPP
INTERFACE SERIAL 4/0
ENCAPSULATION HDLC
INTERFACE FASTETHERNET 0/0
IP ADDRESS 10.1.1.1 255.255.255.252
DUPLEX AUTO
SPEED AUTO
INTERFACE FASTETHERNET 0/1
IP ADDRESS 172.16.1.1 255.255.255.252
DUPLEX AUTO
SPEED AUTO
INTERFACE FASTETHERNET 0/2
IP ADDRESS 100.1.1.1 255.255.255.252
DUPLEX AUTO
SPEED AUTO
ROUTER OSPF 1
NETWORK 10.1.1.0 0.0.0.3 AREA 0
NETWORK 100.1.1.0 0.0.0.3 AREA 0
NETWORK 172.16.1.0 0.0.0.3 AREA 0
REF PARAMETER 50 400
LINE CON 0
LINE AUX 0
LINE TTY 1
MODEM INOUT
LINE VTY 0 4
LOGIN
END
七.结果分析
1 分别设置PC机IP地址如下:
PC1: 192.168.10.10 PC2:192.168.20.5 PC3:192.168.30.2
PC4:192.168.40.2
S37602(config)#show vrrp brief
Interface Grp Pri timer Own Pre State Master addr Group addr
VLAN 10 1 100 3.60 - P Backup 192.168.10.1 192.168.10.254
VLAN 20 2 100 3.60 - P Backup 192.168.20.1 192.168.20.254
VLAN30 3 120 3.53 - P Master 192.168.30.1 192.168.30.254
VLAN 40 4 120 3.53 - P Master 192.168.40.1 192.168.40.254
配置VRRP后,结果如上所示,此机为vlan30和vlan40的master路由器而为vlan10和vlan20的把备用路由器。
- 当接入设备和汇聚设备之间的链路down
上图可以看出,此图中截获到的vrrp报文。
此图为截取到的MSTP中的BPDU报文,可看出其BPDU报文为MSTP的,其优先级为32768。
当接入设备和汇聚设备之间的链路down时,ospf报文中的hello报文将与vrrp报文进行联动来根据track跟踪端口状态来实时切换链路以保证网络稳定性。2.汇聚设备上行接口down
同理分析
汇聚层设备上行接口down时,接口设置了track接口跟踪,监控接口状态,如果发现接口down则会快速切换接口选择合适的路径。进行数据的传输。
汇聚设备down
![在这里插入图片描述](https://img-blog.csdnimg.cn/20200829100042606.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzA3M
jUwOA==,size_16,color_FFFFFF,t_70#pic_center)汇聚设备宕机时,master设备将会重新选举,backup设备处于监听状态,一旦发现master设备宕机,将会快速切换。数据将会沿着重新选举的master设备进行传输
测试网络连通性:
在此时期间,网络始终联通
vrrp报文分析如下:
版本(version)字段的值为2;
类型(type)字段的值为1,代表vrrp通告报文;
虚拟路由器ID(VRID)字段的值为3;
优先级(priority)字段的值为120;
IP地址数量(Add Count)字段的值为1;
验证类型(Authentication Type )字段的值为0,表示不进行验证;
通告间隔(Advertisement interval)字段的值为默认的1秒,表示该路由器以每1秒间隔发送vrrp通告报文;
IP地址(IP address)字段的值为192.168.70.254,表示虚拟路由器的IP地址。