ensp mstp+vrrp高可用组网实验
一、实验topo
二、实验目标
- 网关位于汇聚层,接入和汇聚层采用trunk的方式进行互联,汇聚层和核心层之间采用三层方式互联。
- 在接入和汇聚交换机上配置多生成树协议,name为mst,实例1包括11、12,实例2包括 vlan 13 、14,要求HJ1为实例1的主根,HJ2为实例2 的主根,并互为备份根。
- 在汇聚交换之间启用VRRP协议,为VLAN实现网关备份,vrrp组中的虚拟IP为vlan中的第一个可用IP地址(所有网关地址X.X.X.1);HJ1为VLAN11、12的master; HJ2为13、14的master,且互为备份。
三、IP地址分配表
设备名称 | 设备接口 | ip地址 |
---|---|---|
HJ1 | vlan11 | 10.1.11.10/24 |
vlan12 | 10.1.12.10/24 | |
vlan13 | 10.1.13.10/24 | |
vlan14 | 10.1.14.10/24 | |
vlan201 | 10.1.201.2/24 | |
HJ2 | vlan11 | 10.1.11.20/24 |
vlan12 | 10.1.12.20/24 | |
vlan13 | 10.1.13.20/24 | |
vlan14 | 10.1.14.20/24 | |
vlan202 | 10.1.202.2/24 | |
HX | vlan201 | 10.1.201.1/24 |
vlan202 | 10.1.202.1/24 |
四、基础配置
1F
// 创建vlan
[1F]vlan batch 11 12 13 14
// 更改端口配置
[1F]int e 0/0/1
[1F-Ethernet0/0/1]port link-type access
[1F-Ethernet0/0/1]port default vlan 12 // 配置端口默认vlan
[1F]int e 0/0/2
[1F-Ethernet0/0/2]port link-type access
[1F-Ethernet0/0/2]port default vlan 12
[1F]int g 0/0/1
[1F-GigabitEthernet0/0/1]port link-type trunk
[1F-GigabitEthernet0/0/1]port trunk allow-pass vlan 11 to 14 201 202
[1F]int g 0/0/2
[1F-GigabitEthernet0/0/2]port link-type trunk
[1F-GigabitEthernet0/0/2]port trunk allow-pass vlan 11 to 14 201 202
2F
// 创建vlan
[2F]vlan batch 11 to 14
// 更改端口配置
[2F]int e 0/0/1
[2F-Ethernet0/0/1]port link-type access
[2F-Ethernet0/0/1]port default vlan 14
[2F]int e 0/0/2
[2F-Ethernet0/0/2]port link-type access
[2F-Ethernet0/0/2]port default vlan 13
[2F]int g 0/0/1
[2F-GigabitEthernet0/0/1]port link-type trunk
[2F-GigabitEthernet0/0/1]port trunk allow-pass vlan 11 to 14 201 202
[2F]int g 0/0/2
[2F-GigabitEthernet0/0/2]port link-type trunk
[2F-GigabitEthernet0/0/2]port trunk allow-pass vlan 11 to 14 201 202
HJ1
// vlan创建及ip配置
[HJ1]vlan batch 11 to 14 201
[HJ1]int vlan 11
[HJ1-Vlanif11]ip add 10.1.11.10 24
[HJ1]int vlan 12
[HJ1-Vlanif12]ip add 10.1.12.10 24
[HJ1]int vlan 13
[HJ1-Vlanif13]ip add 10.1.13.10 24
[HJ1]int vlan 14
[HJ1-Vlanif14]ip add 10.1.14.10 24
[HJ1]int vlan 201
[HJ1-Vlanif201]ip add 10.1.201.2 24
// 更改端口配置
[HJ1]int g 0/0/21
[HJ1-GigabitEthernet0/0/21]port link-type trunk
[HJ1-GigabitEthernet0/0/21]port trunk allow-pass vlan 11 to 14 201 202
[HJ1]int g 0/0/22
[HJ1-GigabitEthernet0/0/22]port link-type trunk
[HJ1-GigabitEthernet0/0/22]port trunk allow-pass vlan 11 to 14 201 202
[HJ1]int g 0/0/23
[HJ1-GigabitEthernet0/0/23]port link-type trunk
[HJ1-GigabitEthernet0/0/23]port trunk allow-pass vlan 11 to 14 201 202
[HJ1]int g 0/0/24
[HJ1-GigabitEthernet0/0/24]port link-type trunk
[HJ1-GigabitEthernet0/0/24]port trunk allow-pass vlan 11 to 14 201 202
HJ2
// vlan创建及ip配置
[HJ2]vlan batch 11 to 14 202
[HJ2]int vlan 11
[HJ2-Vlanif11]ip add 10.1.11.20 24
[HJ2]int vlan 12
[HJ2-Vlanif12]ip add 10.1.12.20 24
[HJ2]int vlan 13
[HJ2-Vlanif13]ip add 10.1.13.20 24
[HJ2]int vlan 14
[HJ2-Vlanif14]ip add 10.1.14.20 24
[HJ2]int vlan 202
[HJ2-Vlanif202]ip add 10.1.204.2 24
// 端口配置
[HJ2]int g 0/0/21
[HJ2-GigabitEthernet0/0/21]port link-type trunk
[HJ2-GigabitEthernet0/0/21]port trunk allow-pass vlan 11 to 14 201 202
[HJ2]int g 0/0/22
[HJ2-GigabitEthernet0/0/22]port link-type trunk
[HJ2-GigabitEthernet0/0/22]port trunk allow-pass vlan 11 to 14 201 202
[HJ2]int g 0/0/23
[HJ2-GigabitEthernet0/0/23]port link-type trunk
[HJ2-GigabitEthernet0/0/23]port trunk allow-pass vlan 11 to 14 201 202
[HJ2]int g 0/0/24
[HJ2-GigabitEthernet0/0/24]port link-type trunk
[HJ2-GigabitEthernet0/0/24]port trunk allow-pass vlan 11 to 14 201 202
HX
[HX]vlan batch 201 202
[HX]int vlan 201
[HX-Vlanif201]ip add 10.1.201.1 24
[HX]int vlan 202
[HX-Vlanif202]ip add 10.1.202.1 24
[HX]int g 0/0/1
[HX-GigabitEthernet0/0/1]port link-type trunk
[HX-GigabitEthernet0/0/1]port trunk allow-pass vlan 11 to 14 201 202
[HX]int g 0/0/2
[HX-GigabitEthernet0/0/2]port link-type trunk
[HX-GigabitEthernet0/0/2]port trunk allow-pass vlan 11 to 14 201 202
五、OSPF路由配置
HJ1
[HJ1]ospf 1
[HJ1-ospf-1]area 0
[HJ1-ospf-1-area-0.0.0.0]network 10.1.11.0 0.0.0.255
[HJ1-ospf-1-area-0.0.0.0]network 10.1.12.0 0.0.0.255
[HJ1-ospf-1-area-0.0.0.0]network 10.1.13.0 0.0.0.255
[HJ1-ospf-1-area-0.0.0.0]network 10.1.14.0 0.0.0.255
[HJ1-ospf-1-area-0.0.0.0]network 10.1.201.0 0.0.0.255
HJ2
[HJ2]ospf 1
[HJ2-ospf-1]area 0
[HJ2-ospf-1-area-0.0.0.0]network 10.1.11.0 0.0.0.255
[HJ2-ospf-1-area-0.0.0.0]network 10.1.12.0 0.0.0.255
[HJ2-ospf-1-area-0.0.0.0]network 10.1.13.0 0.0.0.255
[HJ2-ospf-1-area-0.0.0.0]network 10.1.14.0 0.0.0.255
[HJ2-ospf-1-area-0.0.0.0]network 10.1.202.0 0.0.0.25
HX
[HX]ospf 1
[HX-ospf-1]area 0
[HX-ospf-1-area-0.0.0.0]network 10.1.201.0 0.0.0.255
[HX-ospf-1-area-0.0.0.0]network 10.1.202.0 0.0.0.255
六、MSTP配置
注意同一个mstp域 name level配置必须一致
1F
[1F]stp region-configuration
[1F-mst-region]region-name mst
[1F-mst-region]revision-level 1
[1F-mst-region]instance 1 vlan 11 12
[1F-mst-region]instance 2 vlan 13 14
[1F-mst-region]active region-configuration
2F
[2F]stp region-configuration
[2F-mst-region]region-name mst
[2F-mst-region]instance 1 vlan 11 12
[2F-mst-region]instance 2 vlan 13 14
[2F-mst-region]active region-configuration
HJ1
[HJ1]stp region-configuration
[HJ1-mst-region]region-name mst
[HJ1-mst-region]revision-level 1
[HJ1-mst-region]instance 1 vlan 11 12
[HJ1-mst-region]instance 2 vlan 13 14
[HJ1-mst-region]active region-configuration
// 配置HJ1为实例1的主根
[HJ1]stp instance 1 root primary
// 备份根
[HJ1]stp instance 2 root secondary
HJ2
[HJ2]stp region-configuration
[HJ2-mst-region]region-name mst
[HJ2-mst-region]revision-level 1
[HJ2-mst-region]instance 1 vlan 11 12
[HJ2-mst-region]instance 2 vlan 13 14
[HJ2-mst-region]active region-configuration
[HJ2]stp instance 1 root secondary
[HJ2]stp instance 2 root primary
七、VRRP配置
HJ1
[HJ1]int vlan 11
// 设置虚拟网关
[HJ1-Vlanif11]vrrp vrid 11 virtual-ip 10.1.11.1
// 设置优先级
[HJ1-Vlanif11]vrrp vrid 11 priority 100
// 开启端口监测功能
[HJ1-Vlanif11]vrrp vrid 11 track interface g0/0/24 reduced 50
[HJ1]int vlan 12
[HJ1-Vlanif12]vrrp vrid 12 virtual-ip 10.1.12.1
[HJ1-Vlanif12]vrrp vrid 12 priority 100
[HJ1-Vlanif12]vrrp vrid 12 track interface g0/0/24 reduced 50
[HJ1]int vlan 13
[HJ1-Vlanif13]vrrp vrid 13 virtual-ip 10.1.13.1
[HJ1-Vlanif13]vrrp vrid 13 priority 90
[HJ1]int vlan 14
[HJ1-Vlanif14]vrrp vrid 14 virtual-ip 10.1.14.1
[HJ1-Vlanif14]vrrp vrid 14 priority 90
HJ2
[HJ2]int vlan 11
[HJ2-Vlanif11]vrrp vrid 11 virtual-ip 10.1.11.1
[HJ2-Vlanif11]vrrp vrid 11 priority 90
[HJ2]int vlan 12
[HJ2-Vlanif12]vrrp vrid 12 virtual-ip 10.1.12.1
[HJ2-Vlanif12]vrrp vrid 12 priority 90
[HJ2]int vlan 13
[HJ2-Vlanif13]vrrp vrid 13 virtual-ip 10.1.13.1
[HJ2-Vlanif13]vrrp vrid 13 priority 100
[HJ2-Vlanif13]vrrp vrid 13 track interface g0/0/24 reduced 50
[HJ2]int vlan 14
[HJ2-Vlanif14]vrrp vrid 14 virtual-ip 10.1.14.1
[HJ2-Vlanif14]vrrp vrid 14 priority 100
[HJ2-Vlanif14]vrrp vrid 14 track interface g 0/0/24 reduced 50
八、测试
1.网络连通性测试
由 PC1 ping PC4进行测试
2.MSTP主备检测
HJ1
HJ1上的实例一的端口全是指定端口,所以说这是实例一的根交换机
HJ2
这跟HJ1相反,为实例二的根交换机
1F
2F
3.VRRP检测
HJ1
从图中可得出当前设备是组11 12的master路由器
HJ2
从图中可得出当前设备是组13 14的master路由器
至此实验配置成功