锐捷交换机配置 RLDP 协议进行防环处理

目录

配置步骤

1. 步骤一　－－　开启RLDP功能

2. 步骤二　－－　配置检测到环路后的处理方式

3. 步骤三　－－　设置端口检测异常事件

4. 步骤四　－－　开启BPDUguard防护功能

5. 步骤五　－－　配置边缘端口

功能验证

参考文献

---

配置步骤

1. 步骤一　－－　开启RLDP功能

switch(config)#rldp enable

2. 步骤二　－－　配置检测到环路后的处理方式

终端接口下开启 RLDP防止环路，检测到环路后处理方式为 Shutdown-Port；

switch(config)#int f0/1

switch(config-if)#rldp port loop-detect shutdown-port

---

注：实现防环保护，一共有四种处理方式，分别是以下四种

shutdown-port

#当环路发生时，关闭端口

shutdown-svi

#当环路发生时，关闭svi，svi是联系vlan的接口，一个svi只能和一个vlan相联系

warning

#当环路发生时，显示警告信息

block

#当环路发生时，将端口的状态更改为block阻塞状态

3. 步骤三　－－　设置端口检测异常事件

如果端口被 BPDU Guard检测进入 Err-Disabled状态，再过 300 秒后会自动恢复（基于接口部署策略），重新检测是否有环路。

Ruijie(config-if-GigabitEthernet 0/0)#errdisable recover interval 300 #接口模式下配置

Ruijie(config)#errdisable recover interval 300 #全局模式下配置

4. 步骤四　－－　开启BPDUguard防护功能

终端接口开启BPDU防护不能接收 BPDU报文；

Ruijie(config-if-GigabitEthernet 0/0)#spanning-tree bpduguard enable

Ruijie(config-if-GigabitEthernet 0/0)#spanning-tree bpdufilter enable 

5. 步骤五　－－　配置边缘端口

连接终端的所有端口配置为边缘端口；

Ruijie(config-if-GigabitEthernet 0/0)#spanning-tree portfast

portfast端口也会继续发送bpdu报文

功能验证

1. 查看RLDP的状态

1. 当g0/5和g0/7口环起来后会出现如下log

Rujijie#

*Mar 19 20:16:00: %RLDP-3-LINK_DETECT_ERROR: loop detection error detect on interface GigabitEthernet 0/7.set this interface errordisable!

*Mar 19 20:16:00: %RLDP-3-LINK_DETECT_ERROR: loop detection error detect on interface GigabitEthernet 0/5.set this interface errordisable!

Mar 19 20:16:01: %LINEPROTO-5-UPDOWN: Line protocol on Interface VLAN 1, changed state to down.

*Mar 19 20:16:02: %LINK-3-UPDOWN: Interface GigabitEthernet 0/5, changed state to down.

*Mar 19 20:16:02: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet 0/5, changed state to down.

*Mar 19 20:16:02: %LINK-3-UPDOWN: Interface GigabitEthernet 0/7, changed state to down.

*Mar 19 20:16:02: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet 0/7, changed state to down.

1. 查看接口状态，发现这两个口被disable了

1. 过了300S，交换机会把端口自动变为恢复状态，如下：

*Mar 19 20:21:01: %PORT_SECURITY-4-ERR_RECOVER: Interface GigabitEthernet 0/5 recover from an error.

*Mar 19 20:21:01: %PORT_SECURITY-4-ERR_RECOVER: Interface GigabitEthernet 0/7 recover from an error.

*Mar 19 20:21:01: %RLDP-3-LINK_DETECT_RECOVER: rldp recover interface GigabitEthernet 0/7 from loop error

*Mar 19 20:21:01: %RLDP-3-LINK_DETECT_RECOVER: rldp recover interface GigabitEthernet 0/5 from loop error

*Mar 19 20:21:04: %LINEPROTO-5-UPDOWN: Line protocol on Interface VLAN 1, changed state to up.

*Mar 19 20:21:06: %LINK-3-UPDOWN: Interface GigabitEthernet 0/5, changed state to up.

*Mar 19 20:21:06: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet 0/5, changed state to up.

*Mar 19 20:21:06: %LINK-3-UPDOWN: Interface GigabitEthernet 0/7, changed state to up.

*Mar 19 20:21:06: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet 0/7, changed state to up.

1. 如果需要立即恢复被disable的端口，可以通过如下命令实现;

Rujijie#rldp reset

Rujijie#

*Mar 19 20:34:32: %PORT_SECURITY-4-ERR_RECOVER: Interface GigabitEthernet 0/7 recover from an error.

*Mar 19 20:34:32: %RLDP-3-LINK_DETECT_RECOVER: rldp recover interface GigabitEthernet 0/7 from loop error

*Mar 19 20:34:32: %PORT_SECURITY-4-ERR_RECOVER: Interface GigabitEthernet 0/5 recover from an error.

*Mar 19 20:34:32: %RLDP-3-LINK_DETECT_RECOVER: rldp recover interface GigabitEthernet 0/5 from loop error

参考文献

1. 锐捷交换机配置RLDP协议进行防环处理_「已注销」的博客-CSDN博客
2. 快搜预览中心