快速生成树(RSTP)

快速生成树(RSTP)

RSTP的端口角色

1. 替代端口: 可以简单的理解为根端口的备份,他是非根交换机收到了其他设备发送的BPDU从而被阻塞的端口
2. 备份端口: 是指交换机由于收到了自己所发送的BPDU从而被阻塞的端口
3. 边缘端口: 不参与生成树计算,不用经历转发延迟.边缘端口的关闭或激活不会触发RSTP拓扑的变更

RSTP的端口状态

1. 丢弃 Discarding
2. 学习 Learning
3. 转发 Forwarding
   
   实验开始
   S1

<Huawei>sy
[Huawei]stp mode rstp //开启rstp模式
Info: This operation may take a few seconds. Please wait for a moment...done.
[Huawei]stp root primary //设置此交换机为主根桥
[Huawei]dis stp b  //查看端口状态
 MSTID  Port                        Role  STP State     Protection
   0    GigabitEthernet0/0/1        DESI  FORWARDING      NONE
   0    GigabitEthernet0/0/2        DESI  FORWARDING      NONE

S2

<Huawei>sy
[Huawei]stp mode rstp //开启rstp模式
Info: This operation may take a few seconds. Please wait for a moment...done.
[Huawei]stp root secondary  //设置此交换机为备份根桥
[Huawei]int g0/0/3  //进入03端口
[Huawei-GigabitEthernet0/0/3]stp edged-port enable  //开启边缘端口 使此端口不参与生成树计算
[Huawei]dis stp b  //查看端口状态
 MSTID  Port                        Role  STP State     Protection
   0    GigabitEthernet0/0/1        ROOT  FORWARDING      NONE
   0    GigabitEthernet0/0/2        DESI  FORWARDING      NONE
   0    GigabitEthernet0/0/3        DESI  FORWARDING      NONE

S3

<Huawei>sy
[Huawei]stp mode rstp //开启rstp模式
Info: This operation may take a few seconds. Please wait for a moment...done.
[Huawei]int g0/0/3  //进入03端口
[Huawei-GigabitEthernet0/0/3]stp edged-port enable  //开启边缘端口 使此端口不参与生成树计算
[Huawei]dis stp b  //查看端口状态
 MSTID  Port                        Role  STP State     Protection
   0    GigabitEthernet0/0/1        ROOT  FORWARDING      NONE
   0    GigabitEthernet0/0/2        DESI  FORWARDING      NONE
   0    GigabitEthernet0/0/3        DESI  FORWARDING      NONE

S4

<Huawei>sy
[Huawei]stp mode rstp //开启rstp模式
Info: This operation may take a few seconds. Please wait for a moment...done.
[Huawei]int g0/0/2  //进入02端口
[Huawei-GigabitEthernet0/0/2]stp cost 100000  //设置此端口的开销值为10万 目的是使此端口成为阻塞端口 默认是两万,只要比两万大都行
[Huawei]dis stp b  //查看端口状态
 MSTID  Port                        Role  STP State     Protection
   0    GigabitEthernet0/0/1        ROOT  FORWARDING      NONE
   0    GigabitEthernet0/0/2        ALTE  DISCARDING      NONE

可以看到 s4这台交换机的02端口已经被阻塞

接下里测试实验连通性

可以看到pc2可以ping通pc1

还可以设置stp计时器的时间等安全策略

stp timer max-age 600  
stp timer forward-dalay 400

[Huawei]stp root primary  //指定根桥
[Huawei]stp root secondary  //指定备份根桥
[Huawei-GigabitEthernet0/0/1]stp edged-port enable  //开启边缘端口
[Huawei]stp bpdu-protection  //配置端口bpdu保护 在配置边缘端口的交换机上设置 防止BPDU攻击
[Huawei-GigabitEthernet0/0/1]stp root-protection   //配置根端口保护 防止根桥的抢占
[Huawei-GigabitEthernet0/0/1]stp loop-protection   //再根端口上开启环路保护
[sw]stp tc-protection  //激活拓扑变更保护功能 防止tc报文攻击