ip生产区
实验拓扑及需求
实验配置
需求一:交换机之间trunk使用最少vlan透传原则
[D-1]vlan batch 21 22 23 100
[D-1-GigabitEthernet0/0/3]port link-type trunk
[D-1-GigabitEthernet0/0/3]port trunk allow-pass vlan 21
[D-2-GigabitEthernet0/0/4]port link-type trunk
[D-2-GigabitEthernet0/0/4]port trunk allow-pass vlan 22
[D-2-GigabitEthernet0/0/5]port link-type trunk
[D-2-GigabitEthernet0/0/5]port trunk allow-pass vlan 23 100
[A-1-GigabitEthernet0/0/1]port link-type trunk
[A-1-GigabitEthernet0/0/1]port trunk allow-pass vlan 21
[A-1-GigabitEthernet0/0/2]port link-type access
[A-1-GigabitEthernet0/0/2]port default vlan 21
[A-2-GigabitEthernet0/0/1]port link-type access
[A-2-GigabitEthernet0/0/1]port default vlan 22
[A-2-GigabitEthernet0/0/2]port link-type trunk
[A-2-GigabitEthernet0/0/2]port trunk allow-pass vlan 22
[A-3-GigabitEthernet0/0/1]port link-type trunk
[A-3-GigabitEthernet0/0/1]port trunk allow-pass vlan 23 100
需求二:D-1,D-2之间做链路聚合
[D-1]int Eth-Trunk 0
[D-1-Eth-Trunk0]trunkport g0/0/1
[D-1-Eth-Trunk0]trunkport g0/0/2
[D-2]interface Eth-Trunk 0
[D-2-Eth-Trunk0]trunkport g0/0/1
[D-2-Eth-Trunk0]trunkport g0/0/2
[D-1-Eth-Trunk0]port link-type trunk
[D-1-Eth-Trunk0]port trunk allow-pass vlan 21 22 23 100
[D-2-Eth-Trunk0]port link-type trunk
[D-2-Eth-Trunk0]port trunk allow-pass vlan 21 22 23 100
需求三:MSTP name 配置为SC
需求四:MSTP 实例映射为:
instance 1 vlan 21
instance 2 vlan 22 23 100
需求五:D-1为实例1,0的根,实例二的备份根
需求六:D-2为实例二的根,实例1,0的备份根
[D-1]stp enable
[D-1]stp region-configuration
[D-1-mst-region]region-name SC
[D-1-mst-region]instance 1 vlan 21
[D-1-mst-region]instance 2 vlan 22 23 100
[D-1-mst-region]active region-configuration
[D-1]stp instance 1 root primary
[D-1]stp instance 0 root primary
[D-1]stp instance 2 root secondary
[D-2]stp enable
[D-2-mst-region]region-name SC
[D-2-mst-region]instance 1 vlan 21
[D-2-mst-region]instance 2 vlan 22 23 100
[D-2-mst-region]active region-configuration
[D-2]stp instance 0 root secondary
[D-2]stp instance 1 root secondary
[D-2]stp instance 2 root primary
需求七:所有access接口配置为边缘接口,并配置BPDU保护,同时需要过滤用户收到stp相关报文
[A-1-GigabitEthernet0/0/2]stp edged-port enable
[A-1-GigabitEthernet0/0/2]stp bpdu-filter enable
[A-1]stp bpdu-protection
[A-2-GigabitEthernet0/0/1]stp edged-port enable
[A-2-GigabitEthernet0/0/2]stp bpdu-filter enable
[A-2]stp bpdu-protection
需求八:D-1为vlanif 21 的master,D-2为backup
需求九:D-2为vlanif 22 的master,D-1为backup
[D-1]int vlanif 21
[D-1-Vlanif21]ip address 192.168.1.1 255.255.255.0
[D-1-Vlanif21]vrrp vrid 1 virtual-ip 192.168.1.2
[D-1-Vlanif21]vrrp vrid 1 priority 101
[D-2]int vlanif 22
[D-2-Vlanif22]ip address 192.168.1.3 255.255.255.0
[D-2-Vlanif22]vrrp vrid 1 virtual-ip 192.168.1.2
[D-2-Vlanif22]vrrp vrid 1 priority 101
需求十:D-1与D-2的vrrp需监控上行链路,双上行都down时切换网关,抢占延时为20s
[D-1-Vlanif21]vrrp vrid 1 track interface g0/0/3 reduced 2
[D-2-Vlanif22]vrrp vrid 1 track interface g0/0/4 reduced 2
[D-1-Vlanif21]vrrp vrid 1 preempt-mode timer delay 20
[D-2-Vlanif22]vrrp vrid 1 preempt-mode timer delay 20