区域综合实验
实验报告
一 实验要求
二层使用MSTP+VRRP实现破环和冗余。
1. 交换机之间trunk使用最少vlan透传原则
2. sw1，sw2之间链路做聚合
3. MSTP name配置为SC
4. MSTP 实例映射为:
instance 1 vlan 21
instance 2 vlan 22 23 100
5.sw1为实例1，0的根，实例2的备份根
6. sw2为实例2的根，实例1，0的备份根
7. 所有access接口配置为边缘接口，并配置BPDU保护，同时需要过滤用户收到STP相关报文。
8. sw1为vlanif 21的master，sw2为backup
9. sw2为vlanif 22的master，sw1为backup
10.sw1与sw2的VRRP需监控上行链路，双上行都down时切换网关，抢占延时为20s
二 实验拓补
三 实验步骤
- 首先配置链路聚合
[D-1]interface Eth-Trunk 0
[sw1-Eth-Trunk0]trunkport g0/0/1
[sw1-Eth-Trunk0]trunkport g0/0/2
[sw2-Eth-Trunk0]trunkport g0/0/1
[sw2-Eth-Trunk0]trunkport g0/0/2
- 然后配置vlan和通道
[sw1]vlan batch 21 to 23
[sw1]vlan 100
[sw2]vlan batch 21 to 23
[sw2]vlan 100
[sw1-Eth-Trunk0]
[sw1-Eth-Trunk0]port link-type trunk
[sw1-Eth-Trunk0]p t a v 100
[sw3-Ethernet0/0/1]p l t
[sw3-Ethernet0/0/1]p t a v 100
[sw4-Ethernet0/0/1]p l t
[sw4-Ethernet0/0/1]p t a v 21
[sw4-Ethernet0/0/2]p l t
[sw4-Ethernet0/0/2]p t a v 22
[sw5-Ethernet0/0/2]p l t
[sw5-Ethernet0/0/2]p t a v 23
[sw3-Ethernet0/0/3]p l a
[sw4-Ethernet0/0/3]p l a
[sw5-Ethernet0/0/3]p l a
- 配置MSTP协议和选举主备份根 ：
[sw1]stp enable
[sw1]stp mode mstp
[sw1]stp region-configuration
[sw1-mst-region]region-name SC
[sw1-mst-region]instance 1 vlan 21
[sw1-mst-region]instance 2 vlan 22 23 100
[sw1]stp instance 0 root primary
[sw1]stp instance 1 root primary
[sw1-mst-region]active region-configuration
[sw2]stp enable
[sw2]stp mode mstp
[sw2]stp region-configuration
[sw2-mst-region]region-name SC
[sw2-mst-region]instance 1 vlan 21
[sw2-mst-region]instance 2 vlan 22 23 100
[sw2]stp instance 0 root secondary
[sw2]stp instance 1 root secondary
[sw2]stp instance 2 root primary
[sw2-mst-region]active region-configuration
4．接口配置为边缘接口，并配置BPDU保护
[sw3-Ethernet0/0/3]stp edged-port enable
[sw3-Ethernet0/0/3]stp bpdu-filter enable
[sw4-Ethernet0/0/3]stp edged-port enable
[sw4-Ethernet0/0/3]stp bpdu-filter enable
[sw5-Ethernet0/0/1]stp edged-port enable
[sw5-Ethernet0/0/1]stp bpdu-filter enable
Vlanif的配置
[sw1]int Vlanif 21
[sw1-Vlanif21]ip add 192.168.21.1 24
[sw1-Vlanif21]int vlan 22
[sw1-Vlanif22]ip add 192.168.22.1 24
[sw1-Vlanif22]int vlan 23
[sw1-Vlanif23]ip add 192.168.23.1 24
[sw1-Vlanif23]int vlan 100
[sw1-Vlanif100]ip add 192.168.0.1 24
- .我们假设sw1与sw2的0/0/和0/0/6接口为上行链路 配置监控
[sw1-Vlanif21]vrrp vrid 1 virtual-ip 192.168.21.254
[sw1-Vlanif22]vrrp vrid 1 virtual-ip 192.168.22.254
[sw1-Vlanif23]vrrp vrid 1 virtual-ip 192.168.23.254
[sw1-Vlanif22]vrrp vrid 1 track interface g0/0/4 reduced 15
[sw1-Vlanif21]vrrp vrid 1 track interface g0/0/4 reduced 15
[sw1-Vlanif23]vrrp vrid 1 track interface g0/0/4 reduced 15
Sw2同理
至此