華為設備stp 、vrrp的實力應用
實驗拓撲:
實驗目的:1.熟練地應用stp、vrrp的應用及配置
2.了解環路以及解決方案
3.使全網互通
實驗思路:首先把拓撲圖分為三個部分
1.配置相同vlan相通,相同網段看交換,先配置交換機,左右兩邊各有三個交換機,所有會有環路,就要用到stp ,把sw2,3配置為根網橋,所有交換流量都要通過他倆: 配置命令:stp root primary
其他兩個交換機配置stp,實現負載均衡,以及備份鏈路
[sw]stp region-configuration
[sw-mst-region]region-name haha
[sw-mst-region]instance 1 vlan 10
[sw-mst-region]instance 2 vlan 20
[sw-mst-region]active region-configuration
[sw]stp instance 1 priority 4096
[sw]stp instance 2 priority 8192
交換機與交換機之間用trunk鏈接
2. 在配置第二部分,不同網段用路由。
三個路由器都要使用的情況下,要實現冗余,就用vrrp協議配置優先級
配置命令:
R1
vrrp vrid 10 virtual-ip 192.168.10.250 創建虛擬網關
vrrp vrid 10 priority 150 配置優先級為150,默認100
vrrp vrid10 interface gi 0/0/2 reduce 100
配置鏈路跟蹤,當interface gi0/0/2 端口為down時,優先級減100
R2
vrrp vrid 10 virtual-ip 192.168.10.250
vrrp vrid 10 priority 100
R3
vrrp vrid 10 virtual-ip 192.168.10.250
vrrp vrid 10 priority 80
3.配置第三部分
交換機端口開啟
R4
配置ip interface gi0/0/0 0/0/1
配置步驟:
設備 | ip | 網關 | 子網掩碼 |
pc1 | 192.168.10.1 | 192.168.10.250 | 255.255.255.0 |
pc2 | 192.168.20.1 | 192.168.20.250 | 255.255.255.0 |
pc3 | 192.168.10.2 | 192.168.10.250 | 255.255.255.0 |
pc4 | 192.168.20.2 | 192.168.20.250 | 255.255.255.0 |
服務器 | 192.168.30.1 | 192.168.30.254 | 255.255.255.0 |
R1-0/0/0 | 192.168.10.254 | 255.255.255.0 | |
R1-0/0/1 | 192.168.20.254 | 255.255.255.0 | |
R1-0/0/2 | 192.168.100.1 | 255.255.255.0 | |
R1-虛擬ip | 192.168.10.250 | ||
R1-虛擬ip | 192.168.20.250 | ||
R2-0/0/0 | 192.168.10.253 | 255.255.255.0 | |
R2-0/0/1 | 192.168.20.253 | 255.255.255.0 | |
R2-0/0/2 | 192.168.100.1 | 255.255.255.0 | |
R2-虛擬ip | 192.168.10.250 | ||
R2-虛擬ip | 192.168.20.250 | ||
R3-0/0/0 | 192.168.10.252 | 255.255.255.0 | |
R3-0/0/1 | 192.168.20.252 | 255.255.255.0 | |
R3-0/0/2 | 192.168.100.1 | 255.255.255.0 | |
R3-虛擬ip | 192.168.10.250 | ||
R3-虛擬ip | 192.168.20.250 | ||
R4-0/0/0 | 192.168.100.2 | 255.255.255.0 | |
R4-0/0/1 | 192.168.30.254 | 255.255.255.0 |
第一部分
sw4
interface gi0/0/1 :port link-tyde access
port default vlan 10
interface gi0/0/2 :port link-tyde trunk
port trunk allow-pass vlan all
interface gi0/0/3 :port link-tyde trunk
port trunk allow-pass vlan all
[sw4]stp region-configuration
[sw4-mst-region]region-name haha
[sw4-mst-region]instance 1 vlan 10
[sw4-mst-region]instance 2 vlan 20
[sw4-mst-region]active region-configuration
[sw4]stp instance 1 priority 4096
[sw4]stp instance 2 priority 8192
sw5
interface gi0/0/1 :port link-tyde access
port default vlan 20
interface gi0/0/2 :port link-tyde trunk
port trunk allow-pass vlan all
interface gi0/0/3 :port link-tyde trunk
port trunk allow-pass vlan all
[sw5]stp region-configuration
[sw5-mst-region]region-name haha
[sw5-mst-region]instance 1 vlan 10
[sw5-mst-region]instance 2 vlan 20
[sw5-mst-region]active region-configuration
[sw5]stp instance 1 priority 8192
[sw5]stp instance 2 priority 4096
sw2
interface gi0/0/1 :port link-tyde trunk
port trunk allow-pass vlan all
interface gi0/0/2 :port link-tyde trunk
port trunk allow-pass vlan all
interface gi0/0/3 :port link-tyde access
port default vlan 10
interface gi0/0/4 :port link-tyde access
port default vlan 10
interface gi0/0/5 :port link-tyde access
port default vlan 10
interface gi0/0/6 :port link-tyde trunk
port trunk allow-pass vlan all
sw2:stp root primary
sw6
interface gi0/0/1 :port link-tyde access
port default vlan 10
interface gi0/0/2 :port link-tyde trunk
port trunk allow-pass vlan all
interface gi0/0/3 :port link-tyde trunk
port trunk allow-pass vlan all
[sw6]stp region-configuration
[sw6-mst-region]region-name haha
[sw6-mst-region]instance 1 vlan 10
[sw6-mst-region]instance 2 vlan 20
[sw6-mst-region]active region-configuration
[sw6]stp instance 1 priority 4096
[sw6]stp instance 2 priority 8192
sw7
interface gi0/0/1 :port link-tyde access
port default vlan 20
interface gi0/0/2 :port link-tyde trunk
port trunk allow-pass vlan all
interface gi0/0/3 :port link-tyde trunk
port trunk allow-pass vlan all
[sw7]stp region-configuration
[sw7-mst-region]region-name haha
[sw7-mst-region]instance 1 vlan 10
[sw7-mst-region]instance 2 vlan 20
[sw7-mst-region]active region-configuration
[sw7]stp instance 1 priority 8192
[sw7]stp instance 2 priority 4096
sw3
interface gi0/0/1 :port link-tyde trunk
port trunk allow-pass vlan all
interface gi0/0/2 :port link-tyde trunk
port trunk allow-pass vlan all
interface gi0/0/3 :port link-tyde access
port default vlan 20
interface gi0/0/4 :port link-tyde access
port default vlan 20
interface gi0/0/5 :port link-tyde access
port default vlan 10
interface gi0/0/6 :port link-tyde trunk
port trunk allow-pass vlan all
sw3:stp root primary
驗證:
pc1 ping pc3
pc2 ping pc4
第二部分
R1
interface gi 0/0/0 :ip addess 192.168.10.254 255.255.255.0
vrrp vrid 10 virtual-ip 192.168.10.250
vrrp vrid 10 priority 150
vrrp vrid 10 track interface GigabitEthernet0/0/2 reduced 100
interface gi 0/0/1 :ip addess 192.168.20.252 255.255.255.0
vrrp vrid 20 virtual-ip 192.168.20.250
vrrp vrid 10 priority 80
interface gi 0/0/2 :ip addess 192.168.100.1 255.255.255.0
ospf 1 router-id 1.1.1.1
area 0.0.0.0
network 192.168.10.0 0.0.0.255
network 192.168.20.0 0.0.0.255
area 0.0.0.30
network 192.168.100.0 0.0.0.255
R2
interface gi 0/0/0 :ip addess 192.168.10.253 255.255.255.0
vrrp vrid 10 virtual-ip 192.168.10.250
vrrp vrid 10 priority 100
vrrp vrid 10 track interface GigabitEthernet0/0/2 reduced 50
interface gi 0/0/1 :ip addess 192.168.20.253 255.255.255.0
vrrp vrid 20 virtual-ip 192.168.20.250
vrrp vrid 10 priority 100
vrrp vrid 20 track interface GigabitEthernet0/0/2 reduced 50
interface gi 0/0/2 :ip addess 192.168.100.1 255.255.255.0
ospf 1 router-id 2.2.2.2
area 0.0.0.0
network 192.168.10.0 0.0.0.255
network 192.168.20.0 0.0.0.255
area 0.0.0.30
network 192.168.100.0 0.0.0.255
R3
interface gi 0/0/0 :ip addess 192.168.10.252 255.255.255.0
vrrp vrid 10 virtual-ip 192.168.10.250
vrrp vrid 10 priority 80
interface gi 0/0/1 :ip addess 192.168.20.252 255.255.255.0
vrrp vrid 20 virtual-ip 192.168.20.250
vrrp vrid 20 priority 150
vrrp vrid 20 track interface GigabitEthernet0/0/2 reduced 100
interface gi 0/0/2 :ip addess 192.168.100.1 255.255.255.0
ospf 1 router-id 3.3.3.3
area 0.0.0.0
network 192.168.10.0 0.0.0.255
network 192.168.20.0 0.0.0.255
area 0.0.0.30
network 192.168.100.0 0.0.0.255
驗證vlan與vlan之間
pc1 ping pc2、pc4
第三部分
sw1不用配置,端口默認開啟
R4
interface gi0/0/0 :ip addess 192.168.100.2 255.255.255.0
interface gi0/0/1 :ip addess 192.168.30.254 255.255.255.0
ospf 1 router-id 4.4.4.4
area 0.0.0.30
network 192.168.30.0 0.0.0.255
network 192.168.100.0 0.0.0.255
驗證全網通
pc1 ping 服務器
華為設備stp 、vrrp的實力應用