VRRP+MSTP工程实例配置

mstp加vrrp的实验例子

mstp加vrrp的实验例子（原创实用版）目录1.MSTP 和 VRRP 的概述2.MSTP 加 VRRP 的实验环境搭建3.实验步骤和过程4.实验结果及分析5.实验结论和展望正文一、MSTP 和 VRRP 的概述1.MSTP（Multiple Spanning Tree Protocol）：多实例生成树协议，用于在多个 VLAN（虚拟局域网）之间实现生成树保护。

2.VRRP（Virtual Router Redundancy Protocol）：虚拟路由器冗余协议，用于提高网络设备的可靠性和冗余性。

二、MSTP 加 VRRP 的实验环境搭建1.设备：两台路由器（Router1 和 Router2），一台交换机（Switch）2.接口：Router1 的接口 G0/0/1 和 G0/0/2 分别连接到 Switch 的接口 1 和 2；Router2 的接口 G0/0/1 和 G0/0/2 分别连接到Switch 的接口 3 和 4。

3.配置：为每个接口分配不同的 VLAN，如 G0/0/1 为 VLAN10，G0/0/2 为 VLAN20。

三、实验步骤和过程1.在 Router1 上配置 MSTP 和 VRRP：a.配置 MSTP：在 Router1 上启用 MSTP，将 G0/0/1 和 G0/0/2 分别配置为 MSTP 的实例 1 和实例 2。

b.配置 VRRP：在 Router1 上启用 VRRP，将 G0/0/1 和 G0/0/2 分别配置为 VRRP 的虚拟路由器 1 和虚拟路由器 2。

2.在 Router2 上配置 MSTP 和 VRRP：a.配置 MSTP：在 Router2 上启用 MSTP，将 G0/0/1 和 G0/0/2 分别配置为 MSTP 的实例 1 和实例 2。

b.配置 VRRP：在 Router2 上启用 VRRP，将 G0/0/1 和 G0/0/2 分别配置为 VRRP 的虚拟路由器 1 和虚拟路由器 2。

vrrpmstpIRF的配置全解

vrrpmstpIRF的配置全解irf的堆叠（v5版系统）对于多个设备，可以通过虚拟化将其堆叠到一个设备中，实现集中管理。

不同域之间的IRF也可以相互堆叠，这大大提高了设备的处理能力。

IRF的主选择应基于设备优先级、系统运行时间、成员编号和MAC地址。

组网：两台h3c5800要求：通过IRF将两个设备堆叠成一个。

成员1的优先级为10，成员2的优先级为5irf1配置#sysnameirf#系统视图中的Irfdomain10（指定IRF的域号。

同一个域号属于同一组堆叠设备，或者可以在不同组之间堆叠）irfmember1priority10（1-32，数值越高优先级越高，优先成为master）#进入internet1/关闭端口interfaceten-gigabitethernet1/0/28shutdown#Irf-port1/1（输入Irf堆栈端口进行配置）portgroupinterfacegigabitethernet1/0/27portgroupinterface gigabitethernet1/0/28#interfaceten-gigabitethernet1/0/27undoshutdown(激活端口)interfaceten-gigabitethernet1/0/28undoshutdownsaveIRF端口配置激活irf2配置#系统视图下Irfmember1renumber2（修改IRF成员编号）保存reboot(保存并重启后修改的成员号生效可以displaycurrent-configuration查看当前配置可以看到端口号为原来的gigabitethernet1/0/1变为gigabitethernet2/0/1)#Irfdomain10（指定IRF的域号。

同一个域号属于同一组堆叠设备，或者可以在不同组之间堆叠）IrfMember2Priority 5（1-32。

值越高，优先级越高，优先级成为主）#interfaceten-gigabitethernet1/0/27(进入堆叠的端口)shutdown（关闭）interfaceten-gigabitethernet1/0/28关闭#irf-port1/1（进入irf堆叠端口进行配置）portgroupinterfaceten-gigabitethernet1/0/27portgroupinterfaceten-gigabitethernet1/0/28#接口千兆以太网1/0/27unshut（激活端口）interfaceten-gigabitethernet1/0/28unshut保存（此时，优先级较低的设备必须在激活IRF之前保存配置，否则在选择后重新启动将清除配置）irf-port-configurationactive(激活irf的配置)通过查看配置，可以同时看到两台机器的端口测试：显示拓扑displayirfconfiguration您可以看到IRF配置是成功的。

思科交换机+vrrp+mstp配置实例

交换机vrrp加mstp配置实例一、组网需求1、switch a 、switch b选用两台锐捷的s5750 ；switch c 、shwich d 选用锐捷的s3750和s37602、全网共有两个业务vlan ,为vlan 10 、vlan 203、Switch a 、switch b 都分别对两vlan起用两vrrp组，实现两组的业务的负载分担和备份。

4、Switch a、switch b、switch c、switch d 都起用mstp多生成数协议，并且所有设备都属于同一个mst域，且实例映射一致（vlan 10映射实例1、vlan 20映射实例2 其他vlan映射默认实例0）。

5、Vlan 10业务以switch a为根桥；vlan 20业务以switch b为根桥；实现阻断网络环路，并能实现不同vlan数据流负载分担功能。

二、组网图三、配置步骤Switch a配置：s1#show runBuilding configuration...Current configuration : 1651 bytes!version RGNOS 10.2.00(2), Release(29287)(Tue Dec 25 20:39:14 CST 2007 -ngcf49) hostname s1co-operate enable!!!vlan 1!vlan 10!vlan 20!!no service password-encryption!spanning-tree 开启生成树（默认为mstp）spanning-tree mst configuration 进入mst配置模式revision 1 指定MST revision number 为1name region1 指定mst配置名称instance 0 vlan 1-9, 11-19, 21-4094 缺省情况下vlan都属于实例0instance 1 vlan 10 手工指定vlan10属于实例1instance 2 vlan 20 手工指定vlan20属于实例2spanning-tree mst 1 priority 0 指定实例1的优先级为0（为根桥）spanning-tree mst 2 priority 4096 指定实例2的优先级为4096interface GigabitEthernet 0/1switchport access vlan 10 配置g0/1属于vlan10!interface GigabitEthernet 0/2switchport access vlan 20 配置g0/2属于vlan 20!interface GigabitEthernet 0/3!..interface GigabitEthernet 0/24 设置g0/24为trunk接口且允许vlan10/20通过switchport mode trunk!interface VLAN 10 创建vlan 10 svi接口ip address 192.168.10.1 255.255.255.0 配置ip地址vrrp 1 priority 120 配置vrrp组1 优先级为120vrrp 1 ip 192.168.10.254 配置vrrp组1虚拟ip地址为192.168.10.254!interface VLAN 20 创建vlan 20 svi接口ip address 192.168.20.1 255.255.255.0 配置ip地址vrrp 2 ip 192.168.20.254 配置vrrp组2虚拟ip地址为192.168.20.254默认vrrp组的优先级为100默认不显示!line con 0line vty 0 4logins1#show vlanVLAN Name Status Ports---- -------------------------------- --------- ----------------------------------1 VLAN0001 STATIC Gi0/3, Gi0/4, Gi0/5, Gi0/6Gi0/7, Gi0/8, Gi0/9, Gi0/10Gi0/11, Gi0/12, Gi0/13, Gi0/14Gi0/15, Gi0/16, Gi0/17, Gi0/18Gi0/19, Gi0/20, Gi0/21, Gi0/22Gi0/23, Gi0/2410 VLAN0010 STATIC Gi0/1, Gi0/2420 VLAN0020 STATIC Gi0/2, Gi0/24Switch b配置：s2#show runBuilding configuration...Current configuration : 1607 bytes!version RGNOS 10.2.00(2), Release(27932)(Thu Dec 13 10:32:09 CST 2007 -ngcf31) hostname s2!!!vlan 1!vlan 10!vlan 20!!no service password-encryption!spanning-treespanning-tree mst configurationrevision 1name region1instance 0 vlan 1-9, 11-19, 21-4094instance 1 vlan 10instance 2 vlan 20spanning-tree mst 1 priority 4096spanning-tree mst 2 priority 0interface GigabitEthernet 0/1switchport access vlan 10!interface GigabitEthernet 0/2switchport access vlan 20!..interface GigabitEthernet 0/24switchport mode trunk!interface VLAN 10ip address 192.168.10.2 255.255.255.0vrrp 1 ip 192.168.10.254!interface VLAN 20ip address 192.168.20.2 255.255.255.0vrrp 2 priority 120vrrp 2 ip 192.168.20.254!line con 0line vty 0 4login!!ends2#show vlanVLAN Name Status Ports---- -------------------------------- --------- -----------------------------------1 VLAN0001 STATIC Gi0/3, Gi0/4, Gi0/5, Gi0/6Gi0/7, Gi0/8, Gi0/9, Gi0/10Gi0/11, Gi0/12, Gi0/13, Gi0/14Gi0/15, Gi0/16, Gi0/17, Gi0/18Gi0/19, Gi0/20, Gi0/21, Gi0/22Gi0/23, Gi0/2410 VLAN0010 STATIC Gi0/1, Gi0/2420 VLAN0020 STATIC Gi0/2, Gi0/24Switch c配置：s3#show runBuilding configuration...Current configuration : 1540 bytes!version RGNOS 10.2.00(2), Release(28794)(Fri Dec 21 09:27:15 CST 2007 -ngcf32) hostname s3!vlan 1!vlan 10!!service password-encryption!spanning-treespanning-tree mst configurationrevision 1name region1instance 0 vlan 1-9, 11-19, 21-4094instance 1 vlan 10instance 2 vlan 20spanning-tree mst 1 priority 0spanning-tree mst 2 priority 4096interface FastEthernet 0/1switchport access vlan 10!interface FastEthernet 0/2switchport access vlan 10!..interface GigabitEthernet 0/25!interface GigabitEthernet 0/26!interface GigabitEthernet 0/27!interface GigabitEthernet 0/28!interface VLAN 10ip address 192.168.10.3 255.255.255.0!ip route 0.0.0.0 0.0.0.0 192.168.10.254!!line con 0line vty 0 4loginSwitch d配置：s4#show runBuilding configuration...Current configuration : 1066 bytes!version RGNOS 10.2.00(2), Release(27932)(Thu Dec 13 10:31:41 CST 2007 -ngcf32) hostname s4!vlan 1!vlan 20!!no service password-encryption!spanning-treespanning-tree mst configurationrevision 1name region1instance 0 vlan 1-9, 11-19, 21-4094instance 1 vlan 10instance 2 vlan 20spanning-tree mst 1 priority 4096spanning-tree mst 2 priority 0interface GigabitEthernet 0/1switchport access vlan 20!interface GigabitEthernet 0/2switchport access vlan 20!..interface GigabitEthernet 0/12!interface VLAN 20ip address 192.168.20.3 255.255.255.0!!!!ip route 0.0.0.0 0.0.0.0 192.168.20.254!!line con 0line vty 0 4login!四、查看vrrp、mstp信息Switch a 信息：s1#show vrrp 查看vrrp 信息VLAN 10 - Group 1State is MasterVirtual IP address is 192.168.10.254 configuredVirtual MAC address is 0000.5e00.0101Advertisement interval is 1 secPreemption is enabledmin delay is 0 secPriority is 120Master Router is 192.168.10.1 (local), priority is 120Master Advertisement interval is 1 secMaster Down interval is 3 secVLAN 20 - Group 2State is BackupVirtual IP address is 192.168.20.254 configuredVirtual MAC address is 0000.5e00.0102Advertisement interval is 1 secPreemption is enabledmin delay is 0 secPriority is 100Master Router is 192.168.20.2 , priority is 120Master Advertisement interval is 1 secMaster Down interval is 3 secs1#s1#s1#s1#show spanning-tree interface gigabitEthernet 0/1 查看g0/1接口stp状态信息PortAdminPortFast : Disabled PortOperPortFast : Disabled PortAdminAutoEdge : Enabled PortOperAutoEdge : Disabled PortAdminLinkType : auto PortOperLinkType : point-to-point PortBPDUGuard : DisabledPortBPDUFilter : Disabled###### MST 0 vlans mapped :1-9, 11-19, 21-4094 PortState : forwardingPortPriority : 128PortDesignatedRoot : 8000.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :8000.00d0.f836.ed70 PortDesignatedPort : 8001 PortForwardTransitions : 6 PortAdminPathCost : 200000 PortOperPathCost : 200000PortRole : designatedPort###### MST 1 vlans mapped :10PortState : forwardingPortPriority : 128PortDesignatedRoot : 0001.00d0.f823.ef82 PortDesignatedCost : 0 PortDesignatedBridge :0001.00d0.f823.ef82 PortDesignatedPort : 8001 PortForwardTransitions : 5 PortAdminPathCost : 200000 PortOperPathCost : 200000PortRole : rootPort###### MST 2 vlans mapped :20PortState : forwardingPortPriority : 128PortDesignatedRoot : 0002.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :1002.00d0.f836.ed70 PortDesignatedPort : 8001 PortForwardTransitions : 4 PortAdminPathCost : 200000 PortOperPathCost : 200000PortRole : designatedPorts1#s1#s1#show spanning-tree interface gigabitEthernet 0/2 查看g0/2接口stp状态信息PortAdminPortFast : DisabledPortOperPortFast : DisabledPortAdminAutoEdge : EnabledPortOperAutoEdge : DisabledPortAdminLinkType : autoPortOperLinkType : point-to-pointPortBPDUGuard : DisabledPortBPDUFilter : Disabled###### MST 0 vlans mapped :1-9, 11-19, 21-4094PortState : forwardingPortPriority : 128PortDesignatedRoot : 8000.001a.a909.8fe0PortDesignatedCost : 0PortDesignatedBridge :8000.00d0.f836.ed70PortDesignatedPort : 8002PortForwardTransitions : 5PortAdminPathCost : 20000PortOperPathCost : 20000PortRole : designatedPort###### MST 1 vlans mapped :10PortState : forwardingPortPriority : 128PortDesignatedRoot : 0001.00d0.f823.ef82PortDesignatedCost : 0PortDesignatedBridge :0001.00d0.f836.ed70PortDesignatedPort : 8002PortForwardTransitions : 4PortAdminPathCost : 20000PortOperPathCost : 20000PortRole : designatedPort###### MST 2 vlans mapped :20PortState : discardingPortPriority : 128PortDesignatedRoot : 0002.001a.a909.8fe0PortDesignatedCost : 0PortDesignatedBridge :0002.00d0.f8d7.ae12PortDesignatedPort : 8002PortForwardTransitions : 3PortAdminPathCost : 20000PortOperPathCost : 20000PortRole : alternatePorts1#s1#s1#show spanning-tree interface gigabitEthernet 0/24 g0/24接口stp状态信息PortAdminPortFast : DisabledPortOperPortFast : DisabledPortAdminAutoEdge : EnabledPortOperAutoEdge : DisabledPortAdminLinkType : autoPortOperLinkType : point-to-pointPortBPDUGuard : DisabledPortBPDUFilter : Disabled###### MST 0 vlans mapped :1-9, 11-19, 21-4094PortState : forwardingPortPriority : 128PortDesignatedRoot : 8000.001a.a909.8fe0PortDesignatedCost : 0PortDesignatedBridge :8000.001a.a909.8fe0PortDesignatedPort : 8018PortForwardTransitions : 5PortAdminPathCost : 20000PortOperPathCost : 20000PortRole : rootPort###### MST 1 vlans mapped :10PortState : forwardingPortPriority : 128PortDesignatedRoot : 0001.00d0.f823.ef82PortDesignatedCost : 0PortDesignatedBridge :0001.00d0.f836.ed70PortDesignatedPort : 8018PortForwardTransitions : 5PortAdminPathCost : 20000PortOperPathCost : 20000PortRole : designatedPort###### MST 2 vlans mapped :20PortState : forwardingPortPriority : 128PortDesignatedRoot : 0002.001a.a909.8fe0 PortDesignatedCost : 0PortDesignatedBridge :0002.001a.a909.8fe0 PortDesignatedPort : 8018 PortForwardTransitions : 4PortAdminPathCost : 20000PortOperPathCost : 20000PortRole : rootPorts1#Switch b 信息：s2#show vrrpVLAN 10 - Group 1State is BackupVirtual IP address is 192.168.10.254 configured Virtual MAC address is 0000.5e00.0101 Advertisement interval is 1 secPreemption is enabledmin delay is 0 secPriority is 100Master Router is 192.168.10.1 , priority is 120 Master Advertisement interval is 1 secMaster Down interval is 3 secVLAN 20 - Group 2State is MasterVirtual IP address is 192.168.20.254 configured Virtual MAC address is 0000.5e00.0102 Advertisement interval is 1 secPreemption is enabledmin delay is 0 secPriority is 120Master Router is 192.168.20.2 (local), priority is 120 Master Advertisement interval is 1 secMaster Down interval is 3 secs2#s2#s2#s2#s2#s2#s2#show spanning-tree interface gigabitEthernet 0/1PortAdminPortFast : Disabled PortOperPortFast : Disabled PortAdminAutoEdge : Enabled PortOperAutoEdge : Disabled PortAdminLinkType : auto PortOperLinkType : point-to-point PortBPDUGuard : DisabledPortBPDUFilter : Disabled###### MST 0 vlans mapped :1-9, 11-19, 21-4094 PortState : forwardingPortPriority : 128PortDesignatedRoot : 8000.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :8000.001a.a909.8fe0 PortDesignatedPort : 8001 PortForwardTransitions : 1 PortAdminPathCost : 200000 PortOperPathCost : 200000PortRole : designatedPort###### MST 1 vlans mapped :10PortState : forwardingPortPriority : 128PortDesignatedRoot : 0001.00d0.f823.ef82 PortDesignatedCost : 0 PortDesignatedBridge :0001.00d0.f823.ef82 PortDesignatedPort : 8002 PortForwardTransitions : 2 PortAdminPathCost : 200000 PortOperPathCost : 200000PortRole : rootPort###### MST 2 vlans mapped :20PortState : forwardingPortPriority : 128PortDesignatedRoot : 0002.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :0002.001a.a909.8fe0 PortDesignatedPort : 8001 PortForwardTransitions : 1 PortAdminPathCost : 200000 PortOperPathCost : 200000PortRole : designatedPorts2#s2#s2#s2#show spanning-tree interface gigabitEthernet 0/2 PortAdminPortFast : Disabled PortOperPortFast : Disabled PortAdminAutoEdge : Enabled PortOperAutoEdge : Disabled PortAdminLinkType : autoPortOperLinkType : point-to-point PortBPDUGuard : DisabledPortBPDUFilter : Disabled###### MST 0 vlans mapped :1-9, 11-19, 21-4094 PortState : forwardingPortPriority : 128PortDesignatedRoot : 8000.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :8000.001a.a909.8fe0 PortDesignatedPort : 8002 PortForwardTransitions : 1 PortAdminPathCost : 20000 PortOperPathCost : 20000PortRole : designatedPort###### MST 1 vlans mapped :10PortState : forwardingPortPriority : 128PortDesignatedRoot : 0001.00d0.f823.ef82 PortDesignatedCost : 0 PortDesignatedBridge :1001.001a.a909.8fe0 PortDesignatedPort : 8002 PortForwardTransitions : 2 PortAdminPathCost : 20000 PortOperPathCost : 20000PortRole : designatedPort###### MST 2 vlans mapped :20PortState : forwardingPortPriority : 128PortDesignatedRoot : 0002.001a.a909.8fe0 PortDesignatedCost : 0PortDesignatedBridge :0002.001a.a909.8fe0 PortDesignatedPort : 8002 PortForwardTransitions : 1PortAdminPathCost : 20000PortOperPathCost : 20000PortRole : designatedPorts2#s2#s2#s2#s2#show spanning-tree interface gigabitEthernet 0/24 PortAdminPortFast : Disabled PortOperPortFast : Disabled PortAdminAutoEdge : Enabled PortOperAutoEdge : Disabled PortAdminLinkType : autoPortOperLinkType : point-to-point PortBPDUGuard : DisabledPortBPDUFilter : Disabled###### MST 0 vlans mapped :1-9, 11-19, 21-4094 PortState : forwardingPortPriority : 128PortDesignatedRoot : 8000.001a.a909.8fe0 PortDesignatedCost : 0PortDesignatedBridge :8000.001a.a909.8fe0 PortDesignatedPort : 8018 PortForwardTransitions : 1PortAdminPathCost : 20000PortOperPathCost : 20000PortRole : designatedPort###### MST 1 vlans mapped :10PortState : discardingPortPriority : 128PortDesignatedRoot : 0001.00d0.f823.ef82 PortDesignatedCost : 0PortDesignatedBridge :0001.00d0.f836.ed70 PortDesignatedPort : 8018 PortForwardTransitions : 1PortAdminPathCost : 20000PortOperPathCost : 20000PortRole : alternatePort###### MST 2 vlans mapped :20PortState : forwardingPortPriority : 128PortDesignatedRoot : 0002.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :0002.001a.a909.8fe0 PortDesignatedPort : 8018 PortForwardTransitions : 1 PortAdminPathCost : 20000 PortOperPathCost : 20000PortRole : designatedPorts2#Switch c 信息：s3#show spanning-tree interface fastEthernet 0/1 PortAdminPortFast : Disabled PortOperPortFast : Disabled PortAdminAutoEdge : Enabled PortOperAutoEdge : Disabled PortAdminLinkType : auto PortOperLinkType : point-to-point PortBPDUGuard : DisabledPortBPDUFilter : Disabled###### MST 0 vlans mapped :1-9, 11-19, 21-4094 PortState : discardingPortPriority : 128PortDesignatedRoot : 8000.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :8000.00d0.f836.ed70 PortDesignatedPort : 8001 PortForwardTransitions : 1 PortAdminPathCost : 200000 PortOperPathCost : 200000PortRole : alternatePort###### MST 1 vlans mapped :10PortState : forwardingPortPriority : 128PortDesignatedRoot : 0001.00d0.f823.ef82PortDesignatedCost : 0 PortDesignatedBridge :0001.00d0.f823.ef82 PortDesignatedPort : 8001 PortForwardTransitions : 1 PortAdminPathCost : 200000 PortOperPathCost : 200000PortRole : designatedPort###### MST 2 vlans mapped :20PortState : discardingPortPriority : 128PortDesignatedRoot : 0002.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :1002.00d0.f836.ed70 PortDesignatedPort : 8001 PortForwardTransitions : 0 PortAdminPathCost : 200000 PortOperPathCost : 200000PortRole : alternatePorts3#s3#s3#s3#s3#show spanning-tree interface fastEthernet 0/2 PortAdminPortFast : Disabled PortOperPortFast : Disabled PortAdminAutoEdge : Enabled PortOperAutoEdge : Disabled PortAdminLinkType : auto PortOperLinkType : point-to-point PortBPDUGuard : DisabledPortBPDUFilter : Disabled###### MST 0 vlans mapped :1-9, 11-19, 21-4094 PortState : forwardingPortPriority : 128PortDesignatedRoot : 8000.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :8000.001a.a909.8fe0 PortDesignatedPort : 8001 PortForwardTransitions : 1 PortAdminPathCost : 200000 PortOperPathCost : 200000PortRole : rootPort###### MST 1 vlans mapped :10PortState : forwardingPortPriority : 128PortDesignatedRoot : 0001.00d0.f823.ef82 PortDesignatedCost : 0 PortDesignatedBridge :0001.00d0.f823.ef82 PortDesignatedPort : 8002 PortForwardTransitions : 2 PortAdminPathCost : 200000 PortOperPathCost : 200000PortRole : designatedPort###### MST 2 vlans mapped :20PortState : forwardingPortPriority : 128PortDesignatedRoot : 0002.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :0002.001a.a909.8fe0 PortDesignatedPort : 8001 PortForwardTransitions : 1 PortAdminPathCost : 200000 PortOperPathCost : 200000PortRole : rootPorts3#Switch d 信息：s4#show spanning-tree interface gigabitEthernet 0/1 PortAdminPortFast : Disabled PortOperPortFast : Disabled PortAdminAutoEdge : Enabled PortOperAutoEdge : Disabled PortAdminLinkType : autoPortOperLinkType : point-to-point PortBPDUGuard : DisabledPortBPDUFilter : Disabled###### MST 0 vlans mapped :1-9, 11-19, 21-4094 PortState : forwardingPortPriority : 128PortDesignatedRoot : 8000.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :8000.001a.a909.8fe0 PortDesignatedPort : 8002 PortForwardTransitions : 1 PortAdminPathCost : 20000 PortOperPathCost : 20000PortRole : rootPort###### MST 1 vlans mapped :10PortState : discardingPortPriority : 128PortDesignatedRoot : 0001.00d0.f823.ef82 PortDesignatedCost : 0 PortDesignatedBridge :1001.001a.a909.8fe0 PortDesignatedPort : 8002 PortForwardTransitions : 1 PortAdminPathCost : 20000 PortOperPathCost : 20000PortRole : alternatePort###### MST 2 vlans mapped :20PortState : forwardingPortPriority : 128PortDesignatedRoot : 0002.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :0002.001a.a909.8fe0 PortDesignatedPort : 8002 PortForwardTransitions : 1 PortAdminPathCost : 20000 PortOperPathCost : 20000PortRole : rootPorts4#s4#s4#s4#show spanning-tree interface gigabitEthernet 0/2 PortAdminPortFast : Disabled PortOperPortFast : Disabled PortAdminAutoEdge : Enabled PortOperAutoEdge : Disabled PortAdminLinkType : autoPortOperLinkType : point-to-point PortBPDUGuard : DisabledPortBPDUFilter : Disabled###### MST 0 vlans mapped :1-9, 11-19, 21-4094 PortState : discardingPortPriority : 128PortDesignatedRoot : 8000.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :8000.00d0.f836.ed70 PortDesignatedPort : 8002 PortForwardTransitions : 1 PortAdminPathCost : 20000 PortOperPathCost : 20000PortRole : alternatePort###### MST 1 vlans mapped :10PortState : forwardingPortPriority : 128PortDesignatedRoot : 0001.00d0.f823.ef82 PortDesignatedCost : 0 PortDesignatedBridge :0001.00d0.f836.ed70 PortDesignatedPort : 8002 PortForwardTransitions : 2 PortAdminPathCost : 20000 PortOperPathCost : 20000PortRole : rootPort###### MST 2 vlans mapped :20PortState : forwardingPortPriority : 128PortDesignatedRoot : 0002.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :0002.00d0.f8d7.ae12 PortDesignatedPort : 8002 PortForwardTransitions : 2 PortAdminPathCost : 20000 PortOperPathCost : 20000PortRole : designatedPorts4#FAQ:1.1 RSTP和MSTP配合为什么有问题1.1.1 原因分析由于RSTP/MSTP的指定端口快速迁移机制，即接收到下游的agreement报文才能进行快速迁移。

双核心(MSTP+VRRP)的拓扑实现和配置实例

双核心（MSTP+VRRP）的拓扑实现和配置实例1 配置VRRP在实验拓扑图中，由于有多条链路产生环路，所以我们在实验初始时一定要将某些端口堵塞（初始化时已将RG-S35B的f0/1-4四个端口堵塞，在配置完毕进行测试时才可以打开）．否则产生环路后，会发现设备的cpu利用率会达到100%（使用命令show cpu查看）。

RG-S35A(config)#interface vlan 10RG-S35A(config-if)#ip address 192.168.10.254 255.255.255.0 ！配置VLAN10的IP 地址RG-S35A(config-if)#standby 1 ip 192.168.10.250 ！配置虚拟IPRG-S35A(config-if)#standby 1 preempt！设为抢占模式RG-S35A(config-if)#standby 1 priority 254 ！VLAN10的standby优先级设为254RG-S35A(config-if)#exitRG-S35A(config)#interface vlan 20 ！VLAN20的standby不设优先级,默认为100RG-S35A(config-if)#ip address 192.168.20.253 255.255.255.0 ！配置VLAN20的IP 地址RG-S35A(config-if)#standby 2 ip 192.168.20.250 ！配置虚拟IPRG-S35A(config-if)#standby 2 preempt ！设为抢占模式RG-S35A(config-if)#exitRG-S35A(config)#interface vlan 30RG-S35A(config-if)#ip address 192.168.30.254 255.255.255.0 ！配置VLAN30的IP 地址RG-S35A(config-if)#standby 3 ip 192.168.30.250 ！配置虚拟IPRG-S35A(config-if)#standby 3 preempt ！设为抢占模式RG-S35A(config-if)#standby 3 priority 254 ！VLAN30的standby优先级设为254RG-S35A(config-if)#exitRG-S35A(config)#interface vlan 40 ！VLAN20的standby不设优先级,默认为100RG-S35A(config-if)#ip address 192.168.40.253 255.255.255.0 ！配置VLAN40的IP 地址RG-S35A(config-if)#standby 4 ip 192.168.40.250 ！配置虚拟IPRG-S35A(config-if)#stand 4 preempt ！设为抢占模式RG-S35A(config-if)#exitRG-S35A(config)#exitRG-S35B把vlan20 40 设置为standby 2、4 priority 2542 配置RG-S35A与RG-S35B的端口聚合理论上，35A和35B的f0/3和f0/4端口不需要设置为trunk口，但是我们习惯上都设为trunk（已在前面做好了配置）。

MSTP+vrrp实验报告-计算机网络

实验报告学号 1409040147 姓名刘丽课堂号 B0900630 实验日期 2016.12.20 同组人谢文霞、赖晓央、涂智潇指导教师刘琪实验一、MSTP一、实验目的和要求在接入层和汇聚层交换机上配置MSTP 并进行验证。

二、实验规划1. 实验背景传统的生成树协议是基于整个交换网络产生一个树形拓扑结构，所有的VLAN 都共享一个生成树，这种结构不能进行网络流量的负载均衡，是的有些交换设备比较繁忙，而另一些设备又很空闲。

为了克服这个问题，决定采用基于VLAN 的多生成树协议MSTP 。

现在要在交换机上做适当配置来完成这一任务。

S2126-1与S2126-2上的VLAN 配置不同，现在我们希望在任意一台交换机上都可以识别并传递相应VLAN 的信息。

请用GVRP 来解决这个问题。

同时自行设计修剪方式。

2. 实验设备锐捷S2126和S3550交换机，数据线若干。

3. 实验拓扑三、实验步骤与实验内容步骤一：配置接入层交换机S2126-1S2126-1 (config)#spanning-tree ！开启生成树S2126-1 (config)#spanning-tree mode mstp ！配置生成树模式为MSTPS3550S2126-2S2126-1F0/20F0/20 F0/10F0/10F0/20VLAN 10VLAN 20VLAN 30VLAN 10F0/10Join timer 200msLeave timer 600msLeaveall timer 1000ms查看GVRP的配置信息Switch#show gvrp configuration查看GVRP的运行状态switch#show gvrp status查看GVRP的端口统计信息Switch#show gvrp statistics { interface-id | all}四、结果验证验证测试：验证MSTP配置S2126-1#show spanning-tree mst configuration ！显示MSTP全局配置验证测试：验证MSTP配置S2126-2#show spanning-tree mst configuration验证测试：验证MSTP配置S3550-A#show spanning-tree mst configuration验证交换机配置：S3550-A#show spanning-tree mst 1 ！显示交换机S3550-A上实例1的特性S2126-1#show spanning-tree mst 1 ！显示交换机S2126-1上实例1的特性S2126-1#show spanning-tree mst 2 ！显示交换机S2126-1上实例2的特性4、IP地址规划设备名接口IP地址子网掩码S3550-1VLAN10192.168.10.1255.255.255.0VLAN20192.168.20.1255.255.255.0 S3550-2VLAN10192.168.10.2255.255.255.0VLAN20192.168.20.2255.255.255.0 R2624F0/1192.168.1.2 255.255.255.0F0/2192.168.1.6255.255.255.0Loopback1 1.1.1.1255.255.255.0F0172.26.10.200255.255.255.0F1172.26.30.200255.255.255.0 S2126S0200.20.20.21255.255.255.0Loopback2 2.2.2.2255.255.255.0三、实验内容S3550-1的配置：interface vlan 10ip add 192.168.10.1 255.255.255.0no shutdowninterface vlan 20ip add 192.168.20.1router ripversion 2no auto-summary network 192.168.10.0 network 192.168.20.0interface vlan 10standby 1 ip 192.168.10.254 standby 1 priority 120 interface vlan 20standby 2 ip 192.168.20.254S3550-2的配置：no shutdowninterface vlan 10ip add 192.168.10.2 255.255.255.0 no shutdowninterface vlan 20ip add 192.168.20.2 255.255.255.0 no shutdownrouter ripversion 2no auto-summarynetwork 192.168.10.0network 192.168.20.0interface vlan 10standby 1 ip 192.168.10.254 interface vlan 20standby 2 ip 192.168.20.254 standby 2 priority 120S2126的配置：show runvlan1PC1和PC2ping自己的网关，请问是否可以ping通？答：可以ping通，结果如下：在PC1和PC2上的cmd窗口中分别执行命令：route print，查看一下它们各自的网关是谁！在相关设备上分别：Show vrrp [brief]Show vrrp interfaceR2624配置：五、回答问题：什么情况下使用VRRP？什么是VRRP的负载均衡？答：虚拟路由冗余协议(Virtual Router Redundancy Protocol，简称VRRP)是由IETF提出的解决局域网中配置静态网关出现单点失效现象的路由协议，1998年已推出正式的2. 实验设备S3550,路由器，两个交换机。

校园网双核心(MSTP+VRRP)的拓扑实现和配置实例

双核心配置实例(一)cont.
RG-S35A(config)#spanning-tree mst 1 priority 4096
!实例1在35A的优先级为4096
RG-S35A(config)#spanning-tree mst 2 priority 8192
!实例2在35A的优先级为8192
配置较高优先级是为了使35A被选作mst 1的根节点。一方面是因为它的性能比21强，防止21被选做根节点；更重要的是，如果默认优先级更高的为35B，则vlan10、 30也会通过35B传输，与我们的期望结果相违背，产生冲突。
MSTP技术概述(cont.)
交换机A、B 在vlan1 内，交换机C、D 在vlan2 内，连成环路。
A vlan1 C vlan2
vlan1 B D
vlan2
MSTP技术概述(cont.)
若采用STP或RSTP，在某种配置下，会把交换机A和B 间的链路给discarding。
A vlan1 C vlan2
OA服务器服务器VLAN 服务器视频会议VLAN 视频会议交换机管理VLAN 交换机管理互连网段VLAN 互连网段
双核心配置实例(二)cont.
生成树协议管理
表二、表二、设备优先级列表设备主核心交换机备核心交换机接入交换机优先级 4096 8192 默认32768 默认
双核心配置实例(二)cont.
接入交换机 RG-S2150G
双核心配置实例(二)cont.
VLAN规划
根据支行的网络应用情况，针对不同的业务系统进行VLAN部署整理，如下表：
表一
用途生产用户VLAN 生产用户 OA用户用户VLAN 用户

VRRP+MSTP配置

VRRP+MSTP配置VRRP+MSTP（多实例⽣成树+双路由冗余）实现负载分担MSTP (多⽣成树) 每个VLAN或者⼏个VLAN拥有⼀颗⽣成树，基于实例的⽣成树。

instance 1、instance 2 每个实例拥有⼀颗⽣成树。

MSTP可以实现多VLAN 的负载分担，可以实现多⼚商对接。

VRRP虚拟路由冗余协议(Virtual Router Redundancy Protocol)是由IETF提出的解决局域⽹中配置静态⽹关出现单点失效现象的路由协议。

拓扑如下：交换机与交换机之间的链路为trunk类型，放⾏vlan10 20SW1配置：[sw1]vlan batch 10 20 #创建vlan10 20[sw1-Vlanif10]dis this#interface Vlanif10ip address 192.168.10.1 255.255.255.0 #配置物理⽹关地址vrrp vrid 1 virtual-ip 192.168.10.254 #配置vrrp组1 配置虚拟⽹关地址vrrp vrid 1 priority 120 #配置优先级为120，默认100数字越⼤越优先，使它成为vlan10的Mastervrrp vrid 1 track interface GigabitEthernet0/0/3 reduced 30 #检测上联端⼝，如果断开优先级降低30（之后会作为backup）#[sw1-Vlanif20]dis this#interface Vlanif20ip address 192.168.20.1 255.255.255.0 #配置vlan20的物理⽹关vrrp vrid 2 virtual-ip 192.168.20.254 #配置vlan20的虚拟⽹关vrrp vrid 2 preempt-mode timer delay 20 #延迟20秒后抢占MSTP配置[sw1]stp mode mstp #配置stp模式为mstp[sw1]stp region-configuration #进⼊stp配置模式[sw1-mst-region]dis this#stp region-configurationregion-name HW #配置域名为HWrevision-level 1 #配置版本等级为1（可选）instance 10 vlan 10 #配置vlan10 加⼊实例10instance 20 vlan 20 #配置vlan20 加⼊实例20active region-configuration#[sw1]stp instance 10 root primary #配置实例10为根[sw1]stp instance 20 root secondary #配置实例20为备份根SW2配置：[sw2]vlan batch 10 20[sw2-Vlanif10]dis this#interface Vlanif10ip address 192.168.10.2 255.255.255.0 #配置vlan10⽹关vrrp vrid 1 virtual-ip 192.168.10.254 #配置vrrp组1 配置虚拟⽹关和SW1⼀样vrrp vrid 1 preempt-mode timer delay 20 #延迟20s后抢占#[sw2-Vlanif20]dis this#interface Vlanif20ip address 192.168.20.2 255.255.255.0 #配置vlan20⽹关vrrp vrid 2 virtual-ip 192.168.20.254 #配置vrrp组2 配置虚拟⽹关和SW1⼀样vrrp vrid 2 priority 120 #配置优先级为120，使vrrp2 成为vlan20的Mastervrrp vrid 2 track interface GigabitEthernet0/0/22 reduced 30 #配置上联链路检测，如果断开优先级减去30 使它成为backup#MSTP配置[sw2]stp mode mstp #配置stp模式为mstp[sw2]stp region-configuration #进⼊stp配置模式[sw2-mst-region]dis this#stp region-configurationregion-name HW #配置域名为HWrevision-level 1 #配置版本等级为1（可选）instance 10 vlan 10 #配置vlan10 加⼊实例10instance 20 vlan 20 #配置vlan20 加⼊实例20active region-configuration#[sw2]stp instance 20 root primary #配置实例20为根[sw2]stp instance 10 root secondary #配置实例10为备份根SW3配置：[sw3]vlan batch 10 20MSTP配置[sw3]stp mode mstp #配置stp模式为mstp[sw3]stp region-configuration #进⼊stp配置模式[sw3-mst-region]dis this#stp region-configurationregion-name HW #配置域名为HWrevision-level 1 #配置版本等级为1（可选）instance 10 vlan 10 #配置vlan10 加⼊实例10instance 20 vlan 20 #配置vlan20 加⼊实例20active region-configuration#SW4配置：[sw4]vlan batch 10 20MSTP配置[sw4]stp mode mstp #配置stp模式为mstp[sw4]stp region-configuration #进⼊stp配置模式[sw4-mst-region]dis this#stp region-configurationregion-name HW #配置域名为HWrevision-level 1 #配置版本等级为1（可选）instance 10 vlan 10 #配置vlan10 加⼊实例10instance 20 vlan 20 #配置vlan20 加⼊实例20active region-configuration#测试效果：可以看出来PC3⾛的是 sw1的⽹关PC4⾛的是SW2的⽹关假设SW1的上联链路断开：SW2接管了vlan10成为了Master<sw2>dis vrrpVlanif10 | Virtual Router 10State : Master #sw2变成了vlan10的Master Virtual IP : 192.168.10.254Master IP : 192.168.10.2PriorityRun : 100PriorityConfig : 100MasterPriority : 100Preempt : YES Delay Time : 20 sTimerRun : 1 sTimerConfig : 1 sAuth type : NONEVirtual MAC : 0000-5e00-010aCheck TTL : YESConfig type : normal-vrrpCreate time : 2021-09-0720:41:05 UTC-08:00Last change time : 2021-09-0810:39:48 UTC-08:00可以看出来PC3的数据从SW1切换到了SW2上End。

思科交换机+vrrp+mstp配置实例

交换机vrrp加mstp配置实例一、组网需求1、switch a 、switch b选用两台锐捷的s5750 ；switch c 、shwich d 选用锐捷的s3750和s37602、全网共有两个业务vlan ,为vlan 10 、vlan 203、Switch a 、switch b 都分别对两vlan起用两vrrp组，实现两组的业务的负载分担和备份。

4、Switch a、switch b、switch c、switch d 都起用mstp多生成数协议，并且所有设备都属于同一个mst域，且实例映射一致（vlan 10映射实例1、vlan 20映射实例2 其他vlan映射默认实例0）。

5、Vlan 10业务以switch a为根桥；vlan 20业务以switch b为根桥；实现阻断网络环路，并能实现不同vlan数据流负载分担功能。

二、组网图三、配置步骤Switch a配置：s1#show runBuilding configuration...Current configuration : 1651 bytes!version RGNOS 10.2.00(2), Release(29287)(Tue Dec 25 20:39:14 CST 2007 -ngcf49) hostname s1co-operate enable!!!vlan 1!vlan 10!vlan 20!!no service password-encryption!spanning-tree 开启生成树（默认为mstp）spanning-tree mst configuration 进入mst配置模式revision 1 指定MST revision number 为1name region1 指定mst配置名称instance 0 vlan 1-9, 11-19, 21-4094 缺省情况下vlan都属于实例0instance 1 vlan 10 手工指定vlan10属于实例1instance 2 vlan 20 手工指定vlan20属于实例2spanning-tree mst 1 priority 0 指定实例1的优先级为0（为根桥）spanning-tree mst 2 priority 4096 指定实例2的优先级为4096interface GigabitEthernet 0/1switchport access vlan 10 配置g0/1属于vlan10!interface GigabitEthernet 0/2switchport access vlan 20 配置g0/2属于vlan 20!interface GigabitEthernet 0/3!..interface GigabitEthernet 0/24 设置g0/24为trunk接口且允许vlan10/20通过switchport mode trunk!interface VLAN 10 创建vlan 10 svi接口ip address 192.168.10.1 255.255.255.0 配置ip地址vrrp 1 priority 120 配置vrrp组1 优先级为120vrrp 1 ip 192.168.10.254 配置vrrp组1虚拟ip地址为192.168.10.254!interface VLAN 20 创建vlan 20 svi接口ip address 192.168.20.1 255.255.255.0 配置ip地址vrrp 2 ip 192.168.20.254 配置vrrp组2虚拟ip地址为192.168.20.254默认vrrp组的优先级为100默认不显示!line con 0line vty 0 4logins1#show vlanVLAN Name Status Ports---- -------------------------------- --------- ----------------------------------1 VLAN0001 STATIC Gi0/3, Gi0/4, Gi0/5, Gi0/6Gi0/7, Gi0/8, Gi0/9, Gi0/10Gi0/11, Gi0/12, Gi0/13, Gi0/14Gi0/15, Gi0/16, Gi0/17, Gi0/18Gi0/19, Gi0/20, Gi0/21, Gi0/22Gi0/23, Gi0/2410 VLAN0010 STATIC Gi0/1, Gi0/2420 VLAN0020 STATIC Gi0/2, Gi0/24Switch b配置：s2#show runBuilding configuration...Current configuration : 1607 bytes!version RGNOS 10.2.00(2), Release(27932)(Thu Dec 13 10:32:09 CST 2007 -ngcf31) hostname s2!!!vlan 1!vlan 10!vlan 20!!no service password-encryption!spanning-treespanning-tree mst configurationrevision 1name region1instance 0 vlan 1-9, 11-19, 21-4094instance 1 vlan 10instance 2 vlan 20spanning-tree mst 1 priority 4096spanning-tree mst 2 priority 0interface GigabitEthernet 0/1switchport access vlan 10!interface GigabitEthernet 0/2switchport access vlan 20!..interface GigabitEthernet 0/24switchport mode trunk!interface VLAN 10ip address 192.168.10.2 255.255.255.0vrrp 1 ip 192.168.10.254!interface VLAN 20ip address 192.168.20.2 255.255.255.0vrrp 2 priority 120vrrp 2 ip 192.168.20.254!line con 0line vty 0 4login!!ends2#show vlanVLAN Name Status Ports---- -------------------------------- --------- -----------------------------------1 VLAN0001 STATIC Gi0/3, Gi0/4, Gi0/5, Gi0/6Gi0/7, Gi0/8, Gi0/9, Gi0/10Gi0/11, Gi0/12, Gi0/13, Gi0/14Gi0/15, Gi0/16, Gi0/17, Gi0/18Gi0/19, Gi0/20, Gi0/21, Gi0/22Gi0/23, Gi0/2410 VLAN0010 STATIC Gi0/1, Gi0/2420 VLAN0020 STATIC Gi0/2, Gi0/24Switch c配置：s3#show runBuilding configuration...Current configuration : 1540 bytes!version RGNOS 10.2.00(2), Release(28794)(Fri Dec 21 09:27:15 CST 2007 -ngcf32) hostname s3!vlan 1!vlan 10!!service password-encryption!spanning-treespanning-tree mst configurationrevision 1name region1instance 0 vlan 1-9, 11-19, 21-4094instance 1 vlan 10instance 2 vlan 20spanning-tree mst 1 priority 0spanning-tree mst 2 priority 4096interface FastEthernet 0/1switchport access vlan 10!interface FastEthernet 0/2switchport access vlan 10!..interface GigabitEthernet 0/25!interface GigabitEthernet 0/26!interface GigabitEthernet 0/27!interface GigabitEthernet 0/28!interface VLAN 10ip address 192.168.10.3 255.255.255.0!ip route 0.0.0.0 0.0.0.0 192.168.10.254!!line con 0line vty 0 4loginSwitch d配置：s4#show runBuilding configuration...Current configuration : 1066 bytes!version RGNOS 10.2.00(2), Release(27932)(Thu Dec 13 10:31:41 CST 2007 -ngcf32) hostname s4!vlan 1!vlan 20!!no service password-encryption!spanning-treespanning-tree mst configurationrevision 1name region1instance 0 vlan 1-9, 11-19, 21-4094instance 1 vlan 10instance 2 vlan 20spanning-tree mst 1 priority 4096spanning-tree mst 2 priority 0interface GigabitEthernet 0/1switchport access vlan 20!interface GigabitEthernet 0/2switchport access vlan 20!..interface GigabitEthernet 0/12!interface VLAN 20ip address 192.168.20.3 255.255.255.0!!!!ip route 0.0.0.0 0.0.0.0 192.168.20.254!!line con 0line vty 0 4login!四、查看vrrp、mstp信息Switch a 信息：s1#show vrrp 查看vrrp 信息VLAN 10 - Group 1State is MasterVirtual IP address is 192.168.10.254 configuredVirtual MAC address is 0000.5e00.0101Advertisement interval is 1 secPreemption is enabledmin delay is 0 secPriority is 120Master Router is 192.168.10.1 (local), priority is 120Master Advertisement interval is 1 secMaster Down interval is 3 secVLAN 20 - Group 2State is BackupVirtual IP address is 192.168.20.254 configuredVirtual MAC address is 0000.5e00.0102Advertisement interval is 1 secPreemption is enabledmin delay is 0 secPriority is 100Master Router is 192.168.20.2 , priority is 120Master Advertisement interval is 1 secMaster Down interval is 3 secs1#s1#s1#s1#show spanning-tree interface gigabitEthernet 0/1 查看g0/1接口stp状态信息PortAdminPortFast : Disabled PortOperPortFast : Disabled PortAdminAutoEdge : Enabled PortOperAutoEdge : Disabled PortAdminLinkType : auto PortOperLinkType : point-to-point PortBPDUGuard : DisabledPortBPDUFilter : Disabled###### MST 0 vlans mapped :1-9, 11-19, 21-4094 PortState : forwardingPortPriority : 128PortDesignatedRoot : 8000.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :8000.00d0.f836.ed70 PortDesignatedPort : 8001 PortForwardTransitions : 6 PortAdminPathCost : 200000 PortOperPathCost : 200000PortRole : designatedPort###### MST 1 vlans mapped :10PortState : forwardingPortPriority : 128PortDesignatedRoot : 0001.00d0.f823.ef82 PortDesignatedCost : 0 PortDesignatedBridge :0001.00d0.f823.ef82 PortDesignatedPort : 8001 PortForwardTransitions : 5 PortAdminPathCost : 200000 PortOperPathCost : 200000PortRole : rootPort###### MST 2 vlans mapped :20PortState : forwardingPortPriority : 128PortDesignatedRoot : 0002.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :1002.00d0.f836.ed70 PortDesignatedPort : 8001 PortForwardTransitions : 4 PortAdminPathCost : 200000 PortOperPathCost : 200000PortRole : designatedPorts1#s1#s1#show spanning-tree interface gigabitEthernet 0/2 查看g0/2接口stp状态信息PortAdminPortFast : DisabledPortOperPortFast : DisabledPortAdminAutoEdge : EnabledPortOperAutoEdge : DisabledPortAdminLinkType : autoPortOperLinkType : point-to-pointPortBPDUGuard : DisabledPortBPDUFilter : Disabled###### MST 0 vlans mapped :1-9, 11-19, 21-4094PortState : forwardingPortPriority : 128PortDesignatedRoot : 8000.001a.a909.8fe0PortDesignatedCost : 0PortDesignatedBridge :8000.00d0.f836.ed70PortDesignatedPort : 8002PortForwardTransitions : 5PortAdminPathCost : 20000PortOperPathCost : 20000PortRole : designatedPort###### MST 1 vlans mapped :10PortState : forwardingPortPriority : 128PortDesignatedRoot : 0001.00d0.f823.ef82PortDesignatedCost : 0PortDesignatedBridge :0001.00d0.f836.ed70PortDesignatedPort : 8002PortForwardTransitions : 4PortAdminPathCost : 20000PortOperPathCost : 20000PortRole : designatedPort###### MST 2 vlans mapped :20PortState : discardingPortPriority : 128PortDesignatedRoot : 0002.001a.a909.8fe0PortDesignatedCost : 0PortDesignatedBridge :0002.00d0.f8d7.ae12PortDesignatedPort : 8002PortForwardTransitions : 3PortAdminPathCost : 20000PortOperPathCost : 20000PortRole : alternatePorts1#s1#s1#show spanning-tree interface gigabitEthernet 0/24 g0/24接口stp状态信息PortAdminPortFast : DisabledPortOperPortFast : DisabledPortAdminAutoEdge : EnabledPortOperAutoEdge : DisabledPortAdminLinkType : autoPortOperLinkType : point-to-pointPortBPDUGuard : DisabledPortBPDUFilter : Disabled###### MST 0 vlans mapped :1-9, 11-19, 21-4094PortState : forwardingPortPriority : 128PortDesignatedRoot : 8000.001a.a909.8fe0PortDesignatedCost : 0PortDesignatedBridge :8000.001a.a909.8fe0PortDesignatedPort : 8018PortForwardTransitions : 5PortAdminPathCost : 20000PortOperPathCost : 20000PortRole : rootPort###### MST 1 vlans mapped :10PortState : forwardingPortPriority : 128PortDesignatedRoot : 0001.00d0.f823.ef82PortDesignatedCost : 0PortDesignatedBridge :0001.00d0.f836.ed70PortDesignatedPort : 8018PortForwardTransitions : 5PortAdminPathCost : 20000PortOperPathCost : 20000PortRole : designatedPort###### MST 2 vlans mapped :20PortState : forwardingPortPriority : 128PortDesignatedRoot : 0002.001a.a909.8fe0 PortDesignatedCost : 0PortDesignatedBridge :0002.001a.a909.8fe0 PortDesignatedPort : 8018 PortForwardTransitions : 4PortAdminPathCost : 20000PortOperPathCost : 20000PortRole : rootPorts1#Switch b 信息：s2#show vrrpVLAN 10 - Group 1State is BackupVirtual IP address is 192.168.10.254 configured Virtual MAC address is 0000.5e00.0101 Advertisement interval is 1 secPreemption is enabledmin delay is 0 secPriority is 100Master Router is 192.168.10.1 , priority is 120 Master Advertisement interval is 1 secMaster Down interval is 3 secVLAN 20 - Group 2State is MasterVirtual IP address is 192.168.20.254 configured Virtual MAC address is 0000.5e00.0102 Advertisement interval is 1 secPreemption is enabledmin delay is 0 secPriority is 120Master Router is 192.168.20.2 (local), priority is 120 Master Advertisement interval is 1 secMaster Down interval is 3 secs2#s2#s2#s2#s2#s2#s2#show spanning-tree interface gigabitEthernet 0/1PortAdminPortFast : Disabled PortOperPortFast : Disabled PortAdminAutoEdge : Enabled PortOperAutoEdge : Disabled PortAdminLinkType : auto PortOperLinkType : point-to-point PortBPDUGuard : DisabledPortBPDUFilter : Disabled###### MST 0 vlans mapped :1-9, 11-19, 21-4094 PortState : forwardingPortPriority : 128PortDesignatedRoot : 8000.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :8000.001a.a909.8fe0 PortDesignatedPort : 8001 PortForwardTransitions : 1 PortAdminPathCost : 200000 PortOperPathCost : 200000PortRole : designatedPort###### MST 1 vlans mapped :10PortState : forwardingPortPriority : 128PortDesignatedRoot : 0001.00d0.f823.ef82 PortDesignatedCost : 0 PortDesignatedBridge :0001.00d0.f823.ef82 PortDesignatedPort : 8002 PortForwardTransitions : 2 PortAdminPathCost : 200000 PortOperPathCost : 200000PortRole : rootPort###### MST 2 vlans mapped :20PortState : forwardingPortPriority : 128PortDesignatedRoot : 0002.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :0002.001a.a909.8fe0 PortDesignatedPort : 8001 PortForwardTransitions : 1 PortAdminPathCost : 200000 PortOperPathCost : 200000PortRole : designatedPorts2#s2#s2#s2#show spanning-tree interface gigabitEthernet 0/2 PortAdminPortFast : Disabled PortOperPortFast : Disabled PortAdminAutoEdge : Enabled PortOperAutoEdge : Disabled PortAdminLinkType : autoPortOperLinkType : point-to-point PortBPDUGuard : DisabledPortBPDUFilter : Disabled###### MST 0 vlans mapped :1-9, 11-19, 21-4094 PortState : forwardingPortPriority : 128PortDesignatedRoot : 8000.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :8000.001a.a909.8fe0 PortDesignatedPort : 8002 PortForwardTransitions : 1 PortAdminPathCost : 20000 PortOperPathCost : 20000PortRole : designatedPort###### MST 1 vlans mapped :10PortState : forwardingPortPriority : 128PortDesignatedRoot : 0001.00d0.f823.ef82 PortDesignatedCost : 0 PortDesignatedBridge :1001.001a.a909.8fe0 PortDesignatedPort : 8002 PortForwardTransitions : 2 PortAdminPathCost : 20000 PortOperPathCost : 20000PortRole : designatedPort###### MST 2 vlans mapped :20PortState : forwardingPortPriority : 128PortDesignatedRoot : 0002.001a.a909.8fe0 PortDesignatedCost : 0PortDesignatedBridge :0002.001a.a909.8fe0 PortDesignatedPort : 8002 PortForwardTransitions : 1PortAdminPathCost : 20000PortOperPathCost : 20000PortRole : designatedPorts2#s2#s2#s2#s2#show spanning-tree interface gigabitEthernet 0/24 PortAdminPortFast : Disabled PortOperPortFast : Disabled PortAdminAutoEdge : Enabled PortOperAutoEdge : Disabled PortAdminLinkType : autoPortOperLinkType : point-to-point PortBPDUGuard : DisabledPortBPDUFilter : Disabled###### MST 0 vlans mapped :1-9, 11-19, 21-4094 PortState : forwardingPortPriority : 128PortDesignatedRoot : 8000.001a.a909.8fe0 PortDesignatedCost : 0PortDesignatedBridge :8000.001a.a909.8fe0 PortDesignatedPort : 8018 PortForwardTransitions : 1PortAdminPathCost : 20000PortOperPathCost : 20000PortRole : designatedPort###### MST 1 vlans mapped :10PortState : discardingPortPriority : 128PortDesignatedRoot : 0001.00d0.f823.ef82 PortDesignatedCost : 0PortDesignatedBridge :0001.00d0.f836.ed70 PortDesignatedPort : 8018 PortForwardTransitions : 1PortAdminPathCost : 20000PortOperPathCost : 20000PortRole : alternatePort###### MST 2 vlans mapped :20PortState : forwardingPortPriority : 128PortDesignatedRoot : 0002.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :0002.001a.a909.8fe0 PortDesignatedPort : 8018 PortForwardTransitions : 1 PortAdminPathCost : 20000 PortOperPathCost : 20000PortRole : designatedPorts2#Switch c 信息：s3#show spanning-tree interface fastEthernet 0/1 PortAdminPortFast : Disabled PortOperPortFast : Disabled PortAdminAutoEdge : Enabled PortOperAutoEdge : Disabled PortAdminLinkType : auto PortOperLinkType : point-to-point PortBPDUGuard : DisabledPortBPDUFilter : Disabled###### MST 0 vlans mapped :1-9, 11-19, 21-4094 PortState : discardingPortPriority : 128PortDesignatedRoot : 8000.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :8000.00d0.f836.ed70 PortDesignatedPort : 8001 PortForwardTransitions : 1 PortAdminPathCost : 200000 PortOperPathCost : 200000PortRole : alternatePort###### MST 1 vlans mapped :10PortState : forwardingPortPriority : 128PortDesignatedRoot : 0001.00d0.f823.ef82PortDesignatedCost : 0 PortDesignatedBridge :0001.00d0.f823.ef82 PortDesignatedPort : 8001 PortForwardTransitions : 1 PortAdminPathCost : 200000 PortOperPathCost : 200000PortRole : designatedPort###### MST 2 vlans mapped :20PortState : discardingPortPriority : 128PortDesignatedRoot : 0002.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :1002.00d0.f836.ed70 PortDesignatedPort : 8001 PortForwardTransitions : 0 PortAdminPathCost : 200000 PortOperPathCost : 200000PortRole : alternatePorts3#s3#s3#s3#s3#show spanning-tree interface fastEthernet 0/2 PortAdminPortFast : Disabled PortOperPortFast : Disabled PortAdminAutoEdge : Enabled PortOperAutoEdge : Disabled PortAdminLinkType : auto PortOperLinkType : point-to-point PortBPDUGuard : DisabledPortBPDUFilter : Disabled###### MST 0 vlans mapped :1-9, 11-19, 21-4094 PortState : forwardingPortPriority : 128PortDesignatedRoot : 8000.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :8000.001a.a909.8fe0 PortDesignatedPort : 8001 PortForwardTransitions : 1 PortAdminPathCost : 200000 PortOperPathCost : 200000PortRole : rootPort###### MST 1 vlans mapped :10PortState : forwardingPortPriority : 128PortDesignatedRoot : 0001.00d0.f823.ef82 PortDesignatedCost : 0 PortDesignatedBridge :0001.00d0.f823.ef82 PortDesignatedPort : 8002 PortForwardTransitions : 2 PortAdminPathCost : 200000 PortOperPathCost : 200000PortRole : designatedPort###### MST 2 vlans mapped :20PortState : forwardingPortPriority : 128PortDesignatedRoot : 0002.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :0002.001a.a909.8fe0 PortDesignatedPort : 8001 PortForwardTransitions : 1 PortAdminPathCost : 200000 PortOperPathCost : 200000PortRole : rootPorts3#Switch d 信息：s4#show spanning-tree interface gigabitEthernet 0/1 PortAdminPortFast : Disabled PortOperPortFast : Disabled PortAdminAutoEdge : Enabled PortOperAutoEdge : Disabled PortAdminLinkType : autoPortOperLinkType : point-to-point PortBPDUGuard : DisabledPortBPDUFilter : Disabled###### MST 0 vlans mapped :1-9, 11-19, 21-4094 PortState : forwardingPortPriority : 128PortDesignatedRoot : 8000.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :8000.001a.a909.8fe0 PortDesignatedPort : 8002 PortForwardTransitions : 1 PortAdminPathCost : 20000 PortOperPathCost : 20000PortRole : rootPort###### MST 1 vlans mapped :10PortState : discardingPortPriority : 128PortDesignatedRoot : 0001.00d0.f823.ef82 PortDesignatedCost : 0 PortDesignatedBridge :1001.001a.a909.8fe0 PortDesignatedPort : 8002 PortForwardTransitions : 1 PortAdminPathCost : 20000 PortOperPathCost : 20000PortRole : alternatePort###### MST 2 vlans mapped :20PortState : forwardingPortPriority : 128PortDesignatedRoot : 0002.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :0002.001a.a909.8fe0 PortDesignatedPort : 8002 PortForwardTransitions : 1 PortAdminPathCost : 20000 PortOperPathCost : 20000PortRole : rootPorts4#s4#s4#s4#show spanning-tree interface gigabitEthernet 0/2 PortAdminPortFast : Disabled PortOperPortFast : Disabled PortAdminAutoEdge : Enabled PortOperAutoEdge : Disabled PortAdminLinkType : autoPortOperLinkType : point-to-point PortBPDUGuard : DisabledPortBPDUFilter : Disabled###### MST 0 vlans mapped :1-9, 11-19, 21-4094 PortState : discardingPortPriority : 128PortDesignatedRoot : 8000.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :8000.00d0.f836.ed70 PortDesignatedPort : 8002 PortForwardTransitions : 1 PortAdminPathCost : 20000 PortOperPathCost : 20000PortRole : alternatePort###### MST 1 vlans mapped :10PortState : forwardingPortPriority : 128PortDesignatedRoot : 0001.00d0.f823.ef82 PortDesignatedCost : 0 PortDesignatedBridge :0001.00d0.f836.ed70 PortDesignatedPort : 8002 PortForwardTransitions : 2 PortAdminPathCost : 20000 PortOperPathCost : 20000PortRole : rootPort###### MST 2 vlans mapped :20PortState : forwardingPortPriority : 128PortDesignatedRoot : 0002.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :0002.00d0.f8d7.ae12 PortDesignatedPort : 8002 PortForwardTransitions : 2 PortAdminPathCost : 20000 PortOperPathCost : 20000PortRole : designatedPorts4#FAQ:1.1 RSTP和MSTP配合为什么有问题1.1.1 原因分析由于RSTP/MSTP的指定端口快速迁移机制，即接收到下游的agreement报文才能进行快速迁移。

华为CE交换机MSTPVRRP冗余备份配置

华为CE交换机MSTPVRRP冗余备份配置适用产品和版本CE12800/CE6800/CE5800系列产品V100R001C00或更高版本，CE7800系列产品V100R003C00或更高版本，CE8800系列产品V100R006C00或更高版本，CE12800E系列产品V200R002C50或更高版本。

组网需求在数据中心场景中，接入层交换机以双上行方式接入核心层。

用户希望：•考虑到业务的可靠性，部署冗余链路，在一条上行链路断开的时候，流量能切换到另外一条上行链路转发。

•避免冗余备份链路导致的环网问题，消除网络中的环路。

图2-37配置MSTP+VRRP负载分担组网需求分析•通过在SwitchA和SwitchB之间部署VRRP，实现链路冗余备份。

•通过在SwitchA、SwitchB和SwitchC之间部署MSTP，消除网络中的环路。

操作步骤1.配置MSTP基本功能配置SwitchA、SwitchB、SwitchC到域名为RG1的域内，创建实例MSTI12.# 配置SwitchA的MST域。

system-view[~HUAWEI] sysname SwitchA[*HUAWEI] commit[~SwitchA] stp region-configuration[~SwitchA-mst-region] region-name RG1[*SwitchA-mst-region] instance 1 vlan 2[*SwitchA-mst-region] commit[~SwitchA-mst-region] quit# 配置SwitchB的MST域。

system-view[~HUAWEI] sysname SwitchB[*HUAWEI] commit[~SwitchB] stp region-configuration[~SwitchB-mst-region] region-name RG1[*SwitchB-mst-region] instance 1 vlan 2[*SwitchB-mst-region] commit[~SwitchB-mst-region] quit# 配置SwitchC的MST域。

dhcp+mstp+vrrp实验

dhcp+mstp+vrrp实验一、VLAN配置SW3配置sy sw3un in envlan batch 10 20 30 40interface g0/0/3port link-type accessport default vlan 10qinterface g0/0/4port link-type accessport default vlan 20SW4配置sy sw4un in envlan batch 10 20 30 40interface g0/0/3port link-type accessport default vlan 30qinterface g0/0/4port link-type accessport default vlan 40q二、Trunk配置SW3配置interface g0/0/1port link-type trunkport trunk allow-pass vlan 10 20interface g0/0/2port link-type trunkport trunk allow-pass vlan 10 20SW4配置interface g0/0/1port link-type trunkport trunk allow-pass vlan 30 40qinterface g0/0/2port link-type trunkport trunk allow-pass vlan 30 40q三、链路聚合SW1和SW2之间我们用两根网线，做成链路聚合。

SW1配置[hxsw1]int Eth-Trunk 1[hxsw1-Eth-Trunk1]mode lacp-static[hxsw1-Eth-Trunk1]trunkport g0/0/2[hxsw1-Eth-Trunk1]trunkport g0/0/3SW2配置[hxsw2]int Eth-Trunk 1[hxsw2-Eth-Trunk1]mode lacp-static[hxsw2-Eth-Trunk1]trunkport g0/0/1[hxsw2-Eth-Trunk1]trunkport g0/0/3[hxsw2-Eth-Trunk1]配置trunk，允许所有vlan通过sw1[sw1]int Eth-Trunk 1[sw1-Eth-Trunk1]port link-type trunk[sw1-Eth-Trunk1]port trunk allow-pass vlan 10 20 30 40Sw2[sw2]int Eth-Trunk 1[sw2-Eth-Trunk1]port link-type trunk[sw2-Eth-Trunk1]port trunk allow-pass vlan 10 20 30 40四、MSTP配置公共配置以下步骤必须在所有的有冗余的交换机上做，stp region-configurationregion-name pokes01 #域名pokes01revision-level 1 #修订好统一为1instance 1 vlan 10 20 #将vlan10/20映射到实例1里面instance 2 vlan 30 40active region-configuration #激活才能生效qSW1配置[sw1]stp instance 1 root primary #将SW1作为实例1的根桥[sw1]stp instance 2 root secondary #将SW1作为实例2的备份根桥SW2配置[sw2]stp instance 1 root secondary[sw2]stp instance 2 root primary五、VRRP配置sw1配置interface Vlanif10ip address 192.168.10.253 255.255.255.0 vrrp vrid 10 virtual-ip 192.168.10.1vrrp vrid 10 priority 120interface Vlanif20ip address 192.168.20.253 255.255.255.0 vrrp vrid 20 virtual-ip 192.168.20.1vrrp vrid 20 priority 120interface Vlanif30ip address 192.168.30.253 255.255.255.0 vrrp vrid 30 virtual-ip 192.168.30.1interface Vlanif40ip address 192.168.40.253 255.255.255.0 vrrp vrid 40 virtual-ip 192.168.40.1sw2配置interface Vlanif10ip address 192.168.10.254 255.255.255.0 vrrp vrid 10 virtual-ip 192.168.10.1interface Vlanif20ip address 192.168.20.254 255.255.255.0 vrrp vrid 20 virtual-ip 192.168.20.1interface Vlanif30ip address 192.168.30.254 255.255.255.0 vrrp vrid 30 virtual-ip 192.168.30.1vrrp vrid 30 priority 120interface Vlanif40ip address 192.168.40.254 255.255.255.0 vrrp vrid 40 virtual-ip 192.168.40.1vrrp vrid 40 priority 120六、DHCP配置以下步骤在sw1、sw2一样[sw1]dhcp enable[sw1]ip pool vlan_10 #创建地址池[sw1]network 192.168.10.0 mask 24[sw1]gateway-list 192.168.10.254 #创建网关[sw1]dns-list 223.5.5.5 #创建dns[sw1-Vlanif10]int Vlanif 10[sw1-Vlanif10]dhcp select global[sw1]ip pool vlan_20 #创建地址池[sw1]network 192.168.20.0 mask 24[sw1]gateway-list 192.168.20.254 #创建网关[sw1]dns-list 223.5.5.5 #创建dns[sw1-Vlanif10]int Vlanif 20[sw1-Vlanif10]dhcp select global[sw1]ip pool vlan_30 #创建地址池[sw1]network 192.168.30.0 mask 24[sw1]gateway-list 192.168.30.254 #创建网关[sw1]dns-list 223.5.5.5 #创建dns[sw1-Vlanif10]int Vlanif 30[sw1-Vlanif10]dhcp select global[sw1]ip pool vlan_40 #创建地址池[sw1]network 192.168.40.0 mask 24[sw1]gateway-list 192.168.40.254 #创建网关[sw1]dns-list 223.5.5.5 #创建dns[sw1-Vlanif10]int Vlanif 40[sw1-Vlanif10]dhcp select global。

任务7.2 MSTP+VRRP配置

Ø虚拟路由冗余协议ØVRRP相关术语ØVRRP工作过程Ø监视上行链路ØVRRP配置流程ØVRRP配置命令•目前在构建网络平台时，除了满足基本的业务承载、通信速率等需求外，还要考虑可用性，主要体现在稳定性和容错性两方面，即网络不间断运行的能力及出现故障后的快速恢复能力。

•MSTP、VRRP是分别基于二、三层的冗余备份技术，将两者有效融合，合理规划设计网络，可以在最大程度上保障网络通信的稳定。

•本次任务介绍两项技术的结合方法及部署应用。

Ø同一台VRRP设备可以加入多个VRRP组，然后设置其在不同的备份组中的优先级，以实现其在不同的备份组中具有不同的角色。

VRRP负载分担ØMSTP和VRRP在功能特性上有许多相似之处：•冗余设计，用户数据具有多条转发路径；•主备状态，能够提供主路径和备份路径；•负载分担，能够基于VLAN进行分流设计；•主备切换，能够根据拓扑变化自动切换通信线路。

Ø融合设计：•交换网络部署MSTP，实现二层链路冗余备份。

•三层转发通过部署VRRP，实现网关冗余。

•主备的一致性，即基于某VLAN的MSTP的根或备份根对应该VLAN的VRRP备份组的Master或Backup。

（1）理解VRRP负载分担的工作原理；（2）掌握MSTP+VRRP多备份组的结合及配置方法。

某公司网络部署两台核心交换机为多个业务网段提供冗余网关，同时交换网络也构建冗余链路。

管理员希望采用相应的技术手段，将二、三层冗余技术有效结合，最大程度地提高网络的稳定性和通信性能。

（1）拓扑图（2）操作流程•交换机配置VLAN及干道链路；•核心交换机S3、S4之间构建聚合链路（LACP），提升内网数据交换速率；•R1、S3和S4配置网络参数并运行OSPF协议，R1的loopback1接口IP地址1.1.1.1/32作为访问测试的目的地址。

使用VRRPHSRP和MSTP实现校园网的双核心

使用VRRP/HSRP 和MSTP 实现校园网的双核心VRRP 是一种容错协议，它保证当主机的下一跳路由器失效时，可以及时由另一台路由器代替，从而保持通信的连续性和可靠性。

MSTP 把一台交换机的一个或多个 vlan 划分为一个 instance ，有着相同 instance 配置的交换机就组成一个域（MST region ），运行独立的生成树（IST ，internal spanning-tree ）；这个MST region 就相当于一个大的交换机，与其他MST region 再进行生成树算法运算，得出一个整体的生成树，称为CST （common spanning tree ）。

下面咱们就如何使用VRRP/HSRP 和MSTP 实现校园网的双核心，实现网络的连续性和可靠性进行探索。

Loopback0 :1.1.1.1sw2 10.250R1SW1SW1Loopback0 :2.2.2.2 192.1.1.0/30ip192.168.10.0 192.168.10.0 SW1SW2R2194.1.1.0/30193.1.1.0/30Vlan 10 ip:192.168.10.254 Vlan 20 ip:192.168.20.253 Vlan 10 ip:192.168.10.253 Vlan 20 ip:192.168.20.254 SW2SW1Vrrp 1 ip 192.168.10.250 Vrrp 1 priority 120 Vrrp 1 preemptVrrp 1 ip 192.168.10.250 Vrrp 1 priority 110 Vrrp 2 ip 192.168.20.250 Vrrp 2 priority 120 Vrrp2 preemptVrrp 2 ip 192.168.20.250 Vrrp 2 priority 110SW3SW4Vlan10 vlan20Vlan10 vlan20pc2 pc1192.168.20.100一、 HSRP 和VRRP 的配置可以使用ＨＳＲＰ或者VRRP 来实现网关的冗余，这里先介绍ＨＳＲＰ的配置：ＨＳＲＰ的配置如下：SW1(config)#interface vlan 10SW1(config-if)#ip address 192.168.10.254 255.255.255.0配置VLAN10 的IP 地址SW1(config-if)#standby 10 ip 192.168.10.250配置虚拟IP ，即VLAN10 的虚拟网关 SW1(config-if)#standby 10 preempt 设为抢占模式抢占模式:正常状况下,VLAN10 的数据由 SW1 传输.当 SW1 发生故障时,则由 SW2 担负起传输任务.若不配置抢占模式，当 SW1 恢复正常后, 数据仍由 SW2 传输;配置抢占模式后,正常后的SW1 会再次夺取对 VLAN10 的控制权.SW1(config-if)#standby 10 priority 110VLAN10 的standby 优先级设为110，这样SW1 将作为vlan10 的默认网关。

VRRP+MSTP详解

vrrp+mstp配置实例1.switch a 、switch b选用两台锐捷的s5750 ；switch c 、shwich d 选2.用锐捷的s3750和s37603.全网共有两个业务vlan ,为vlan 10 、vlan 204.Switch a 、switch b 都分别对两vlan起用两vrrp组，实现两组的业务的负载分担和备份。

5.Switch a、switch b、switch c、switch d 都起用mstp多生成数协议，并且所有设备都属于同一个mst域，且实例映射一致（vlan 10映射实例1、vlan 20映射实例2 其他vlan映射默认实例0）。

6.Vlan 10业务以switch a为根桥；vlan 20业务以switch b为根桥；实现阻断网络环路，并能实现不同vlan数据流负载分担功能。

SW A与SW B配置基本相同第一步：开启生成树MSTP协议第二步：进入生成树配置模式，定义实例，修订号（不理解就当学号），名称（相当于学生名字）第三步：指定实例的优先级第四步：为不同的VLAN划分地址，而且对ＶＬＡＮ的优先级进行设置，以及转换虚拟路由地址SW C 与SW D 配置第一步：开启生成树MSTP协议第二步：进入生成树配置模式，定义实例，修订号（不理解就当学号），名称（相当于学生名字）第三步：指定实例的优先级部分命令如下生成树类spanning-tree 开启生成树（默认为mstp）spanning-tree mst configuration 进入mst配置模式revision 1 指定MST revision number 为1name region1 指定mst配置名称instance 0 vlan 1-9, 11-19, 21-4094 缺省情况下vlan都属于实例0instance 1 vlan 10 手工指定vlan10属于实例1instance 2 vlan 20 手工指定vlan20属于实例2spanning-tree mst 1 priority 0 指定实例1的优先级为0（为根桥）spanning-tree mst 2 priority 4096 指定实例2的优先级为4096VLAN优先级类及转换的IP地址interface VLAN 10 创建vlan 10 svi接口ip address 192.168.10.1 255.255.255.0 配置ip地址vrrp 1 priority 120 配置vrrp组1 优先级为120vrrp 1 ip 192.168.10.254 配置vrrp组1虚拟ip地址为192.168.10.254查看信息show vrrp 查看vrrp 信息show spanning-tree interface gigabitEthernet 0/1 查看g0/1接口stp状态信息链路聚合第一步：F0/23 、F0/24 加入Port-group 1inter range fa 0/23 -24port-group 1第二步：将AG1设为Trunkinter aggregateport 1switchport mode trunk。

mstp加vrrp的实验例子

mstp加vrrp的实验例子摘要：I.实验背景A.MSTP 介绍B.VRRP 介绍C.MSTP 与VRRP 的结合II.实验目的A.提高网络的可靠性和稳定性B.实现负载均衡C.提高网络的扩展性III.实验环境和工具A.实验环境搭建B.实验工具介绍IV.实验步骤A.配置MSTPB.配置VRRPC.测试和验证V.实验结果与分析A.网络性能测试B.负载均衡测试C.网络稳定性测试VI.结论与展望A.实验结论B.未来发展方向正文：I.实验背景MSTP（Multiple Spanning Tree Protocol，多生成树协议）是一种用于解决以太网环路问题的协议，它可以将多个VLAN 划分为多个生成树，从而避免环路产生。

VRRP（Virtual Router Redundancy Protocol，虚拟路由器冗余协议）是一种用于提高网络可靠性和稳定性的协议，通过将多个路由器组成一个虚拟路由器组，实现路由器的冗余和负载均衡。

本文将介绍如何将MSTP 和VRRP 结合起来，以提高网络的性能和稳定性。

II.实验目的将MSTP 和VRRP 结合的实验主要目的有以下几点：A.提高网络的可靠性和稳定性：通过MSTP 消除以太网环路，保证数据包的正常传输；通过VRRP 实现路由器的冗余，确保网络的持续可用。

B.实现负载均衡：通过VRRP，将流量分担到多个路由器上，从而降低单个路由器的负载，提高整个网络的性能。

C.提高网络的扩展性：MSTP 允许在一个网络中使用多个生成树，使得网络的规模可以得到扩展，而不会引入环路问题。

III.实验环境和工具实验环境搭建如下：A.两台交换机，分别配置MSTP 和VRRP。

B.三台路由器，组成一个虚拟路由器组，并分别配置VRRP。

实验工具介绍：A.思科网络设备，包括交换机和路由器。

B.思科IOS 操作系统。

IV.实验步骤A.配置MSTP：在交换机上创建MST 域，并将各个VLAN 划分为不同的生成树。

mstp加vrrp的实验例子

mstp加vrrp的实验例子
以下是一个使用MSTP和VRRP的实验例子：
设备1和设备2之间连接了多个交换机，其中设备1运行VRRP，并且是虚拟路由器组的主机，设备2是备用主机。

步骤：
1. 配置设备1上的VRRP：
- 为虚拟路由器组配置一个组ID和虚拟IP地址。

- 设置设备1为虚拟路由器组的主机，优先级较高。

- 配置其他参数，如优先级、优先级降级的阈值等。

2. 配置MSTP：
- 配置多个VLAN，并且将它们绑定到MSTP实例上。

- 在每个交换机上启用MSTP，并设置实例根桥和桥优先级。

- 配置MSTP的端口优先级，用于控制MSTP的选举。

3. 设置MSTP的根桥：
- 在所有交换机上使用根桥优先级来选择根桥。

- 所有其他交换机通过MSTP协议来确定每个VLAN的根桥。

4. 设置VRRP虚拟路由器组的VIP下的MSTP实例的根桥：
- 在虚拟路由器组的VIP所属的MSTP实例上，设置根桥优
先级为最低。

- 这将确保VRRP主机上的MSTP实例被选为根桥。

5. 配置设备2上的VRRP：
- 配置相同的组ID和虚拟IP地址。

- 设置设备2为备用主机。

- 配置优先级较低，以确保设备1成为主机。

6. 测试：
- 断开设备1和设备2之间的连接，观察VRRP主机的切换过程。

- 在交换机上查看MSTP实例的状态，确保根桥已更改，以维持虚拟路由器的正常工作。

通过使用MSTP和VRRP，可以实现对网络中的故障进行快速检测和恢复，提高网络的可靠性和冗余性。

MSTP+VRRP的配置

一、创建vlanSwitchA：SwitchA#configure terminalEnter configuration commands, one per line. End with CNTL/Z.SwitchA(config)#vlan range 10,20,30,40SwitchA(config-vlan-range)#exitSwitchB同上；二、配置mst域SwitchA：SwitchA(config)#spanning-tree mst configurationSwitchA(config-mst)#instance 1 vlan 10,20 (将vlan10 20划分到实例1中) %Warning:you must create vlans before configuring instance-vlan relationship SwitchA(config-mst)#instance 2 vlan 30,40 (将vlan30 40划分到实例2中) %Warning:you must create vlans before configuring instance-vlan relationship SwitchA(config-mst)#exitSwitchB同上；三、配置Switch A为MST 0和MST 1的根桥，Switch B为MST 2的根桥SwitchA：(谁的优先级越高数值越小，设备的优先级高即数值越小为根桥)SwitchA(config)#spanning-tree mst 0 priority 4096SwitchA(config)#spanning-tree mst 1 priority 4096SwitchA(config)#spanning-tree mst 2 priority 8192SwitchB：SwitchB(config)#spanning-tree mst 2 priority 4096SwitchB(config)#spanning-tree mst 0 priority 8192SwitchB(config)#spanning-tree mst 1 priority 8192四、使能MSTPSwitchA：SwitchA(config)#spanning-treeEnable spanning-tree.SwitchB同上五、配置各VLAN的SVI，并加入对应的备份组，同时设置备份组的虚拟IP地址SwitchA：SwitchA(config)#interface vlan 10SwitchA(config-if-VLAN 10)#ip address 192.168.10.2 255.255.255.0SwitchA(config-if-VLAN 10)#vrrp 10 ip 192.168.10.1SwitchA(config)#interface vlan 20SwitchA(config-if-VLAN 20)#ip address 192.168.20.2 255.255.255.0 SwitchA(config-if-VLAN 20)#vrrp 20 ip 192.168.20.1SwitchA(config-if-VLAN 20)#exitSwitchA(config)#interface vlan 30SwitchA(config-if-VLAN 30)#ip address 192.168.30.2 255.255.255.0 SwitchA(config-if-VLAN 30)#vrrp 30 ip 192.168.30.1SwitchA(config-if-VLAN 30)#exitSwitchA(config)#interface vlan 40SwitchA(config-if-VLAN 40)#ip address 192.168.40.2 255.255.255.0 SwitchA(config-if-VLAN 40)#vrrp 40 ip 192.168.40.1SwitchA(config-if-VLAN 40)#exitSwitch B：SwitchB(config)#interface vlan 10SwitchB(config-if-VLAN 10)#ip address 192.168.10.3 255.255.255.0 SwitchB(config-if-VLAN 10)#vrrp 10 ip 192.168.10.1SwitchB(config-if-VLAN 10)#exitSwitchB(config)#interface vlan 20SwitchB(config-if-VLAN 20)#ip address 192.168.20.3 255.255.255.0 SwitchB(config-if-VLAN 20)#vrrp 20 ip 192.168.20.1SwitchB(config-if-VLAN 20)#exitSwitchB(config)#interface vlan 30SwitchB(config-if-VLAN 30)#ip address 192.168.30.3 255.255.255.0 SwitchB(config-if-VLAN 30)#vrrp 30 ip 192.168.30.1SwitchB(config-if-VLAN 30)#exitSwitchB(config)#interface vlan 40SwitchB(config-if-VLAN 40)#ip address 192.168.40.3 255.255.255.0 SwitchB(config-if-VLAN 40)#vrrp 40 ip 192.168.40.1SwitchB(config-if-VLAN 40)#exit六、配置优先级SwitchA：SwitchA(config)#interface vlan 10SwitchA(config-if-VLAN 10)#vrrp 10 priority 120 缺省条件下缺省为100 SwitchA(config-if-VLAN 10)#exitSwitchA(config)#interface vlan 20SwitchA(config-if-VLAN 20)#vrrp 20 priority 120SwitchA(config-if-VLAN 20)#exitSwitchB：SwitchB(config)#interface vlan 30SwitchB(config-if-VLAN 30)#vrrp 30 priority 120SwitchB(config)#interface vlan 40SwitchB(config-if-VLAN 40)#vrrp 40 priority 120SwitchB(config-if-VLAN 40)#exit*于是vlan10 20优先从SW A通过，vlan30 40优先从SW B通过，从而达到了冗余的条件七、将备份组的Master路由设备的上链口配置为VRRP组的监视接口。

H3C VRRP+MSTP+链路聚合实战

H3C VRRP+MSTP+链路聚合实践拓扑配置步骤设备A的配置#配置端口g 1/0/22属于VLAN 300、g 1/0/2属于VLAN 200、g 1/0/1属于VLAN 100。

<SwitchA> system-view[SwitchA] vlan30[SwitchA-vlan 30] port GigabitEthernet 1/0/22[SwitchA-vlan30] quit[SwitchA] vlan 100[SwitchA-vlan100] port GigabitEthernet 1/0/1[SwitchA-vlan100] quit[SwitchA] vlan 200[SwitchA-vlan200] port GigabitEthernet 1/0/2[SwitchA-vlan200] quit#创建二层聚合接口1。

[SwitchA] interface bridge-aggregation 1[SwitchA-Bridge-Aggregation1] quit#分别将端口GigabitEthernet 1/0/23和GigabitEthernet 1/0/24加入到聚合组1中。

[SwitchA] interface GigabitEthernet 1/0/23[SwitchA- GigabitEthernet 1/0/23] port link-aggregation group 1 [SwitchA-GigabitEthernet 1/0/23] quit[SwitchA] interface GigabitEthernet 1/0/24[SwitchA-GigabitEthernet 1/0/24] port link-aggregation group 1 [SwitchA-GigabitEthernet 1/0/24] quit#配置二层聚合接口1为Trunk端口，并允许VLAN 101和102的报文通过。

怎样在锐捷交换机上配置vrrp、arp和mstp

怎样在锐捷交换机上配置vrrp、arp和mstp交换机密码1234(config)#enable secret level 1 0 1001234(config)#enable secret level 15 0 100远程登入密码1234(config)#line vty 0 41234(config-line)#password 1001234(config-line)#end交换机管理IP1234(config)#interface vlan 11234(config-if)#ip address 192.168.1.10 255.255.255.0 1234(config-if)#no shutdown修改交换机老化时间1234(config)#mac-address-table aging-time 201234(config)#end添删vlan1234(config)#vlan 8881234(config-vlan)#name a8881234(config)#no vlan 888添加access口1234(config)#interface gigabitEthernet 0/101234(config-if)#switchport mode access1234(config-if)#switchport access vlan 10切换assess trunk1234(config-if)#switchport mode access1234(config-if)#switchport mode trunk指定特定一个native vlan1234(config-if)#switchport trunk native vlan 10配置trunk口的许可vlan列表1234(config-if)#switchport trunk allowed vlan ? add Add VLANs to the current listall All VLANsexcept All VLANs except the following remove Remove VLANs from the current list速成树协议1234(config)#spanning-tree1234(config)#spanning-tree mode rstp/stp配置网关：switch(config)#ip default-gateway 192.168.1.254 交换机基本配置-常见查看命令查看CPU利用率show cpu查看交换机时钟show clock查看交换机日志show logging查看交换机动态学习到的MAC地址表show mac-address-table dynamic查看当前交换机运行的配置文件show running-config查看交换机硬件、软件信息show version查看交换机的arp表show arp显示接口详细信息的命令show interfaces gigabitEthernet 4/1 counters接口配置Switch(config)#interface gigabitethernet 0/1把接口工作模式改为光口。