以太网端口聚合+RSTP配置案例
- 格式:doc
- 大小:2.39 MB
- 文档页数:10
快速生成树rstp配置实验总结快速生成树(Rapid Spanning Tree Protocol,RSTP)是一种用于构建以太网的冗余拓扑的协议。
它是IEEE 802.1w标准中定义的一种快速生成树协议,相对于传统的生成树协议STP(Spanning Tree Protocol),RSTP具有更快的收敛时间和更高的效率。
在进行RSTP配置实验之前,首先需要了解RSTP的基本原理和工作方式。
RSTP通过选择一个主端口和备用端口来构建快速生成树,主端口用于转发数据,备用端口则处于阻塞状态以备份主端口。
当主端口发生故障或链路出现变化时,备用端口会迅速切换为主端口,以保证网络的连通性和冗余。
RSTP通过发送BPDU(Bridge Protocol Data Unit)消息来交换拓扑信息,并利用端口优先级和端口状态来选择主备端口。
在实际配置过程中,首先需要确保网络中的所有交换机都支持RSTP 协议。
然后,通过登录交换机的管理界面或命令行界面,进入交换机的配置模式。
接下来,按照以下步骤进行RSTP配置:1. 配置全局RSTP参数:设置全局RSTP参数,包括优先级、Hello 时间和最大转发延迟等。
优先级用于选择根交换机,Hello时间用于控制BPDU消息的发送频率,最大转发延迟用于控制端口状态的转换速度。
2. 配置端口RSTP参数:对每个端口进行RSTP参数的配置,包括端口优先级、端口类型和端口状态等。
端口优先级用于选择主备端口,端口类型可以设置为指定端口、非指定端口或备用端口,端口状态可以设置为指定端口、非指定端口、备用端口、阻塞端口或禁用端口。
3. 配置RSTP实例:将交换机的端口划分为多个RSTP实例,可以根据网络的需求进行相应的配置。
每个RSTP实例都有一个唯一的标识符,用于区分不同的实例。
4. 配置RSTP根交换机:选择一个交换机作为RSTP的根交换机,根交换机具有最高的优先级,负责控制整个网络的拓扑。
目录1 MVRP ················································································································································ 1-11.1 MVRP简介········································································································································· 1-11.1.1 MRP简介 ································································································································ 1-11.1.2 MVRP注册模式······················································································································· 1-41.1.3 协议规范 ································································································································· 1-41.2 MVRP配置任务简介 ·························································································································· 1-41.3 配置MVRP功能 ································································································································· 1-51.3.1 配置限制和指导 ······················································································································ 1-51.3.2 配置准备 ································································································································· 1-51.3.3 使能MVRP功能······················································································································· 1-51.3.4 配置MVRP注册模式················································································································ 1-61.3.5 配置MRP定时器······················································································································ 1-61.3.6 配置MVRP兼容GVRP ············································································································ 1-71.4 MVRP显示和维护······························································································································ 1-71.5 MVRP典型配置举例 ·························································································································· 1-81 MVRP1.1 MVRP简介MRP(Multiple Registration Protocol,多属性注册协议)作为一个属性注册协议的载体,可以用来传递属性信息。
双核心(MSTP+VRRP)的拓扑实现和配置实例1 配置VRRP在实验拓扑图中,由于有多条链路产生环路,所以我们在实验初始时一定要将某些端口堵塞(初始化时已将RG-S35B的f0/1-4四个端口堵塞,在配置完毕进行测试时才可以打开).否则产生环路后,会发现设备的cpu利用率会达到100%(使用命令show cpu查看)。
RG-S35A(config)#interface vlan 10RG-S35A(config-if)#ip address 192.168.10.254 255.255.255.0 !配置VLAN10的IP 地址RG-S35A(config-if)#standby 1 ip 192.168.10.250 !配置虚拟IPRG-S35A(config-if)#standby 1 preempt!设为抢占模式RG-S35A(config-if)#standby 1 priority 254 !VLAN10的standby优先级设为254RG-S35A(config-if)#exitRG-S35A(config)#interface vlan 20 !VLAN20的standby不设优先级,默认为100RG-S35A(config-if)#ip address 192.168.20.253 255.255.255.0 !配置VLAN20的IP 地址RG-S35A(config-if)#standby 2 ip 192.168.20.250 !配置虚拟IPRG-S35A(config-if)#standby 2 preempt !设为抢占模式RG-S35A(config-if)#exitRG-S35A(config)#interface vlan 30RG-S35A(config-if)#ip address 192.168.30.254 255.255.255.0 !配置VLAN30的IP 地址RG-S35A(config-if)#standby 3 ip 192.168.30.250 !配置虚拟IPRG-S35A(config-if)#standby 3 preempt !设为抢占模式RG-S35A(config-if)#standby 3 priority 254 !VLAN30的standby优先级设为254RG-S35A(config-if)#exitRG-S35A(config)#interface vlan 40 !VLAN20的standby不设优先级,默认为100RG-S35A(config-if)#ip address 192.168.40.253 255.255.255.0 !配置VLAN40的IP 地址RG-S35A(config-if)#standby 4 ip 192.168.40.250 !配置虚拟IPRG-S35A(config-if)#stand 4 preempt !设为抢占模式RG-S35A(config-if)#exitRG-S35A(config)#exitRG-S35B把vlan20 40 设置为standby 2、4 priority 2542 配置RG-S35A与RG-S35B的端口聚合理论上,35A和35B的f0/3和f0/4端口不需要设置为trunk口,但是我们习惯上都设为trunk(已在前面做好了配置)。
VRRP+STP组网案例TAC中心根据网上实际的运用情况,可以将STP和VRRP的典型组网按照STP的使用情况进行分类,分别为单实例STP模式和多实例STP模式。
两者各有优劣,前者配置简单,维护方便,但是在流量上无法进行分担;后者配置上相对复杂一些,维护上也需要对STP有更深入的理解,但是能够有效地分担流量,充分利用带宽。
1、单实例STP模式:STP通过阻塞一些冗余端口来达到链路无环的目的。
对于单实例STP,只有实例0进行生成树计算,因此最终只生成一棵树,导致的结果是环上被阻塞的端口对环上所有的VLAN 来说都是同一端口,无法实现负载分担。
1.1、单实例STP典型组网图1.2、设备配置:NBR200:路由配置:ip route 192.168.3.0 255.255.255.0 192.168.0.2 50ip route 192.168.3.0 255.255.255.0 192.168.1.2 100S3550_A:vlan 1!vlan 2!vlan 3!vlan 4!spanning-treespanning-tree mst 0 priority 4096interface FastEthernet 0/1switchport access vlan 2spanning-tree portfast!interface FastEthernet 0/2switchport mode trunkswitchport trunk allowed vlan remove 1-2,5-4094!interface FastEthernet 0/3switchport access vlan 4!interface Vlan 2ip address 192.168.0.2 255.255.255.0!interface Vlan 3ip address 192.168.2.1 255.255.255.0!interface Vlan 4ip address 192.168.3.2 255.255.255.0standby 1 ip 192.168.3.1standby 1 priority 150!ip route 0.0.0.0 0.0.0.0 Vlan 2 192.168.0.1 50 enabled ip route 0.0.0.0 0.0.0.0 Vlan 3 192.168.2.2 100 enabled S3550_B:vlan 1!vlan 2!vlan 3!vlan 4!spanning-treeinterface FastEthernet 0/1switchport access vlan 2spanning-tree portfast!interface FastEthernet 0/2switchport mode trunkswitchport trunk allowed vlan remove 1-2,5-4094!interface FastEthernet 0/3switchport access vlan 4!interface Vlan 2ip address 192.168.1.2 255.255.255.0!interface Vlan 3ip address 192.168.2.2 255.255.255.0!interface Vlan 4ip address 192.168.3.3 255.255.255.0standby 1 ip 192.168.3.1!ip route 0.0.0.0 0.0.0.0 Vlan 2 192.168.1.1 50 enabledip route 0.0.0.0 0.0.0.0 Vlan 3 192.168.2.1 100 enabledS2150G:spanning-treeinterface fastEthernet 0/16spanning-tree portfast1.3、配置说明:S3550_A为VRRP的MASTER,同时也是生成树的根;为了备份两台S3550交换机到NBR 的流量,在两台S3550间启用三层接口;NBR、S3550_A和S3550_B均配置两条目的地相同但Metric不同的路由(S3550_A和S3550_B配置的是缺省路由),互为备份。
2.5 配置举例介绍了两种模式下的典型应用场景举例。
2.5.1 配置手工负载分担模式链路聚合示例2.5.2 配置静态LACP 模式链路聚合示例2.5.1 配置手工负载分担模式链路聚合示例2 LACP 配置组网需求如图2-4 所示,S-switch-A 和S-switch-B 为两台S-switch 设备,它们之间的链路为某城域网骨干传输链路之一,要求S-switch-A 和S-switch-B 之间的链路有较高的可靠性,并在S-switch-A 和S-switch-B 之间实现数据流量的负载分担。
配置思路采用如下的思路配置负载分担链路聚合:1. 创建Eth-Trunk。
2. 加入Eth-Trunk 的成员接口。
说明创建Eth-Trunk 后,缺省的工作模式为手工负载分担模式,所以,缺省情况下,不需要配置其模式为手工负载分担模式。
如果当前模式已经配置为其它模式,可以使用mode 命令更改。
数据准备为完成此配置例,需准备的数据:l 链路聚合组编号。
l Eth-Trunk 的成员接口类型和编号。
配置步骤1. 创建Eth-Trunk# 配置S-switch-A。
<Quidway> system-view[Quidway] sysname S-switch-A[S-switch-A] interface eth-trunk 1[S-switch-A-Eth-Trunk1] quit# 配置S-switch-B。
<Quidway> system-view[Quidway] sysname S-switch-B[S-switch-B] interface eth-trunk 1[S-switch-B-Eth-Trunk1] quit2. 加入Eth-Trunk 的成员接口# 配置S-switch-A。
[S-switch-A] interface Ethernet0/0/1[S-switch-A-Ethernet0/0/1] eth-trunk 1[S-switch-A-Ethernet0/0/1] quit[S-switch-A] interface Ethernet0/0/2[S-switch-A-Ethernet0/0/2] eth-trunk 1[S-switch-A-Ethernet0/0/2] quit[S-switch-A] interface Ethernet0/0/3[S-switch-A-Ethernet0/0/3] eth-trunk 1[S-switch-A-Ethernet0/0/3] quit# 配置S-switch-B。
1 以太网链路聚合配置任务简介表1-5 以太网链路聚合配置任务简介配置任务说明详细配置配置聚合组配置静态聚合组二者必选其一1.3.1 配置动态聚合组 1.3.2聚合接口相关配置配置聚合接口的描述信息可选 1.4.1 配置三层聚合接口MTU 可选 1.4.2 配置处理或转发三层聚合接口流量的业务处理板可选 1.4.3 开启聚合接口链路状态变化Trap功能可选 1.4.4 限制聚合组内选中端口的数量可选 1.4.5 关闭聚合接口可选 1.4.6 恢复聚合接口的缺省配置可选 1.4.7配置聚合负载分担配置聚合负载分担类型可选 1.5.1配置聚合负载分担为本地转发优先可选 1.5.2 配置聚合流量重定向功能可选 1.6 2 1.3 配置聚合组请根据需要聚合的以太网接口类型来配置相应类型的聚合组:当需要聚合的是二层以太网接口时,请配置二层聚合组;当需要聚合的是三层以太网接口时,请配置三层聚合组。
聚合链路的两端应配置相同的聚合模式。
●配置或使能了下列功能的端口将不能加入二层聚合组:RRPP(请参见“可靠性配置指导/RRPP”)、MAC地址认证(请参见“安全配置指导/MAC地址认证”)、端口安全模式(请参见“安全配置指导/端口安全”)、报文过滤功能(请参见“安全配置指导/防火墙”)、以太网帧过滤功能(请参见“安全配置指导/防火墙”)、IP Source Guard功能(请参见“安全配置指导/IP Source Guard”)、802.1X功能(请参见“安全配置指导/802.1X”)以及Portal免认证规则源接口(请参见“安全配置指导/Portal”)。
●配置或使能了下列功能的接口将不能加入三层聚合组:IP地址(请参见“三层技术-IP业务配置指导/IP地址”)、DHCP客户端(请参见“三层技术-IP业务配置指导/DHCP”)、BOOTP客户端(请参见“三层技术-IP业务配置指导/DHCP”)、VRRP功能(请参见“可靠性配置指导/VRRP”)和Portal功能(请参见“安全配置指导/Portal”)。
以太网端口聚合+RSTP配置拓扑图功能要求:通过在网络中配置RSTP功能,实现消除网络环路的目的,当RSTP的根桥DOWN掉后,可以通过非根桥正常通信,达到根桥和备用根桥的切换,某个链路DOWN后,可以通过将某个阻塞端口恢复为根端口或转发端口,以实现正常的数据通信,当聚合链路中的某个链路DOWN掉后,不会影响正常的通信配置过程:S5700-LSW1[Huawei]DIS CU#sysname Huawei#vlan batch 10 20#stp mode rstp#cluster enablentdp enablendp enable#drop illegal-mac alarm#diffserv domain default#drop-profile default#aaaauthentication-scheme default authorization-scheme default accounting-scheme defaultdomain defaultdomain default_adminlocal-user admin password simple admin local-user admin service-type http#interface Vlanif1#interface MEth0/0/1#interface GigabitEthernet0/0/1port link-type trunkport trunk allow-pass vlan 10 20#interface GigabitEthernet0/0/2port link-type trunkport trunk allow-pass vlan 10 20#interface GigabitEthernet0/0/3port link-type accessport default vlan 10stp disable#interface GigabitEthernet0/0/4port link-type accessport default vlan 20stp disable#interface GigabitEthernet0/0/5#interface GigabitEthernet0/0/6#interface GigabitEthernet0/0/7#interface GigabitEthernet0/0/8#interface GigabitEthernet0/0/9#interface GigabitEthernet0/0/10 #interface GigabitEthernet0/0/11 #interface GigabitEthernet0/0/12 #interface GigabitEthernet0/0/13 #interface GigabitEthernet0/0/14 #interface GigabitEthernet0/0/15 #interface GigabitEthernet0/0/16 #interface GigabitEthernet0/0/17 #interface GigabitEthernet0/0/18 #interface GigabitEthernet0/0/19 #interface GigabitEthernet0/0/20 #interface GigabitEthernet0/0/21 #interface GigabitEthernet0/0/22 #interface GigabitEthernet0/0/23 #interface GigabitEthernet0/0/24 #interface NULL0#user-interface con 0user-interface vty 0 4#ReturnS5700-LSW2#sysname Huawei#vlan batch 10 20#stp mode rstpstp instance 0 root primary#cluster enablentdp enablendp enable#drop illegal-mac alarm#diffserv domain default#drop-profile default#aaaauthentication-scheme default authorization-scheme default accounting-scheme defaultdomain defaultdomain default_adminlocal-user admin password simple admin local-user admin service-type http#interface Vlanif1#interface Vlanif10ip address 10.0.0.1 255.255.255.0#interface Vlanif20ip address 20.0.0.1 255.255.255.0#interface MEth0/0/1#interface Eth-Trunk1port link-type trunkport trunk allow-pass vlan 10 20#interface GigabitEthernet0/0/1port link-type trunkport trunk allow-pass vlan 10 20#interface GigabitEthernet0/0/2#i nterface GigabitEthernet0/0/3eth-trunk 1#interface GigabitEthernet0/0/4 #interface GigabitEthernet0/0/5 eth-trunk 1#interface GigabitEthernet0/0/6 #interface GigabitEthernet0/0/7 #interface GigabitEthernet0/0/8 #interface GigabitEthernet0/0/9 #interface GigabitEthernet0/0/10 #interface GigabitEthernet0/0/11 #interface GigabitEthernet0/0/12 #interface GigabitEthernet0/0/13 #interface GigabitEthernet0/0/14 #interface GigabitEthernet0/0/15 #interface GigabitEthernet0/0/16 #interface GigabitEthernet0/0/17 #interface GigabitEthernet0/0/18 #interface GigabitEthernet0/0/19 #interface GigabitEthernet0/0/20 #interface GigabitEthernet0/0/21 #interface GigabitEthernet0/0/22 #interface GigabitEthernet0/0/23 #interface GigabitEthernet0/0/24interface NULL0#user-interface con 0user-interface vty 0 4#ReturnS5700-LSW3[Huawei]dis cu#sysname Huawei#vlan batch 10 20#stp mode rstpstp instance 0 root secondary#cluster enablentdp enablendp enable#drop illegal-mac alarm#diffserv domain default#drop-profile default#aaaauthentication-scheme default authorization-scheme default accounting-scheme defaultdomain defaultdomain default_adminlocal-user admin password simple admin local-user admin service-type http#interface Vlanif1#interface Vlanif10ip address 10.0.0.3 255.255.255.0#interface Vlanif20ip address 20.0.0.3 255.255.255.0interface MEth0/0/1#interface Eth-Trunk1port link-type trunkport trunk allow-pass vlan 10 20 #interface GigabitEthernet0/0/1#interface GigabitEthernet0/0/2 port link-type trunkport trunk allow-pass vlan 10 20 #interface GigabitEthernet0/0/3 eth-trunk 1#interface GigabitEthernet0/0/4#interface GigabitEthernet0/0/5 eth-trunk 1#interface GigabitEthernet0/0/6#interface GigabitEthernet0/0/7#interface GigabitEthernet0/0/8#interface GigabitEthernet0/0/9#interface GigabitEthernet0/0/10#interface GigabitEthernet0/0/11#interface GigabitEthernet0/0/12#interface GigabitEthernet0/0/13#interface GigabitEthernet0/0/14#interface GigabitEthernet0/0/15#interface GigabitEthernet0/0/16#interface GigabitEthernet0/0/17interface GigabitEthernet0/0/18#interface GigabitEthernet0/0/19#interface GigabitEthernet0/0/20#interface GigabitEthernet0/0/21#interface GigabitEthernet0/0/22#interface GigabitEthernet0/0/23#interface GigabitEthernet0/0/24#interface NULL0#user-interface con 0user-interface vty 0 4#Return测试:把S5700-LSW2上的端口G0/0/3 DOWN掉后,用户可以正常通信[Huawei]dis eth-trunk 1Eth-Trunk1's state information is:WorkingMode: NORMAL Hash arithmetic: According to SIP-XOR-DIP Least Active-linknumber: 1 Max Bandwidth-affected-linknumber: 8Operate status: up Number Of Up Port In Trunk: 1--------------------------------------------------------------------------------PortName Status WeightGigabitEthernet0/0/3 Down 1GigabitEthernet0/0/5 Up 1在S5700-LSW1上将根端口g0/0/1 DOWN后,阻塞端口g0/0/2正常切换成根端口接受和发送报文,[Huawei]dis stpJan 3 2013 13:23:07-08:00 Huawei DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25.191.3.1 configurations have been changed. The current change number is 6, the change loop count is 0, and the maximum number of records is 4095.briMSTID Port Role STP State Protection0 GigabitEthernet0/0/2 ROOT FORW ARDING NONE客户端也可以正常访问S5700-LSW2上的10.0.0.1和S5700-LSW3上的10.0.0.3在客户端2上也可以正常访问S5700-LSW2和S5700-LSW3上的端口地址。