锐捷工程师培训+2 生成树协议原理及配置
- 格式:ppt
- 大小:1.29 MB
- 文档页数:72
生成树协议2007-09-23 12:57冗余链路会产生的问题:1.广播风暴2.多帧复制3.MAC地址表不稳定4.多个回路解决办法是选择生成树协议,阻塞多余的冗余端口。
生成树协议的目的是维持一个无回路的网络。
如果一个设备在拓扑中发现一个回路,它将阻塞一个或多个冗余的端口。
当网络拓扑发生变化时,生成树协议将重新配置交换机的各个端口以避免链接丢失或者出现新的回路。
生成树协议的基本规则:1.选择一个根桥:一个网段(物理网段)只能有一个根桥,根桥上的所有端口都是"指定端口",可以转发数据。
2.非根桥只有"根端口"可以转发数据,用来和根桥相连的"根端口"只能有一个。
其余端口不是"根端口",将被阻塞。
根桥 ==> 所有端口都是"指定端口"非根桥 ==> 一个"根端口",其余阻塞。
只有"指定端口"和"根端口"可以转发数据。
根桥的选择方法:采用生成树算法的交换机通过"网桥协议数据单元"(BPDU)的数据包定期交换配置信息,其中包括桥ID(Bridge ID)信息。
[桥ID=优先级+交换机MAC] 桥ID小的交换机将成为根桥。
优先级可以指定,默认为32768.非根桥上的根端口选择方法:非根桥到达根桥只需要一个端口(根端口),选择的时候会选择到达根桥路径代价最低的端口,这个端口就叫做根端口。
如果到达根桥的路径代价相等则比较端口的MAC,最低的选择为"根端口".到达路径的代价一般以带宽为依据,IEEE802.1d规定的路径的代价既开销(cost)如下:10Gbps=2 1Gbps=4 100Mbps=19 10Mbps=100开销小的将被选择为根端口。
非根桥上的非根端口在阻塞状态下也能够监听BPDU数据包,如果20秒收不到根桥的信息则开始转换自己的状态:blocking(阻塞/只能接收BPDU)——20——>listening (监听/接收并发送BPDU)——15秒——>learning(学习/接收、发送BPDU并学习MAC地)——15秒——>forwarding (转发)这样大约50秒的时间非根端口转变成为"根端口"或者变为"指定端口"开始转发数据。
生成树工作原理以及配置1 工作原理生成树协议可应用于环路网络,通过一定的算法实现路径冗余,同时将环路网络修剪成无环路的树型网络,从而避免报文在环路网络中的增生和无限循环。
STP的基本原理是,通过在交换机之间传递一种特殊的协议报文(在IEEE 802.1D 中这种协议报文被称为“配置消息”)来确定网络的拓扑结构。
配置消息中包含了足够的信息来保证交换机完成生成树计算。
1.1技术原理STP的基本思想就是生成“一棵树”,树的根是一个称为根桥的交换机,根据设置不同,不同的交换机会被选为根桥,但任意时刻只能有一个根桥。
由根桥开始,逐级形成一棵树,根桥定时发送配置报文,非根桥接收配置报文并转发,如果某台交换机能够从两个以上的端口接收到配置报文,则说明从该交换机到根有不止一条路径,便构成了循环回路,此时交换机根据端口的配置选出一个端口并把其他的端口阻塞,消除循环。
当某个端口长时间不能接收到配置报文的时候,交换机认为端口的配置超时,网络拓扑可能已经改变,此时重新计算网络拓扑,重新生成一棵树。
2. 功能介绍:生成树协议最主要的应用是为了避免局域网中的网络环回,解决成环以太网网络的“广播风暴”问题,从某种意义上说是一种网络保护技术,可以消除由于失误或者意外带来的循环连接。
STP也提供了为网络提供备份连接的可能,可与SDH保护配合构成以太环网的双重保护。
新型以太单板支持符合ITU-T 802.1d 标准的生成树协议STP及802.1w规定的快速生成树协议RSTP,收敛速度可达到1s。
但是,由于协议机制本身的局限,STP保护速度慢(即使是1s的收敛速度也无法满足电信级的要求),如果在城域网内部运用STP技术,用户网络的动荡会引起运营商网络的动荡。
目前在MSTP 组成环网中,由于SDH保护倒换时间比STP协议收敛时间快的多,系统采用依然是SDH MS-SPRING或SNCP,一般倒换时间在50ms以内。
但测试时部分以太网业务的倒换时间为0或小于几个毫秒,原因是内部具有较大缓存。
锐捷认证网络工程师(RCNA)课程大纲一、文档说明本大纲是针对三年制大专学生编写的“锐捷认证网络工程师(RCNA)”认证课程的教学大纲。
主要用于教师授课时对RCNA课程教学方式和方法的了解,掌握RCNA教学中的重点和难点,以及对教学授课前的准备工作起到指导作用。
二、教学目标在不同的网络环境下,选择适当的网络设备;中小型网络的规划与设计;掌握如何在交换机网络中进行灵活的安全隔离;掌握如何在交换网络中提供冗余链路,保证网络的稳定运行;掌握如何利用有限的资源提高链路带宽,保证网络高速运行;掌握如何利用三层交换机实现不同VLAN间的互通;掌握利用动态路由协议实现不同校区之间的互连;掌握如何通过NAT技术实现局域网连接到Internet;掌握如何利用ACL进行网络安全访问权限的控制;具备通过层次化的模型来分析网络故障,并具备设备故障排除的能力。
三、教学方法与教学形式RCNA课程在授课时采用理论和实践相结合的方式进行,注重学生的实际动手能力的培养。
尽可能采用案例式教学,使学生能够将所学的知识真正地和实际网络环境紧密结合起来,通过实践理解理论技术。
四、教学内容和要求1、理论知识第一章网络标准化教学目标:1、掌握OSI七层模型的起源、作用和各层的功能;2、熟悉网络传输过程中数据的封装与解封装的过程;3、掌握TCP/IP协议栈中各层的常见协议的特点;4、了解以太网中数据的结构。
课程知识点:第一节OSI七层模型OSI七层模型的起源与作用OSI七层模型的分类与各层之间的关系OSI七层模型各层的功能常见应用层协议数据链路层的构成MAC地址格式及组成数据封装和解封装过程及在各层次的名称第二节TCP/IP协议栈与OSI七层模型的关系应用层常用协议TCP段格式、长度端口号作用及分类,常见端口号TCP三次握手过程TCP确认机制TCP滑动窗口机制UDP段格式、长度TCP、UDP应用区别IP数据包格式ARP协议工作原理ICMP协议功能及常用命令LLC层及MAC层功能MAC地址格式本章重点:传输层、网络层、数据链路层功能,OSI各层间的关系;数据封装与解封装过程中数据的变化内容;OSI和TCP/IP协议栈的区别;传输层协议:端口号作用和常见端口号、TCP/UDP的区别、TCP三次握手、滑动窗口等;网络层协议:ARP、ICMP协议的应用;网络接口层:IEEE802.3和以太II标准、MAC地址本章难点:OSI各层功能的理解;端口号作用和常见端口号TCP/UDP的区别TCP三次握手、滑动窗口第二章网络互联设备教学目标:1、掌握网络传输介质应用场合及特点;2、掌握集线器、交换机及路由器之间的区别及应用场合;3、精通二层交换机功能原理和特点;4、熟悉路由器、三层交换机应用场合及特点;5、了解防火墙、IDS、IPS等安全设备应用场合及特点。
目录1生成树················································································································································ 1-11.1 生成树简介 ········································································································································ 1-11.1.1 STP简介 ································································································································· 1-11.1.2 RSTP简介······························································································································· 1-71.1.3 MSTP简介 ······························································································································ 1-81.1.4 协议规范 ······························································································································· 1-131.2 生成树配置任务简介························································································································ 1-131.2.1 STP配置任务简介 ················································································································· 1-141.2.2 RSTP配置任务简介 ·············································································································· 1-141.2.3 MSTP配置任务简介 ·············································································································· 1-151.3 配置生成树 ······································································································································ 1-171.3.1 配置生成树的工作模式 ········································································································· 1-171.3.2 配置MST域 ··························································································································· 1-171.3.3 配置根桥和备份根桥 ············································································································· 1-181.3.4 配置设备的优先级················································································································· 1-191.3.5 配置MST域的最大跳数 ········································································································· 1-191.3.6 配置交换网络的网络直径······································································································ 1-201.3.7 配置生成树的时间参数 ········································································································· 1-201.3.8 配置超时时间因子················································································································· 1-211.3.9 配置端口的最大发送速率······································································································ 1-221.3.10 配置端口为边缘端口 ··········································································································· 1-221.3.11 配置端口的路径开销 ··········································································································· 1-231.3.12 配置端口的优先级··············································································································· 1-251.3.13 配置端口的链路类型 ··········································································································· 1-261.3.14 配置端口收发的MSTP报文格式·························································································· 1-271.3.15 打开端口状态变化信息显示开关 ························································································· 1-271.3.16 使能生成树协议(STP/RSTP/MSTP模式) ······································································· 1-281.3.17 执行mCheck操作 ················································································································ 1-281.3.18 配置摘要侦听功能··············································································································· 1-291.3.19 配置No Agreement Check功能··························································································· 1-311.3.20 配置生成树保护功能 ··········································································································· 1-331.4 生成树显示和维护 ··························································································································· 1-361.5 生成树典型配置举例························································································································ 1-371.5.1 MSTP典型配置举例 ·············································································································· 1-371 生成树1.1 生成树简介SecPath F100-C-AI目前不支持PVST生成树协议。
STP 生成树协议配置协议名称:STP(生成树协议)配置协议一、背景介绍STP(生成树协议)是一种网络通信协议,用于在以太网交换机之间建立冗余路径,以确保网络的高可用性和冗余容错能力。
本协议旨在详细阐述STP的配置步骤和参数设置,以便网络管理员能够正确配置和管理STP协议。
二、配置步骤1. 确认交换机支持STP协议,并进入交换机的命令行界面。
2. 进入全局配置模式,并启用STP协议。
```enableconfigure terminalspanning-tree mode <mode>```其中,`<mode>`为STP模式,常见的模式有以下几种:- STP(标准生成树协议):适用于小型网络。
- RSTP(快速生成树协议):适用于中等规模的网络。
- MSTP(多实例生成树协议):适用于大型网络。
3. 配置交换机的优先级。
```spanning-tree priority <priority>```其中,`<priority>`为优先级,取值范围为0-61440,默认值为32768。
优先级越低,交换机在生成树中的角色越重要。
4. 配置端口的优先级。
```interface <interface>spanning-tree port-priority <priority>```其中,`<interface>`为端口名称,`<priority>`为优先级,取值范围为0-240,默认值为128。
优先级越低,端口在生成树中的角色越重要。
5. 配置根桥。
```spanning-tree vlan <vlan_id> root primary```其中,`<vlan_id>`为VLAN ID,用于指定生成树的VLAN。
6. 配置边缘端口。
```interface <interface>spanning-tree portfast```通过将端口设置为边缘端口,可以加快端口的状态转换速度。
生成树协议的工作原理篇一:STP生成树的工作原理STP生成树的工作原理一、STP生成树的工作原理STP的基本原理可以归纳为三步,选择根网桥RB、选择根端口RP、选择指定端口DP。
然后把根端口、指定端口设为转发状态,其它接口设为阻塞状态,这样一个逻辑上无环路的网络拓扑就形成了。
1.选择根网桥选择根网桥的依据是网桥ID,由优先级和MAC地址组成,先看优先级,优先级相同时再看MAC地址,值越小越优先选择。
根网桥的选择过程与政治选举类似。
2.选择根端口每一个非根网桥将从其接口选出一个到根网桥管理成本(administrative cost)最低的接口作为根端口,选择的依据是(1)自身到达根网桥的根路径成本最低的接口。
根路径成本的计算是,接口收到BPDU中所包含的成本与接口的成本的累加。
(2)直连网桥ID最小(3)端口ID最小3.选择指定端口当一个网段中有多个网桥时,这些网桥会将他们到根网桥的管理成本都通告出去,其中具有最低管理成本的网桥将作为指定(designated)网桥。
指定网桥中发送最低管理成本的BPDU的接口是该网段中的指定端口。
在每段链路上,选择一个指定端口,选择的依据是:(1)发送最低根路径成本的BPDU的接口(2)所在网桥ID最小(3)端口ID最小总结:选举根端口,比较接收的BPDU选举指定端口,比较发送的BPDU二、STP拓扑稳定后,所以工作中的交换机接口都将处于转发或阻塞状态,生成树的工作过程如下:(1)根交换机创建成本为0的Hello BPDU,并向其所有接口转发出去(2)邻接的非根网桥将接收的hello数据包中的成本加上接收端口的成本后,从指定端口转发出去。
(3)每经过一个hello时间周期根网桥重复步骤(1),非根网桥重复步骤(2),直到网络拓扑发生变化。
总结一下:STP拓扑稳定后,根网桥通过每2s的hello时间创建和发送helloBPDU,非根网桥通过根端口接收BPDU,并且从从指定端口转发改变后的BPDU。
锐捷多生成树协议MSTP配置————————————————————————————————作者: ————————————————————————————————日期:多生成树协议MSTP【实验名称】多生成树协议MSTP【实验目的】在接入层和分布层交换机上配置MSTP并进行验证。
【背景描述】某企业网络管理员认识到,传统的生成树协议(STP)是基于整个交换网络产生一个树形拓扑结构,所有的VLANs都共享一个生成树,这种结构不能进行网络流量的负载均衡,使得有些交换设备比较繁忙,而另一些交换设备又很空闲,为了克服这个问题,他决定采用基于VLAN的多生成树协议MSTP,现要在交换机上做适当配置来完成这一任务。
本实验采用4台交换机设备,PC1和PC3在Vlan 10中,IP地址分别为172.16.1.10/24和172.16.1.30/24,PC2在Vlan20中,PC4在Vlan40中。
【实现功能】ﻩ在实现网络冗余和可靠性的同时实现负载均衡(分担)。
【实验拓扑】S3550-A S3550-BS2126-A S2126-BPC1PC2Vlan10Vlan20PC3PC4Vlan10Vlan40F0/1F0/2F0/23F0/24F0/23F0/24F0/24F0/23F0/23F0/24F0/1F0/1F0/1F0/2【实验设备】接入层交换机S2126G (2台)、分布层交换机S3550-24(2台)【实验步骤】第一步:配置接入层交换机S2126-AS2126-A (config)#spanning-tree!开启生成树S2126-A (config)#spanning-treemodemstp!配置生成树模式为MSTPS2126-A(config)#vlan 10 !创建Vlan 10S2126-A(config)#vlan 20!创建Vlan20S2126-A(config)#vlan 40!创建Vlan 40S2126-A(config)#interface fastethernet0/1S2126-A(config-if)#switchport access vlan10 !分配端口F0/1给Vlan10S2126-A(config)#interfacefastethernet0/2S2126-A(config-if)#switchport access vlan20 !分配端口F0/2给Vlan 20 S2126-A(config)#interfacefastethernet0/23S2126-A(config-if)#switchport modetrunk!定义F0/23为trunk端口S2126-A(config)#interface fastethernet 0/24S2126-A(config-if)#switchportmode trunk!定义F0/24为trunk端口S2126-A(config)#spanning-treemst configuration !进入MSTP配置模式S2126-A(config-mst)#instance 1vlan 1,10!配置instance1(实例1)并关联Vlan1和10S2126-A(config-mst)#instance 2 vlan 20,40 !配置实例2并关联Vlan 20和40S2126-A(config-mst)#nameregion1!配置域名称S2126-A(config-mst)#revision 1!配置版本(修订号)验证测试:验证MSTP配置S2126-A#show spanning-tree mst configuration! 显示MSTP全局配置Multi spanning tree protocol : EnabledName : region1Revision :1Instance Vlans Mapped-------- ------------------------------------------------------------02-9,11-19,21- 39,41- 40941 1,102 20,40第二步:配置接入层交换机S2126-BS2126-B(config)#spanning-tree!开启生成树S2126-B (config)#spanning-tree mode mstp !采用MSTP生成树模式S2126-B(config)#vlan10!创建Vlan 10S2126-B(config)#vlan 20 !创建Vlan 20S2126-B(config)#vlan 40!创建Vlan 40S2126-B(config)#interface fastethernet0/1S2126-B(config-if)#switchport access vlan 10 !分配端口F0/1给Vlan10 S2126-B(config)#interface fastethernet 0/2S2126-B(config-if)#switchport accessvlan40 !分配端口F0/2给Vlan40 S2126-B(config)#interfacefastethernet0/23S2126-B(config-if)#switchportmode trunk!定义F0/23为trunk端口S2126-B(config)#interface fastethernet 0/24S2126-B(config-if)#switchportmode trunk !定义F0/24为trunk端口S2126-B(config)#spanning-tree mstconfiguration ! 进入MSTP配置模式S2126-B(config-mst)#instance1vlan 1,10!配置instance1(实例1)并关联Vlan1和10S2126-B(config-mst)#instance2 vlan20,40 !配置实例2并关联Vlan 20和40S2126-B(config-mst)#name region1 !配置域名称S2126-B(config-mst)#revision 1!配置版本(修订号)验证测试:验证MSTP配置S2126-B#show spanning-treemst configurationMulti spanning tree protocol: EnabledName:region1Revision: 1InstanceVlansMapped--------------------------------------------------------------------0 2-9,11-19,21-39,41-40941 1,102 20,40第三步:配置分布层交换机S3550-AS3550-A(config)#spanning-tree !开启生成树S3550-A(config)#spanning-tree modemstp!采用MSTP生成树模式S3550-A(config)#vlan 10S3550-A(config)#vlan20S3550-A(config)#vlan 40S3550-A(config)#interface fastethernet 0/1S3550-A(config-if)#switchport modetrunk!定义F0/1为trunk端口S3550-A(config)#interfacefastethernet 0/23S3550-A(config-if)#switchport mode trunk!定义F0/23为trunk端口S3550-A(config)#interfacefastethernet 0/24S3550-A(config-if)#switchport modetrunk !定义F0/24为trunk端口S3550-A(config)#spanning-tree mst 1 priority4096!配置交换机S3550-A在instance1中的优先级为4096,缺省是32768,值越小越优先成为该instance中的rootswitchS3550-A (config)#spanning-tree mst configuration !进入MSTP配置模式S3550-A(config-mst)#instance1vlan1,10 ! 配置实例1并关联Vlan 1和10S3550-A(config-mst)#instance 2vlan20,40 !配置实例2并关联Vl an 20和40S3550-A(config-mst)#name region1 !配置域名为region1S3550-A (config-mst)#revision1! 配置版本(修订号)验证测试:验证MSTP配置S3550-A#show spanning-treemst configurationMulti spanningtreeprotocol: EnabledName:region1Revision:1Instance Vlans Mapped-------- ------------------------------------------------------------02-9,11-19,21-39,41-40941 1,102 20,40第四步:配置分布层交换机S3550-BS3550-B(config)#spanning-tree !开启生成树S3550-B (config)#spanning-treemode mstp!采用MSTP生成树模式S3550-B(config)#vlan 10S3550-B(config)#vlan 20S3550-B(config)#vlan40S3550-B(config)#interfacefastethernet 0/1S3550-B(config-if)#switchport mode trunk!定义F0/1为trunk端口S3550-B(config)#interface fastethernet 0/23S3550-B(config-if)#switchport mode trunk! 定义F0/23为trunk端口S3550-B(config)#interface fastethernet 0/24S3550-B(config-if)#switchportmodetrunk! 定义F0/24为trunk端口S3550-B(config)#spanning-tree mst2priority4096 !配置交换机S3550-B在instance2(实例2)中的优先级为4096 ,缺省是32768,值越小越优先成为该region (域)中的root switchS3550-B (config)#spanning-treemst configuration !进入MSTP配置模式S3550-B (config-mst)#instance1vlan 1,10!配置实例1并关联Vlan 1和10S3550-B(config-mst)#instance 2 vlan 20,40 ! 配置实例2并关联Vlan 20和40S3550-B (config-mst)#nameregion1 !配置域名为region1S3550-B(config-mst)#revision 1 ! 配置版本(修订号)验证测试:验证MSTP配置S3550-B#showspanning-tree mst configurationMulti spanning tree protocol:EnabledName: region1Revision: 1Instance VlansMapped-------- ------------------------------------------------------------0 2-9,11-19,21-39,41-409411,102 20,40第五步:验证交换机配置S3550-A#show spanning-tree mst 1!显示交换机S3550-A上实例1的特性######MST 1 vlansmapped:1,10BridgeAddr :00d0.f8ff.4e3f!交换机S3550-A的MAC 地址Priority : 4096 ! 优先级TimeSinceTopologyChange: 0d:7h:21m:17sTopologyChanges:0DesignatedRoot : 100100D0F8FF4E3F!后12位是MAC地址,此处显示是S3550-A自身的MAC,这说明S3550-A是实例1 (instance1)的生成树的根交换机RootCost: 0RootPort: 0S3550-B#showspanning-tree mst 2 !显示交换机S3550-B上实例2的特性###### MST2 vlans mapped: 20,40BridgeAddr: 00d0.f8ff.4662Priority : 4096TimeSinceTopologyChange: 0d:7h:31m:0sTopologyChanges :0DesignatedRoot:100200D0F8FF4662!S3550-B是实例2(instance 2)的生成树的根交换机RootCost : 0RootPort :0S2126-A#showspanning-treemst 1!显示交换机S2126-A上实例1的特性###### MST 1 vlans mapped :1,10BridgeAddr :00d0.f8fe.1e49Priority : 32768TimeSinceTopologyChange: 7d:3h:19m:31sTopologyChanges :0DesignatedRoot :100100D0F8FF4E3F !实例1的生成树的根交换机是S3550-ARootCost :200000RootPort : Fa0/23!对实例1而言,S2126-A的根端口是Fa0/23S2126-A#show spanning-treemst2!显示交换机S2126-A上实例2的特性###### MST 2 vlansmapped : 20,40BridgeAddr:00d0.f8fe.1e49Priority: 32768TimeSinceTopologyChange:7d:3h:19m:31sTopologyChanges: 0DesignatedRoot : 100200D0F8FF4662 !实例2的生成树的根交换机是S3550-BRootCost :200000RootPort: Fa0/24 !对实例2而言,S2126-A的根端口是Fa0/24类似可以验证其它交换机上的配置。