Mstp+Vrrp 實(shí)驗(yàn).doc

Mstp+Vrrp雙核心網(wǎng)絡(luò)架構(gòu)：在這個(gè)雙核心的網(wǎng)絡(luò)架構(gòu)中所應(yīng)用到的技術(shù)：1、 Mstp，在交換機(jī)層開(kāi)啟Mstp，創(chuàng)建實(shí)例instance 一個(gè)實(shí)例就是一棵樹(shù)，使用Mstp來(lái)實(shí)現(xiàn)數(shù)據(jù)分流和備份鏈路；2、 Mstp+Vrrp Vrrp 是虛擬路由冗余協(xié)議，Vrrp下的IP是虛擬網(wǎng)關(guān)， 而VLAN 下的地址是虛擬路由器的物理地址，用戶(hù)所獲取到的網(wǎng)關(guān)使Vrrp下的虛擬網(wǎng)關(guān)地址；3、 Dhcp 動(dòng)態(tài)分配地址，設(shè)置在兩臺(tái)核心中，兩個(gè)地址池要分別排除對(duì)面的地址；4、 浮動(dòng)路由，在雙核心出接口寫(xiě)默認(rèn)，一條主，一條加管理距離；5、 端口聚合，在雙核心之間用若干條線(xiàn)互連，把這些端口加入到聚合端口，打trunk，來(lái)作為Vrrp的心跳線(xiàn)；6、 ACL 訪(fǎng)問(wèn)控制列表 、NAT 網(wǎng)絡(luò)地址轉(zhuǎn)換，設(shè)置在出口路由器中，允許哪些用戶(hù)上網(wǎng)，創(chuàng)建NAT地址轉(zhuǎn)換池，允許上網(wǎng)的網(wǎng)段調(diào)入overload即可。接下來(lái)是我在做這個(gè)實(shí)驗(yàn)的過(guò)程：首先是寫(xiě)好配置模板，寫(xiě)模板的好處是，理清思路，配置有條理，出了問(wèn)題先看看模板有沒(méi)有問(wèn)題，缺少什么等接入層交換機(jī)的配置模板：conf tspanning-tree spanning-tree mode mstp（開(kāi)啟多生成樹(shù)Mstp）vlan 2vlan 3vlan 4vlan 5vlan 6vlan 7exitint range f0/1-5spanning-tree portfast （速端口，用戶(hù)斷網(wǎng)和恢復(fù)網(wǎng)路切換速度快）spanning-tree bpduguard enable （防自環(huán)）sw acc vlan 2int range f0/6-10spanning-tree portfast spanning-tree bpduguard enable sw acc vlan 3int range f0/11-12spanning-tree portfast spanning-tree bpduguard enable sw acc vlan 4int range f0/13-14spanning-tree portfast spanning-tree bpduguard enable sw acc vlan 5int range f0/15-16spanning-tree portfast spanning-tree bpduguard enable sw acc vlan 6int range f0/17-18spanning-tree portfast spanning-tree bpduguard enable sw acc vlan 7exitint gi0/25（上聯(lián)口）sw mode trunkint gi0/26sw mode trunkexitspanning-tree mst conf（創(chuàng)建多生成樹(shù)實(shí)例）instance 1 vlan 3,5,7instance 2 vlan 2,4,6exitwrite核心1配置模板：conf tip routingint gi0/25（下聯(lián)口trunk）sw mode trunkexitspanning-tree spanning-tree mode mstp（開(kāi)啟Mstp）vlan 2vlan 3vlan 4vlan 5vlan 6vlan 7exitint vlan 2ip add 10.0.2.253 255.255.255.0（虛擬路由器的物理地址）vrrp 2 ip 10.0.2.254（用戶(hù)的虛擬網(wǎng)關(guān)，用戶(hù)實(shí)際獲取到的網(wǎng)關(guān)）exitint vlan 3ip add 10.0.3.253 255.255.255.0vrrp 3 ip 10.0.3.254vrrp 3 pr 110（Vrrp虛擬路由器的優(yōu)先級(jí)，默認(rèn)100,0255,255最高）exitint vlan 4ip add 10.0.4.253 255.255.255.0vrrp 4 ip 10.0.4.254exitint vlan 5ip add 10.0.5.253 255.255.255.0vrrp 5 ip 10.0.5.254vrrp 5 pr 110exitint vlan 6ip add 10.0.6.253 255.255.255.0vrrp 6 ip 10.0.6.254exitint vlan 7ip add 10.0.7.253 255.255.255.0vrrp 7 ip 10.0.7.254vrrp 7 pr 110exitspanning-tree mst conf （創(chuàng)建Mstp instance實(shí)例，修改實(shí)例優(yōu)先級(jí)）instance 1 vlan 3,5,7instance 2 vlan 2,4,6exitspanning-tree mst 1 p 4096spanning-tree mst 2 p 8192service dhcp（開(kāi)啟并創(chuàng)建Dhcp地址池）ip dhcp pool vlan2network 10.0.2.0 255.255.255.0dns 8.8.8.8default-router 10.0.2.254exitip dhcp ex 10.0.2.100 10.0.2.254ip dhcp pool vlan3network 10.0.3.0 255.255.255.0lease 0 12 0dns 8.8.8.8default-router 10.0.3.254exitip dhcp ex 10.0.3.100 10.0.3.254ip dhcp pool vlan4network 10.0.4.0 255.255.255.0lease 0 12 0dns 8.8.8.8default-router 10.0.4.254exitip dhcp ex 10.0.4.100 10.0.4.254ip dhcp pool vlan5network 10.0.5.0 255.255.255.0lease 0 12 0dns 8.8.8.8default-router 10.0.5.254exitip dhcp ex 10.0.5.100 10.0.5.254ip dhcp pool vlan6network 10.0.6.0 255.255.255.0lease 0 12 0dns 8.8.8.8default-router 10.0.6.254exitip dhcp ex 10.0.6.100 10.0.6.254ip dhcp pool vlan7network 10.0.7.0 255.255.255.0lease 0 12 0dns 8.8.8.8default-router 10.0.7.254exitip dhcp ex 10.0.7.100 10.0.7.254int range f0/1-2（創(chuàng)建端口聚合）port-group 1int aggregateport 1（聚合端口1打trunk）sw mode trunkexitint f0/3spanning-tree bpdufilter enable （不向上一層發(fā)送BPDU 橋協(xié)議數(shù)據(jù)單元 報(bào)文）exit int f0/3no swip add 10.0.8.1 255.255.255.252no shutip route 0.0.0.0 0.0.0.0 10.0.8.2ip route 0.0.0.0 0.0.0.0 10.0.8.6 100（浮動(dòng)路由）exitwrite核心2配置模板：conf tip routing（下聯(lián)口trunk）int gi0/25sw mode trunkexitspanning-tree spanning-tree mode mstpvlan 2vlan 3vlan 4vlan 5vlan 6vlan 7exitint vlan 2ip add 10.0.2.252 255.255.255.0vrrp 2 ip 10.0.2.254vrrp 2 p 110exitint vlan 3ip add 10.0.3.252 255.255.255.0vrrp 3 ip 10.0.3.254exitint vlan 4ip add 10.0.4.252 255.255.255.0vrrp 4 ip 10.0.4.254vrrp 4 p 110exitint vlan 5ip add 10.0.5.252 255.255.255.0vrrp 5 ip 10.0.5.254exitint vlan 6ip add 10.0.6.252 255.255.255.0vrrp 6 ip 10.0.6.254vrrp 6 p 110exitint vlan 7ip add 10.0.7.252 255.255.255.0vrrp 7 ip 10.0.7.254exitspanning-tree mst conf instance 1 vlan 3,5,7instance 2 vlan 2,4,6exitspanning-tree mst 1 p 8192spanning-tree mst 2 p 4096service dhcpip dhcp pool vlan2network 10.0.2.0 255.255.255.0lease 0 12 0dns 8.8.8.8default-router 10.0.2.254exitip dhcp ex 10.0.2.1 10.0.2.99ip dhcp ex 10.0.2.252 10.0.2.254ip dhcp pool vlan3network 10.0.3.0 255.255.255.0lease 0 12 0dns 8.8.8.8default-router 10.0.3.254exitip dhcp ex 10.0.3.1 10.0.3.99ip dhcp ex 10.0.3.252 10.0.3.254ip dhcp pool vlan4network 10.0.4.0 255.255.255.0lease 0 12 0dns 8.8.8.8default-router 10.0.3.254exitip dhcp ex 10.0.4.1 10.0.4.99ip dhcp ex 10.0.4.252 10.0.4.254ip dhcp pool vlan5network 10.0.5.0 255.255.255.0lease 0 12 0dns 8.8.8.8default-router 10.0.5.254exitip dhcp ex 10.0.5.1 10.0.5.99ip dhcp ex 10.0.5.252 10.0.5.254ip dhcp pool vlan6network 10.0.6.0 255.255.255.0lease 0 12 0dns 8.8.8.8default-router 10.0.6.254exitip dhcp ex 10.0.6.1 10.0.6.99ip dhcp ex 10.0.6.252 10.0.6.254ip dhcp pool vlan7network 10.0.7.0 255.255.255.0lease 0 12 0dns 8.8.8.8default-router 10.0.7.254exitip dhcp ex 10.0.7.1 10.0.7.99ip dhcp ex 10.0.7.252 10.0.7.254int range f0/1-2port-group 1int aggregateport 1sw mode trunkexitint f0/3spanning-tree bpdufilter enable exit int f0/3no swip add 10.0.8.5 255.255.255.252no shutexitip route 0.0.0.0 0.0.0.0 10.0.8.6ip route 0.0.0.0 0.0.0.0 10.0.8.1 100exitwrite用一臺(tái)三層做出口路由器：conf tip routingspanning-tree spanning-tree mode mstpip route 0.0.0.0 0.0.0.0 172.16.1.2int f0/1no swip add 10.0.8.2 255.255.255.252no shutip nat insideexitint f0/2no swip add 10.0.8.6 255.255.255.252no shutip nat insideexitint f0/3no swip add 172.16.1.1 255.255.255.252no shutip nat outsideexitip route 10.0.0.0 255.255.248.0 172.16.1.1ip nat pool dizhichi 20.0.0.1 20.0.0.254 netmask 255.255.255.0access-l