MstpVrrp 實驗

1、Mstp+Vrrp雙核心網(wǎng)絡(luò)架構(gòu)：在這個雙核心的網(wǎng)絡(luò)架構(gòu)中所應(yīng)用到的技術(shù)：1、 Mstp，在交換機層開啟Mstp，創(chuàng)建實例instance 一個實例就是一棵樹，使用Mstp來實現(xiàn)數(shù)據(jù)分流和備份鏈路；2、 Mstp+Vrrp Vrrp 是虛擬路由冗余協(xié)議，Vrrp下的IP是虛擬網(wǎng)關(guān)， 而VLAN 下的地址是虛擬路由器的物理地址，用戶所獲取到的網(wǎng)關(guān)使Vrrp下的虛擬網(wǎng)關(guān)地址；3、 Dhcp 動態(tài)分配地址，設(shè)置在兩臺核心中，兩個地址池要分別排除對面的地址；4、 浮動路由，在雙核心出接口寫默認(rèn)，一條主，一條加管理距離；5、 端口聚合，在雙核心之間用若干條線互連，把這些端口加入到聚合端口，打trunk，

2、來作為Vrrp的心跳線；6、 ACL 訪問控制列表 、NAT 網(wǎng)絡(luò)地址轉(zhuǎn)換，設(shè)置在出口路由器中，允許哪些用戶上網(wǎng)，創(chuàng)建NAT地址轉(zhuǎn)換池，允許上網(wǎng)的網(wǎng)段調(diào)入overload即可。接下來是我在做這個實驗的過程：首先是寫好配置模板，寫模板的好處是，理清思路，配置有條理，出了問題先看看模板有沒有問題，缺少什么等接入層交換機的配置模板：conf tspanning-tree spanning-tree mode mstp（開啟多生成樹Mstp）vlan 2vlan 3vlan 4vlan 5vlan 6vlan 7exitint range f0/1-5spanning-tree portfast （速

3、端口，用戶斷網(wǎng)和恢復(fù)網(wǎng)路切換速度快）spanning-tree bpduguard enable （防自環(huán)）sw acc vlan 2int range f0/6-10spanning-tree portfast spanning-tree bpduguard enable sw acc vlan 3int range f0/11-12spanning-tree portfast spanning-tree bpduguard enable sw acc vlan 4int range f0/13-14spanning-tree portfast spanning-tree bpduguard

4、 enable sw acc vlan 5int range f0/15-16spanning-tree portfast spanning-tree bpduguard enable sw acc vlan 6int range f0/17-18spanning-tree portfast spanning-tree bpduguard enable sw acc vlan 7exitint gi0/25（上聯(lián)口）sw mode trunkint gi0/26sw mode trunkexitspanning-tree mst conf（創(chuàng)建多生成樹實例）instance 1 vlan 3,

5、5,7instance 2 vlan 2,4,6exitwrite核心1配置模板：conf tip routingint gi0/25（下聯(lián)口trunk）sw mode trunkexitspanning-tree spanning-tree mode mstp（開啟Mstp）vlan 2vlan 3vlan 4vlan 5vlan 6vlan 7exitint vlan 2（虛擬路由器的物理地址）（用戶的虛擬網(wǎng)關(guān)，用戶實際獲取到的網(wǎng)關(guān)）exitint vlan 3vrrp 3 pr 110（Vrrp虛擬路由器的優(yōu)先級，默認(rèn)100,0255,255最高）exitint vlan 4exitin

6、t vlan 5vrrp 5 pr 110exitint vlan 6exitint vlan 7vrrp 7 pr 110exitspanning-tree mst conf （創(chuàng)建Mstp instance實例，修改實例優(yōu)先級）instance 1 vlan 3,5,7instance 2 vlan 2,4,6exitspanning-tree mst 1 p 4096spanning-tree mst 2 p 8192service dhcp（開啟并創(chuàng)建Dhcp地址池）ip dhcp pool vlan2exitip dhcp pool vlan3lease 0 12 0exitip d

7、hcp pool vlan4lease 0 12 0exitip dhcp pool vlan5lease 0 12 0exitip dhcp pool vlan6lease 0 12 0exitip dhcp pool vlan7lease 0 12 0exitint range f0/1-2（創(chuàng)建端口聚合）port-group 1int aggregateport 1（聚合端口1打trunk）sw mode trunkexitint f0/3spanning-tree bpdufilter enable （不向上一層發(fā)送BPDU 橋協(xié)議數(shù)據(jù)單元 報文）exit int f0/3no swn

8、o shutip route 0.0.0.0 0.0.0.0 10.0.8.6 100（浮動路由）exitwrite核心2配置模板：conf tip routing（下聯(lián)口trunk）int gi0/25sw mode trunkexitspanning-tree spanning-tree mode mstpvlan 2vlan 3vlan 4vlan 5vlan 6vlan 7exitint vlan 2vrrp 2 p 110exitint vlan 3exitint vlan 4vrrp 4 p 110exitint vlan 5exitint vlan 6vrrp 6 p 110ex

9、itint vlan 7exitspanning-tree mst conf instance 1 vlan 3,5,7instance 2 vlan 2,4,6exitspanning-tree mst 1 p 8192spanning-tree mst 2 p 4096service dhcpip dhcp pool vlan2lease 0 12 0exitip dhcp pool vlan3lease 0 12 0exitip dhcp pool vlan4lease 0 12 0exitip dhcp pool vlan5lease 0 12 0exitip dhcp pool vl

10、an6lease 0 12 0exitip dhcp pool vlan7lease 0 12 0exitint range f0/1-2port-group 1int aggregateport 1sw mode trunkexitint f0/3spanning-tree bpdufilter enable exit int f0/3no swno shutexitip route 0.0.0.0 0.0.0.0 10.0.8.1 100exitwrite用一臺三層做出口路由器：conf tip routingspanning-tree spanning-tree mode mstpint

11、 f0/1no swno shutip nat insideexitint f0/2no swno shutip nat insideexitint f0/3no swno shutip nat outsideexitaccess-list 1 permit 10.0.0.0 0.0.7.255 ip nat inside source list 1 pool dizhichi overloadexitip route 10.0.2.0 255.255.255.0 10.0.8.1 100 ip route 10.0.3.0 255.255.255.0 10.0.8.5 100ip route 10.0.4.0 255.255.255.0 10.0.8.5 ip route 10.0.4.0 255.255.255.0 10.0.8.1 100ip route 10.0.5.0 255.255.255.0 10.0.8.1 ip route 10.0.5.0 255.255.255.0 10.0.8.5