1、總部分部專線gre

1、拓需 拓需 配#routerid#ipttl-expires #aclnumberrule0配#routerid#ipttl-expires #aclnumberrule0permitgresource202.100.0.20destination202.200.0.2aclnumberrule0permitipsource10.1.0.0rule1permitipsource10.2.0.0rule2permitipsource10.3.0.0rule3permitipsource10.1.1.0rule4permitipsource20.1.1.0rule5permitipsource10

2、.4.0.00.0.0.255 ikepeer #alsecurityacl3001 ike-peer h3c#al ipaddress1.1.1.1#ipaddress10.1.0.1# vlan-typedot1qvidipaddress10.0.0.1# vlan-typedot1qvidipaddress10.0.1.1# portlink-modeipaddress10.0.0.1# vlan-typedot1qvidipaddress10.0.1.1# portlink-modeipaddress10.0.0.9# portlink-moderoute nat outbound 3

3、002ipaddress202.100.0.2ipsecpolicy# ipaddress10.0.1.10destination 202.200.0.2keepalive10ospfcostgrekey#ospfarea 0.0.0.0 area #rt1dispiprouting-Destinations:Routes:Sic00DirectDirectDirectDirectDirectDirectDirectDirectDirectDirectDirectDirectDirectDirectDirectDirectDirect000000000000022311322etotalpha

4、se-112flag rt1disp ipse path MTU: 1500IPsecpolicyname:mode:connectionid:encapsulationmode:tunnel perfect forward secrecy:address:sour addr: 202.100.0.2/255.255.255.255port:0 destconnectionid:encapsulationmode:tunnel perfect forward secrecy:address:sour addr: 202.100.0.2/255.255.255.255port:0 destadd

5、r:port:inboundESP max received sequence-number: 53anti-replaycheckenable:Y outboundESP max received sequence-number: 84 #routeridlocal-user rt4 service-type ppp#link-protocolpppauthentication-modechap ppp chap user rt2pppmpMp-group# pppauthentication-modechap ppp chap user rt2pppmpMp-group#ipaddress

6、10.0.1.5#ipaddress2.2.2.2# pppauthentication-modechap ppp chap user rt2pppmpMp-group#ipaddress10.0.1.5#ipaddress2.2.2.2#ipaddress10.2.0.1# vlan-typedot1qvidipaddress10.0.0.2# vlan-typedot1qvidipaddress10.0.1.2# portlink-modeipaddress10.0.0.5#ospfarea area network10.0.1.00.0.0.3 rt2 disp ip routing-t

7、able Routing Tables: PublicDestinations:Routes:11DirectDirectDirectDirectDirectDirectDirectDirectDirectDirectDirectDirectDirectDirectDirectDirectDirect000000000000022rt2dispppp131322Mp-groupisMp- Peers Sequenceformat:long/longBundleUpTime:0lostfragments,100reordered,0unassigned,0 Sequence: 102/82 rc

8、vd/sentThememberchannelsbundled#routerid#ipaddress3.3.3.3#ipaddress10.3.0.1# portlink-modeipaddress10.0.0.6# portlink-modeipaddress10.0.0.10#ipaddress10.3.0.1# portlink-modeipaddress10.0.0.6# portlink-modeipaddress10.0.0.10# portlink-modeipaddress100.1.1.1# portlink-modeipaddress200.1.1.1#ospfarea a

9、rea stub no-summary rt3dispiprouting-table Routing Tables: PublicDestinations:Routes:Direct1102DirectDirectDirect0002DirectDirectDirectDirectDirectDirectDirectDirectDirectDirectDirectDirect00000000221212#routerid#aclnumberrule0permitgresource202.200.0.20destination202.100.0.2aclnumberrule0permitipso

10、urce10.4.0.00.0.0.255 ikepeer #alsecurityacl3001 ike-peer h3cal local-userpasswordsimpleh3c service-type ppp# pppauthentication-modechap ppp chap user rt4pppmpMp-group#link-protocolpppauthentication-modechap ppp chap user rt4pppmpMp-group# pppauthentication-modechap ppp chap user rt4pppmpMp-group#li

11、nk-protocolpppauthentication-modechap ppp chap user rt4pppmpMp-group#ipaddress10.0.1.6#descriptionipaddress4.4.4.4#ipaddress10.4.0.1# portlink-moderoute nat outbound 3002ipaddress202.200.0.2ipsecpolicy# ipaddress10.0.1.9destination 202.100.0.2keepalive10ospfcostgrekey#ospfareaarea #iproute- RoutingT

12、ables:Destinations:Routes:#iproute- RoutingTables:Destinations:Routes:Sic0DirectDirectDirectDirectDirectDirectDirect00000000000etotalphase-112flag rt4disp ipse path MTU: 1500IPsecpolicyname:mode:connectionid:encapsulationpath MTU: 1500IPsecpolicyname:mode:connectionid:encapsulationmode:tunnel perfec

13、t forward secrecy:address:destaddr:port:port:inboundESP max received sequence-number: 123anti-replaycheckenable:Y outboundESP max received sequence-number: 94 #routerid#vlan#stp instance 0 root primary stp instance 1 root primary stpinstance2rootsecondary stp enableregion-name h3c instance 1 vlan 10

14、instance2vlan#stp instance 0 root primary stp instance 1 root primary stpinstance2rootsecondary stp enableregion-name h3c instance 1 vlan 10instance2vlan #ipaddress5.5.5.5#erfaceipaddress10.1.1.252vrrpvrid10virtual-ipvrrpvrid10priorityvrrpvrid10timeradvertisevrrpvrid10 vrrpvrid10authentication-modem

15、d5#erfaceipaddress20.1.1.252ospfcostvrrpvrid20virtual-ipvrrpvrid20timeradvertisevrrpvrid20authentication-modemd5#erfaceEthernet0/4/0 port link-mode bridge port link-type trunkporttrunkpermitvlan11020 ipx encapsulation ethernet-2#erfaceEthernet0/4/1 port link-mode bridge port link-type trunkporttrunk

16、permitvlan11020 ipx encapsulation ethernet-2#portlink-modeipaddress100.1.1.2#ospfsilent- erface Vlan- erface10 silent- erface Vlan- erface20 area 0.0.0.10 portlink-modeipaddress100.1.1.2#ospfsilent- erface Vlan- erface10 silent- erface Vlan- erface20 area 0.0.0.10 001122STPS sw1dispstpsw1dispstp012R

17、ootBridge000PathCostRoot00sw1dispipsw1dispiprouting-table Routing Tables: PublicDestinations:Routes:DirectDirectDirectDirectDirectDirectDirectDirectDirect2000000000sw1dispvrrpDirect0eIPv4StandbyRunRun: :VirtualTotalnumberofvirtualrouters:erface: : : Adversw1dispvrrpDirect0eIPv4StandbyRunRun: :Virtua

18、lTotalnumberofvirtualrouters:erface: : : Adver: :AdminConfigRunning:Auth : Delay: : :VirtualMaster: : Se:PriReduced:erface: : : Adver: : AdminConfigRunning:Auth : Delay: :VirtualMaster: : #routerid#stpinstance1rootsecondary stp instance 2 root primary stp enable instance1vlaninstance2vlan #ipaddress

19、6.6.6.6 instance1vlaninstance2vlan #ipaddress6.6.6.6#erfaceipaddress10.1.1.253ospfcostvrrpvrid10virtual-ipvrrpvrid10timeradvertisevrrpvrid10authentication-modemd5#erfaceipaddress20.1.1.253vrrpvrid20virtual-ipvrrpvrid20priorityvrrpvrid20timeradvertisevrrpvrid20 vrrpvrid20authentication-modemd5#erface

20、 port link-mode bridge port link-type trunkporttrunk permitvlan110ipxencapsulationethernet-#erface port link-mode bridge port link-type trunkporttrunkpermitvlan11020 ipx encapsulation ethernet-2#port link-mode routeospfsilent- erface Vlan- erface10 silent- erface Vlan- erface20 area 0.0.0.10 001122S

21、TPsw2dispstp 001122STPsw2dispstp012RootBridge000PathCostRoot0 Destinations:Routes:DirectDirectDirectDirectDirectDirectDirectDirectDirect200000020000sw2dispvrrpIPv4StandbyRunRun: :VirtualTotalnumberofvirtualrouters:erface: : : Adver: : ConfigRunning:Auth : Delay: : :VirtualMaster: : erface: : : Adver

22、: Auth : Delay: : :VirtualMaster: : erface: : : Adver: :AdminConfigRunning:Auth : Delay: : :VirtualMaster: : Se:PriReduced:#local-user h3c service-typelan-ac#stps region-name h3c instance1vlaninstance2vlan #erfaceipaddress10.1.1.10#erfaceipaddress20.1.1.20#erface port link-mode bridge port link-type

23、 trunkporttrunkpermitvlan110#erface port link-mode bridge port link-type trunkporttrunkpermitvlan1ipaddress20.1.1.20#erface port link-mode bridge port link-type trunkporttrunkpermitvlan110#erface port link-mode bridge port link-type trunkporttrunkpermitvlan110#iproute- sw3dispiprouting-Destinations:

24、Routes:Sicic0S0DirectDirectDirectDirectDirectDirect000000#ipaddress202.0.0.1# portlink-modeipaddress202.200.0.1#portlink-modeipaddress202.100.0.1sw4dispiprouting-table Routing Tables: PublicDestinations:Routes:Directportlink-modeipaddress202.100.0.1sw4dispiprouting-table Routing Tables: PublicDestin

25、ations:Routes:DirectDirectDirectDirectDirectDirectDirectDirect00000000排 ospf ospf 故障一： sw1為根橋，2sw1為根橋，3sw1處 sw1 2sw1stp 故障二主備選擇sw1和sw2上vrrpmaster sw2vlan10 sw1 上一樣的驗證后不再提示錯誤，并且主sw2上vlan10和vlan20vrrp md5，key故障三：vrrp 主備切換 sw1 上一樣的驗證后不再提示錯誤，并且主sw2上vlan10和vlan20vrrp md5，key故障三：vrrp 主備切換vlan down vlan 接口

26、一直處于 display vrrp e 發(fā)現(xiàn)其配置的優(yōu)先級為120reduc 卻為 10down 時有切換，再次檢查track 接口發(fā) 的 vlan 接口為 vlan4，通過 vlan 4 查看后發(fā)現(xiàn)vlan4 e0/4/0 30，進入sw1與sw2 的undoporttrunkpermitvlan故障四：802.1x service-typelan-s故障五：ppp 、故障現(xiàn)象：ppp端口不斷up/downpppmp 為 display displaycurconfig luserrt2rt42、ppp接口正常up后，mp-group還是down 狀態(tài)，通過display pppmp 發(fā)現(xiàn)rt4上mp 下的兩個接口都為 inactive 狀態(tài)，而rt2 下沒有綁定接口可能在接口綁定有誤通過 display cur 0/2/0 檢查兩端接口配置，發(fā)現(xiàn) rt2 上接口綁定方式為 ppp mp ，這種方式用于綁virtual-temp1rt2rt4 故障六：area 10 故障分析：題area10 totally stub 區(qū)域，只能發(fā)故障六：area 10 故障分析：題area10 totally stub 區(qū)域，只能發(fā)布3 類缺省路由，可能是在rt3上area10未配置為totallystubrt3上