SW3
在sw3上创建vlan2、3、20、30
[sw3]vlan batch 2 3 20 30将sw3的接口分配到对应vlan中
[sw3]int g0/0/1
[sw3-GigabitEthernet0/0/1]port link-type access
[sw3-GigabitEthernet0/0/1]port default vlan 2
[sw3-GigabitEthernet0/0/1]int g0/0/2
[sw3-GigabitEthernet0/0/2]port link-type access
[sw3-GigabitEthernet0/0/2]port default vlan 3
[sw3-GigabitEthernet0/0/2]int g0/0/3
[sw3-GigabitEthernet0/0/3]port link-type trunk
[sw3-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 3 20 30
[sw3-GigabitEthernet0/0/3]int g0/0/4
[sw3-GigabitEthernet0/0/4]port link-type trunk
[sw3-GigabitEthernet0/0/4]port trunk allow-pass vlan 2 3 20 30
在SW1配置vlan,将0/0/1接口与0/0/2接口进行链路聚合操作
[sw1]vlan batch 2 3 20 30
[sw1]int Eth-Trunk 0
[sw1-Eth-Trunk0]trunkport GigabitEthernet 0/0/1 to 0/0/2
[sw1-Eth-Trunk0]port link-type trunk
[sw1-Eth-Trunk0]port trunk allow-pass vlan 2 3 20 30
[sw1]int g0/0/3
[sw1-GigabitEthernet0/0/3]port link-type trunk
[sw1-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 3 20 30
[sw1-GigabitEthernet0/0/3]int g0/0/4
[sw1-GigabitEthernet0/0/4]port link-type trunk
[sw1-GigabitEthernet0/0/4]port trunk allow-pass vlan 2 3 20 30
在sw4上创建vlan2、3、20、30并将对应接口分配到对应vlan中
[sw4]vlan batch 2 3 20 30
[sw4-GigabitEthernet0/0/1]port link-type access
[sw4-GigabitEthernet0/0/1]port default vlan 20
[sw4-GigabitEthernet0/0/1]int g0/0/2
[sw4-GigabitEthernet0/0/2]port link-type access
[sw4-GigabitEthernet0/0/2]port default vlan 30
[sw4-GigabitEthernet0/0/2]int g0/0/3
[sw4-GigabitEthernet0/0/3]port link-type trunk
[sw4-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 3 20 30
[sw4-GigabitEthernet0/0/3]int g0/0/4
[sw4-GigabitEthernet0/0/4]port link-type trunk
[sw4-GigabitEthernet0/0/4]port trunk allow-pass vlan 2 3 20 30
在SW2 配置vlan,将0/0/1接口与0/0/2接口进行链路聚合操作
[sw2]vlan batch 2 3 20 30
[sw2]int Eth-Trunk 0
[sw2-Eth-Trunk0]trunkport GigabitEthernet 0/0/1 to 0/0/2
[sw2]int g0/0/3
[sw2-GigabitEthernet0/0/3]port link-type trunk
[sw2-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 3 20 30
[sw2-GigabitEthernet0/0/3]int g0/0/4
[sw2-GigabitEthernet0/0/4]port link-type trunk
[sw2-GigabitEthernet0/0/4]port trunk allow-pass vlan 2 3 20 30
在SW 1 2 3 4修改stp模式并进行配置和激活
[sw1]stp enable
[sw1]stp mode mstp
[sw1]stp region-configuration
[sw1-mst-region] region-name aa
[sw1-mst-region] revision-level 100
[sw1-mst-region] instance 1 vlan 2 to 3
[sw1-mst-region] instance 2 vlan 20 30
[sw1-mst-region] active region-configuration
[sw2]stp enable
[sw2]stp mode mstp
[sw2]stp region-configuration
[sw2-mst-region] region-name aa
[sw2-mst-region] revision-level 100
[sw2-mst-region] instance 1 vlan 2 to 3
[sw2-mst-region] instance 2 vlan 20 30
[sw2-mst-region] active region-configuration
[sw3]stp enable
[sw3]stp mode mstp
[sw3]stp region-configuration
[sw3-mst-region]region-name aa
[sw3-mst-region]revision-level 100
[sw3-mst-region]instance 1 vlan 2 to 3
[sw3-mst-region]instance 2 vlan 20 30
[sw3-mst-region]active region-configuration
[sw4]stp enable
[sw4]stp mode mstp
[sw4]stp region-configuration
[sw4-mst-region] region-name aa
[sw4-mst-region] revision-level 100
[sw4-mst-region] instance 1 vlan 2 to 3
[sw4-mst-region] instance 2 vlan 20 30
[sw4-mst-region] active region-configuration
让SW1成为实例1 并将其作为主根,同时作为实例2的备份根。
[sw1]stp instance 1 root primary
[sw1]stp instance 2 root secondary
让SW2成为实例1的备份根,实例2的主根。
[sw2]stp instance 1 root secondary
[sw2]stp instance 2 root primary
在SW1上开启根保护功能。
[sw1]interface Eth-Trunk 0
[sw1]int g0/0/3
[sw1-GigabitEthernet0/0/3]stp root-protection
开启边端口功能
[sw3-GigabitEthernet0/0/1]stp edged-port enable
SW1中对vlan2的相关配置
[sw1]interface Vlanif 2
[sw1-Vlanif2]ip address 10.0.2.1 24
[sw1-Vlanif2]vrrp vrid 1 virtual-ip 10.0.2.254更改vrrp的优先级
[sw1-Vlanif2]vrrp vrid 1 priority 120配置强制延时vrp
[sw1-Vlanif2]vrrp vrid 1 preempt-mode timer delay 20上行链路监控
[sw1-Vlanif2]vrrp vrid 1 track interface GigabitEthernet 0/0/5 reduced 30
SW1中对vlan3的相关配置
[sw1]interface Vlanif 3
[sw1-Vlanif3]ip address 10.0.3.1 24
[sw1-Vlanif3]vrrp vrid 1 virtual-ip 10.0.3.254更改vrrp的优先级
[sw1-Vlanif3]vrrp vrid 1 priority 120配置强制延时vrp
[sw1-Vlanif3]vrrp vrid 1 preempt-mode timer delay 20上行链路监控
[sw1-Vlanif3]vrrp vrid 1 track interface GigabitEthernet 0/0/5 reduced 30配置备用vlan
[sw1]interface Vlanif 20
[sw1-Vlanif20]ip address 10.0.20.1 24
[sw1-Vlanif20]vrrp vrid 1 virtual-ip 10.0.20.254
[sw1]int Vlanif 30
[sw1-Vlanif30]ip address 10.0.30.1 24
[sw1-Vlanif30]vrrp vrid 1 virtual-ip 10.0.30.254
SW2上对vlan2和3的配置
[sw2]interface Vlanif 2
[sw2-Vlanif2]ip address 10.0.2.2 24
[sw2-Vlanif2]vrrp vrid 1 virtual-ip 10.0.2.254
[sw2]interface Vlanif 3
[sw2-Vlanif3]ip address 10.0.3.2 24
[sw2-Vlanif3]vrrp vrid 1 virtual-ip 10.0.3.254
在SW2上对vlan20和30的配置
[sw2]interface Vlanif 20
[sw2-Vlanif20]ip address 10.0.20.2 24
[sw2-Vlanif20]vrrp vrid 1 virtual-ip 10.0.20.254
[sw2-Vlanif20]vrrp vrid 1 priority 120
[sw2-Vlanif20]vrrp vrid 1 preempt-mode timer delay 20
[sw2-Vlanif20]vrrp vrid 1 track interface GigabitEthernet 0/0/5 reduced 30
[sw2]interface Vlanif 30
[sw2-Vlanif30]ip address 10.0.30.2 24
[sw2-Vlanif30]vrrp vrid 1 virtual-ip 10.0.30.254
[sw2-Vlanif30]vrrp vrid 1 priority 120
[sw2-Vlanif30]vrrp vrid 1 preempt-mode timer delay 20
[sw2-Vlanif30]vrrp vrid 1 track interface GigabitEthernet 0/0/5 reduced 30
告诉交换机从10.0.2.0/24网段中下发IP地址
[sw1]dhcp enable
[sw1]ip pool vlan2
[sw1-ip-pool-vlan2]network 10.0.2.0 mask 24
配置虚拟网关和缺省
[sw1-ip-pool-vlan2]gateway-list 10.0.2.254
[sw1-ip-pool-vlan2]dns-list 8.8.8.8
为了后面其他PC不重复获取同一地址,排除一部分地址
[sw1-ip-pool-vlan2]excluded-ip-address 10.0.2.1 10.0.2.128激活
[sw1]interface Vlanif 2
[sw1-Vlanif2]dhcp select global
[sw1]interface Vlanif 3
[sw1-Vlanif3]dhcp select global
[sw1]interface Vlanif 20
[sw1-Vlanif20]dhcp select global
[sw1]interface Vlanif 30
[sw1-Vlanif30]dhcp select global