华三设备MSTP和VRRP技术

VRRP拓扑图

  

PC的配置表

 这么命名可以有利于区分二层三层设备

MSTP：是把多个vlan捆绑到一个实例当中

MSTP会针对一个实例进行独立的生成树计算让vlan避免环路

sw2-1的配置：

##创建vlan，并给vlan加上端口
[sw2-1]vlan 10
[sw2-1-vlan10]port g1/0/11
[sw2-1-vlan10]vlan 20
[sw2-1-vlan20]port g1/0/12
[sw2-1-vlan20]qu
##以下做法可以给多个端口同时配置
[sw2-1]int range g1/0/1 g1/0/2
##trunk一下允许所有vlan通过
[sw2-1-if-range]port link-type trunk
[sw2-1-if-range]port trunk permit vlan all
[sw2-1-if-range]qu

##开启生成树协议
[sw2-1]stp global enable
##模式调整为mstp
[sw2-1]stp mode mstp
##进入创建的模式
[sw2-1]stp region-configuration
##给mstp区域设置名称
[sw2-1-mst-region]region-name h3c
##将vlan10和30映射到实例10中
[sw2-1-mst-region]instance 10 vlan 10 30
##将vlan20和40映射到实例20中
[sw2-1-mst-region]instance 20 vlan 20 40
##激活当前区域配置
[sw2-1-mst-region]active region-configuration

sw2-2的配置（和上面配置基本一样）：

[sw2-2]vlan 30
[sw2-2-vlan30]port g1/0/11
[sw2-2-vlan30]vlan 40
[sw2-2-vlan40]port g1/0/12
[sw2-2-vlan40]qu
[sw2-2]int range g1/0/1 g1/0/2
[sw2-2-if-range]port link-type trunk
[sw2-2-if-range]port trunk permit vlan all
[sw2-2-if-range]qu

[sw2-2]stp global enable
[sw2-2]stp mode mstp
[sw2-2]stp region-configuration
[sw2-2-mst-region]region-name h3c
[sw2-2-mst-region]instance 10 vlan 10 30
[sw2-2-mst-region]instance 20 vlan 20 40
[sw2-2-mst-region]active region-configuration

sw3-1的配置：

##想让所有vlan都能通过就要把vlan都创建一遍
[sw3-1]vlan 10
[sw3-1-vlan10]vlan 20
[sw3-1-vlan20]vlan 30
[sw3-1-vlan30]vlan 40
[sw3-1-vlan40]qu
##在三层设备上赋予vlan们IP
[sw3-1]int vlan 10
[sw3-1-Vlan-interface10]ip add 192.168.10.1 24
[sw3-1-Vlan-interface10]int vlan 20
[sw3-1-Vlan-interface20]ip add 192.168.20.1 24
[sw3-1-Vlan-interface20]int vlan 30
[sw3-1-Vlan-interface30]ip add 192.168.30.1 24
[sw3-1-Vlan-interface30]int vlan 40
[sw3-1-Vlan-interface40]ip add 192.168.40.1 24
[sw3-1-Vlan-interface40]qu
##一下配置3个端口方便一点
[sw3-1]int range g1/0/1 g1/0/2 g1/0/10
##创建了这么多，得允许它们通过，所以要配trunk
[sw3-1-if-range]port link-type trunk
[sw3-1-if-range]port trunk permit vlan all

##跟上面第一个配置一样
[sw3-1]stp global enable
[sw3-1]stp mode mstp
[sw3-1]stp region-configuration
[sw3-1-mst-region]region-name h3c
[sw3-1-mst-region]instance 10 vlan 10 30
[sw3-1-mst-region]instance 20 vlan 20 40
[sw3-1-mst-region]qu

##给实例配上优先级（优先级越小越容易成为根桥）
[sw3-1]stp instance 10 priority 4096
[sw3-1]stp instance 20 priority 8192


[sw3-1]int vlan 10
##在VLAN10的接口上创建一个VRRP编号为10的备份组，同时配置上默认网关（虚拟）
[sw3-1-Vlan-interface10]vrrp vrid 10 virtual-ip 192.168.10.254
##备份组10设置优先级为150（优先级越高的设备越有可能成为主路由器）
[sw3-1-Vlan-interface10]vrrp vrid 10 priority 150
[sw3-1-Vlan-interface10]int vlan 20
##在VLAN20的接口上创建一个VRRP编号为20的备份组，同时配置上默认网关
[sw3-1-Vlan-interface20]vrrp vrid 20 virtual-ip 192.168.20.254
[sw3-1-Vlan-interface20]int vlan 30
##在VLAN30的接口上创建一个VRRP编号为30的备份组，同时配置上默认网关
[sw3-1-Vlan-interface30]vrrp vrid 30 virtual-ip 192.168.30.254
##备份组30设置优先级为150
[sw3-1-Vlan-interface30]vrrp vrid 30 priority 150
[sw3-1-Vlan-interface30]int vlan 40
##在VLAN40的接口上创建一个VRRP编号为40的备份组，同时配置上默认网关
[sw3-1-Vlan-interface40]vrrp vrid 40 virtual-ip 192.168.40.254
[sw3-1-Vlan-interface40]qu



[sw3-1]int g1/0/24
##将默认的二层工作模式切换成三层
[sw3-1-GigabitEthernet1/0/24]port link-mode route
[sw3-1-GigabitEthernet1/0/24]ip add 20.20.20.1 24
[sw3-1-GigabitEthernet1/0/24]qu

##配置ospf宣告网段
[sw3-1]ospf
[sw3-1-ospf-1]area 0
[sw3-1-ospf-1-area-0.0.0.0]network 20.20.20.0 0.0.0.255
[sw3-1-ospf-1-area-0.0.0.0]network 192.168.10.0 0.0.0.255
[sw3-1-ospf-1-area-0.0.0.0]network 192.168.20.0 0.0.0.255
[sw3-1-ospf-1-area-0.0.0.0]network 192.168.30.0 0.0.0.255
[sw3-1-ospf-1-area-0.0.0.0]network 192.168.40.0 0.0.0.255
[sw3-1-ospf-1-area-0.0.0.0]qu

sw3-2的配置：

##和sw3-1一样的内容，创vlan，加IP
[sw3-2]vlan 10
[sw3-2-vlan10]vlan 20
[sw3-2-vlan20]vlan 30
[sw3-2-vlan30]vlan 40
[sw3-2-vlan40]qu
[sw3-2]int vlan 10
[sw3-2-Vlan-interface10]ip add 192.168.10.2 24
[sw3-2-Vlan-interface10]int vlan 20
[sw3-2-Vlan-interface20]ip add 192.168.20.2 24
[sw3-2-Vlan-interface20]int vlan 30
[sw3-2-Vlan-interface30]ip add 192.168.30.2 24
[sw3-2-Vlan-interface30]int vlan 40
[sw3-2-Vlan-interface40]ip add 192.168.40.2 24
[sw3-2-Vlan-interface40]qu
##统一配trunk
[sw3-2]int range g1/0/1 g1/0/2 g1/0/10
[sw3-2-if-range]port link-type trunk
[sw3-2-if-range]port trunk permit vlan all

##生成树，mstp映射
[sw3-2]stp global enable
[sw3-2]stp mode mstp
[sw3-2]stp region-configuration
[sw3-2-mst-region]region-name h3c
[sw3-2-mst-region]instance 10 vlan 10 30
[sw3-2-mst-region]instance 20 vlan 20 40
[sw3-2-mst-region]active region-configuration
##实例优先级
[sw3-2]stp instance 10 priority 8192
[sw3-2]stp instance 20 priority 4096


##建立VRRP备份组和优先级
[sw3-2]int vlan 10
[sw3-2-Vlan-interface10]vrrp vrid 10 virtual-ip 192.168.10.254
[sw3-2-Vlan-interface10]int vlan 20
[sw3-2-Vlan-interface20]vrrp vrid 20 virtual-ip 192.168.20.254
[sw3-2-Vlan-interface20]vrrp vrid 20 priority 150
[sw3-2-Vlan-interface20]int vlan 30
[sw3-2-Vlan-interface30]vrrp vrid 30 virtual-ip 192.168.30.254
[sw3-2-Vlan-interface30]int vlan 40
[sw3-2-Vlan-interface40]vrrp vrid 40 virtual-ip 192.168.40.254
[sw3-2-Vlan-interface40]vrrp vrid 40 priority 150

##给接口IP
[sw3-2]int g1/0/24
[sw3-2-GigabitEthernet1/0/24]ip add 30.30.30.1 24
[sw3-2-GigabitEthernet1/0/24]qu

##配置ospf宣告网段
[sw3-2]ospf
[sw3-2-ospf-1]area 0
[sw3-2-ospf-1-area-0.0.0.0]network 30.30.30.0 0.0.0.255
[sw3-2-ospf-1-area-0.0.0.0]network 192.168.10.0 0.0.0.255
[sw3-2-ospf-1-area-0.0.0.0]network 192.168.20.0 0.0.0.255
[sw3-2-ospf-1-area-0.0.0.0]network 192.168.30.0 0.0.0.255
[sw3-2-ospf-1-area-0.0.0.0]network 192.168.40.0 0.0.0.255

rt1的配置：

##接口配置IP
[rt1]int g0/0
[rt1-GigabitEthernet0/0]ip add 20.20.20.2 24
[rt1-GigabitEthernet0/0]int g0/1
[rt1-GigabitEthernet0/1]ip add 30.30.30.2 24
[rt1-GigabitEthernet0/1]int s1/0
[rt1-Serial1/0]ip add 40.40.40.1 24
[rt1-Serial1/0]qu
##ospf宣告网段
[rt1]ospf
[rt1-ospf-1]area 0
[rt1-ospf-1-area-0.0.0.0]network 20.20.20.0 0.0.0.255
[rt1-ospf-1-area-0.0.0.0]network 30.30.30.0 0.0.0.255
[rt1-ospf-1-area-0.0.0.0]network 40.40.40.0 0.0.0.255

rt2的配置：

##接口IP
[rt2]int s1/0
[rt2-Serial1/0]ip add 40.40.40.2 24
[rt2-Serial1/0]int g0/0
[rt2-GigabitEthernet0/0]ip add 50.50.50.1 24
[rt2-GigabitEthernet0/0]qu
##ospf宣告
[rt2]ospf
[rt2-ospf-1]area 0
[rt2-ospf-1-area-0.0.0.0]network 40.40.40.0 0.0.0.255
[rt2-ospf-1-area-0.0.0.0]network 50.50.50.0 0.0.0.255

用PC1分别ping