MSTP+VRRP综合实验

1、实验拓扑

2、实验配置

1.配置eth-trunk进行绑定

[SW1]interface Eth-Trunk 0
[SW1-Eth-Trunk0]q
[SW1]int g0/0/2
[SW1-GigabitEthernet0/0/2]eth-trunk 0
[SW1-GigabitEthernet0/0/2]q
[SW1]int g0/0/3
[SW1-GigabitEthernet0/0/3]eth-trunk 0


[SW2-Eth-Trunk0]q
[SW2]int g0/0/2 
[SW2-GigabitEthernet0/0/2]eth-trunk 0
[SW2-GigabitEthernet0/0/2]q
[SW2]int g0/0/3
[SW2-GigabitEthernet0/0/3]eth-trunk 0

2.创建vlan,划分接口类型

[SW1]vlan 2
[SW1-vlan2]q
[SW1]port-group group-member g0/0/4 to g0/0/5 Eth-Trunk 0
[SW1-port-group]port link-type trunk 
[SW1-GigabitEthernet0/0/4]port link-type trunk 
[SW1-GigabitEthernet0/0/5]port link-type trunk 
[SW1-Eth-Trunk0]port link-type trunk 
[SW1-port-group]port trunk allow-pass vlan 2
[SW1-GigabitEthernet0/0/4]port trunk allow-pass vlan 2
[SW1-GigabitEthernet0/0/5]port trunk allow-pass vlan 2
[SW1-Eth-Trunk0]port trunk allow-pass vlan 2

[SW2]vlan 2
[SW2-vlan2]q
[SW2]port-group group-member g0/0/4 to g0/0/5 Eth-Trunk 0
[SW2-port-group]port link-type trunk
[SW2-GigabitEthernet0/0/4]port link-type trunk
[SW2-GigabitEthernet0/0/5]port link-type trunk
[SW2-Eth-Trunk0]port link-type trunk
[SW2-port-group]port trunk allow-pass vlan 2
[SW2-GigabitEthernet0/0/4]port trunk allow-pass vlan 2
[SW2-GigabitEthernet0/0/5]port trunk allow-pass vlan 2
[SW2-Eth-Trunk0]port trunk allow-pass vlan 2

[SW3]vlan 2
[SW3-vlan2]q
[SW3-Ethernet0/0/3]int e0/0/4
[SW3-Ethernet0/0/4]port link-type access
[SW3-Ethernet0/0/4]port default vlan 2
[SW3-Ethernet0/0/4]q 
[SW3]port-group group-member e0/0/1 to e0/0/2 
[SW3-port-group]port link-type trunk
[SW3-Ethernet0/0/1]port link-type trunk
[SW3-Ethernet0/0/2]port link-type trunk
[SW3-port-group]port trunk allow-pass vlan 2
[SW3-Ethernet0/0/1]port trunk allow-pass vlan 2
[SW3-Ethernet0/0/2]port trunk allow-pass vlan 2

[SW4]vlan 2
[SW4-vlan2]q
[SW4]int e0/0/4
[SW4-Ethernet0/0/4]port link-type access 
[SW4-Ethernet0/0/4]port default vlan 2
[SW4-Ethernet0/0/4]q
[SW4]port-group group-member e0/0/1 to e0/0/2
[SW4-port-group]port link-type trunk
[SW4-Ethernet0/0/1]port link-type trunk
[SW4-Ethernet0/0/2]port link-type trunk
[SW4-port-group]port trunk allow-pass vlan 2
[SW4-Ethernet0/0/1]port trunk allow-pass vlan 2
[SW4-Ethernet0/0/2]port trunk allow-pass vlan 2

3.配置生成树:

[SW1]stp region-configuration 
[SW1-mst-region]region-name aa
[SW1-mst-region]instance 1 vlan 1
[SW1-mst-region]instance 2 vlan 2
[SW1-mst-region]active region-configuration 

[SW2]stp region-configuration 
[SW2-mst-region]instance 1 vlan 1
[SW2-mst-region]instance 2 vlan 2
[SW2-mst-region]active region-configuration 

[SW3]stp region-configuration 
[SW3-mst-region]region-name aa
[SW3-mst-region]instance 1 vlan 1
[SW3-mst-region]instance 2 vlan 2
[SW3-mst-region]active region-configuration 

[SW4]stp region-configuration 
[SW4-mst-region]region-name aa  
[SW4-mst-region]instance 1 vlan 1
[SW4-mst-region]instance 2 vlan 2
[SW4-mst-region]active region-configuration 

4.进行根和备份跟的确定:

[SW1]stp instance 1 root primary
[SW1]stp instance 2 root secondary 

[SW1]stp instance 0 root primary 

[SW2]stp instance 1 root secondary 
[SW2]stp instance 2 root primary 

[SW2]stp instance 0 root secondary 

[SW3]port-group group-member e0/0/1 to e0/0/22(配置边缘接口进行优化)
[SW3-port-group]stp edged-port enable 

[SW3]int e0/0/3(修改WiFi接口优先级)
[SW3-Ethernet0/0/3]stp instance 0 port priority 16

5.配置ip地址SVI:

[SW1]int vlan 1
[SW1-Vlanif1]ip add 172.16.1.1 25
[SW1]int vlan 2
[SW1-Vlanif2]ip add 172.16.1.129 25


[SW2]int vlan 1
[SW2-Vlanif1]ip add 172.16.1.2 25
[SW2]int vlan 2
[SW2-Vlanif2]ip add 172.16.1.130 25


6.进行网关冗余VRRP:

[SW1]int vlan 1 
[SW1-Vlanif1]vrrp vrid 1 virtual-ip 172.16.1.126 
[SW1-Vlanif1]vrrp vrid 1 priority 110  (称为主ip)
[SW1-Vlanif1]vrrp vrid 1 track interface g0/0/1 reduced 20


[SW2]int vlan 1
[SW2-Vlanif1]vrrp vrid 1 virtual-ip 172.16.1.126

[SW2]int vlan 2
[SW2-Vlanif2]vrrp vrid 1 virtual-ip 172.16.1.254
[SW2-Vlanif2]vrrp vrid 1 priority 110
[SW2-Vlanif2]vrrp vrid 1 track int g0/0/1 reduced  20

[SW1]int vlan 2
[SW1-Vlanif2]vrrp vrid 1 virtual-ip 172.16.1.254

7.配置DHCP获取IP地址:

[SW1]dhcp enable 
[SW1]ip pool v1
[SW1-ip-pool-v1]net 172.16.1.0 mask 25
[SW1-ip-pool-v1]gateway-list 172.16.1.126  
[SW1-ip-pool-v1]dns-list 114.114.114.114
[SW1-ip-pool-v1]q
[SW1]ip pool v2
[SW1-ip-pool-v2]net 172.16.1.128 mask 25
[SW1-ip-pool-v2]gateway-list 172.16.1.254
[SW1-ip-pool-v2]dns-list 114.114.114.114
[SW1-ip-pool-v2]q
[SW1]int vlan 1    
[SW1-Vlanif1]dhcp select global 
[SW1-Vlanif1]int vlan 2
[SW1-Vlanif2]dhcp select global 

[SW2]dhcp enable
[SW2]ip pool v1
Info:It's successful to create an IP address pool.
[SW2-ip-pool-v1]net 172.16.1.0 mask 25
[SW2-ip-pool-v1]gateway-list 172.16.1.126   
[SW2-ip-pool-v1]dns-list 114.114.114.114
[SW2-ip-pool-v1]q
[SW2]ip pool v2
Info:It's successful to create an IP address pool.
[SW2-ip-pool-v2]net 172.16.1.128 mask 25   
[SW2-ip-pool-v2]gateway-list 172.16.1.254
[SW2-ip-pool-v2]dns-list 114.114.114.114
[SW2-ip-pool-v2]q
[SW2]int vlan 1
[SW2-Vlanif1]dhcp select global 
[SW2-Vlanif1]int vlan 2
[SW2-Vlanif2]dhcp select global 

8.对于上层路由器进行连接

[SW1]vlan 99
[SW1-GigabitEthernet0/0/2]int g0/0/1
[SW1-GigabitEthernet0/0/1]port link-type access 
[SW1-GigabitEthernet0/0/1]port default vlan 99
[SW1]int vlan 99
[SW1-Vlanif99]ip add 172.16.0.2 30

[SW2]vlan 99
[SW2-vlan99]int g0/0/1 
[SW2-GigabitEthernet0/0/1]port link-type access  
[SW2-GigabitEthernet0/0/1]port default vlan 99
[SW2-GigabitEthernet0/0/1]q
[SW2]int vlan 99
[SW2-Vlanif99]ip add 172.16.0.6 30

9.配置沉默接口:

[SW1-ospf-1]silent-interface all
[SW1-ospf-1]undo silent-interface GigabitEthernet 0/0/1
[SW1-ospf-1]undo silent-interface Vlanif 99
[SW1-ospf-1]undo silent-interface Eth-Trunk 0
[SW1-ospf-1]undo silent-interface Vlanif 1
[SW2]ospf 1
[SW2-ospf-1]silent-interface all
[SW2-ospf-1]undo silent-interface GigabitEthernet 0/0/1
[SW2-ospf-1]undo silent-interface Vlanif 99
[SW2-ospf-1]undo silent-interface Eth-Trunk 0  
[SW2-ospf-1]undo silent-interface Vlanif 1

三。配置路由器部分:

1.配置ospf协议

[R2]ospf 1 router-id 2.2.2.2
[R2-ospf-1]area 0
[R2-ospf-1-area-0.0.0.0]net 172.16.0.0 0.0.0.255

[SW1]ospf 1 router-id 3.3.3.3

[SW1-ospf-1]area 0
[SW1-ospf-1-area-0.0.0.0]net 172.16.0.2 0.0.0.0
[SW1-ospf-1]area 1
[SW1-ospf-1-area-0.0.0.1]net 172.16.1.0 0.0.0.255
[SW1-ospf-1-area-0.0.0.1]

[SW2]ospf 1 router-id 4.4.4.4
[SW2-ospf-1]area 0 
[SW2-ospf-1-area-0.0.0.0]net 172.16.0.6 0.0.0.0
[SW2-ospf-1-area-0.0.0.0]q
[SW2-ospf-1]area 1
[SW2-ospf-1-area-0.0.0.1]net 172.16.1.0 0.0.0.255

2.配置缺省路由

[R2]ip route-static 0.0.0.0 0 12.1.1.1
[R2-ospf-1]default-route-advertise 

3.进行路由汇总:

[SW1]ospf 1
[SW1-ospf-1]area 1
[SW1-ospf-1-area-0.0.0.1]abr-summary 172.16.1.0 255.255.255.0

[SW2]ospf 1
[SW2-ospf-1]area 1
[SW2-ospf-1-area-0.0.0.1]abr-summary 172.16.1.0 255.255.255.0

4.防止路由黑洞

[SW1]ip route-static 172.16.1.0 24 NULL 0

[SW2]ip route-static 172.16.1.0 24 NULL 0

5.配置nat,进行上网:

[R2]acl 2000
[R2-acl-basic-2000]rule permit source 172.16.0.0 0.0.255.255
[R2-acl-basic-2000]q
[R2]int g0/0/0
[R2-GigabitEthernet0/0/0]nat outbound 2000
 

实验测试:

<think>嗯,用户现在想了解MSTPVRRP在冗余备份中的具体应用和配置方法。从用户提供的引用内容来看,ta应该是在学习企业网络冗余设计,特别是如何结合MSTPVRRP实现网关备份与链路负载均衡。用户之前已经掌握了VLAN的基础知识,现在明显在向更复杂的企业网络架构进阶。ta提供的三份引用材料都是关于华为eNSP模拟器下的MSTP+VRRP配置实验,说明ta需要的是可落地的技术方案而非纯理论。特别值得注意的是引用[2]中提到的"Master端与根桥要对应一致"这个关键点——这确实是实际部署中最容易出问题的地方。从技术深度看,用户的问题涉及三层:第一层是基础概念:需要解释清楚MSTP如何解决多VLAN环境下的环路问题,VRRP如何实现网关冗余第二层是协同机制:重点在于如何让VRRP的主备状态与MSTP的根桥/备份桥对应第三层是配置细节:包括优先级调整、抢占延迟、上行链路跟踪等实用技巧用户引用[3]里的配置片段很有价值,但缺少整体拓扑说明。我应该在回答里补充典型的三层网络拓扑图(接入-汇聚-核心结构),并强调物理链路与逻辑协议的对应关系。比如聚合链路要部署在汇聚层交换机之间,而VRRP实例需要绑定到VLAN接口上。另外注意到用户提供的配置中存在vrrptrackinterface这样的关键命令,这涉及到链路故障时的自动切换机制,需要在回答中重点说明其工作原理:当上行接口失效时,VRRP优先级会自动降低,触发主备切换避免单点故障。最后要提醒实验验证要点:在eNSP中测试时,必须验证三种场景:1)主设备正常时流量路径2)主设备故障切换过程3)恢复后的抢占行为。引用[2]里提到的"抢占延迟时间设置"就是为了避免网络震荡,这个细节容易被初学者忽略。</think>以下是MSTPVRRP在冗余备份中的综合应用方案,结合技术原理与配置实践进行说明: --- ### **一、技术原理与协作关系** 1. **MSTP(多生成树协议)** - 解决传统STP/RSTP在VLAN环境中**所有流量走单一路径**的问题 - 将多个VLAN映射到不同生成树实例(MSTI),实现: - **负载均衡**:不同VLAN流量走不同路径 - **链路冗余**:主路径故障时自动切换备用路径 - 关键概念: - **MST域(Region)**:相同配置的交换机组 - **实例(Instance)**:绑定VLAN的逻辑树 2. **VRRP(虚拟路由冗余协议)** - 提供**网关冗余**,解决单点故障: - 创建虚拟IP作为统一网关 - **Master设备**处理流量,**Backup设备**待命 - 支持**多备份组**:不同VLAN组可设独立主备关系 3. **协作价值** | 问题场景 | MSTP解决 | VRRP解决 | 协作效果 | |-------------------|-------------------------|------------------------|------------------------| | 网关单点故障 | × | ✓ (主备切换) | 业务零中断 | | 链路拥塞 | ✓ (多实例分流) | × | 带宽利用率翻倍 | | 次优路径 | ✓ (根桥与VRRP主设备对齐)| ✓ (优先级控制) | 流量走最短路径 | | 上行链路故障 | × | ✓ (接口跟踪降优先级) | 自动切换备用出口 | --- ### **二、典型部署架构** ```mermaid graph TD A[接入层交换机] -->|Trunk| B[汇聚层-LSW1] A -->|Trunk| C[汇聚层-LSW2] B <- LACP聚合链路 -> C B -->|VRRP Master| D[核心层/路由器] C -->|VRRP Backup| D ``` **角色分配示例**: - **VLAN 10/30**: - MSTP实例1根桥:LSW1 - VRRP主网关:LSW1(虚拟IP 192.168.10.254) - **VLAN 20/40**: - MSTP实例2根桥:LSW2 - VRRP主网关:LSW2(虚拟IP 192.168.20.254) > 💡 关键原则:**MSTP根桥必须与VRRP Master设备一致**,避免流量绕行[^2][^3] --- ### **三、华为设备配置步骤** #### 1. **基础配置(LSW1与LSW2相同)** ```bash # 创建VLAN vlan batch 10 20 30 40 # 配置聚合链路(LSW1-LSW2间) interface Eth-Trunk1 port link-type trunk port trunk allow-pass vlan all # interface GigabitEthernet0/0/1 eth-trunk 1 ``` #### 2. **MSTP配置(以LSW1为例)** ```bash # 定义MST域 stp region-configuration region-name MyDomain # 域名需全网一致 instance 1 vlan 10 30 # 实例1绑定VLAN10/30 instance 2 vlan 20 40 # 实例2绑定VLAN20/40 active region-configuration # 设置根桥角色 stp instance 1 root primary # LSW1为实例1主根 stp instance 2 root secondary # LSW1为实例2备份根 ``` #### 3. **VRRP配置(关键部分)** ```bash # LSW1配置(VLAN10主网关) interface Vlanif10 ip address 192.168.10.1 255.255.255.0 vrrp vrid 1 virtual-ip 192.168.10.254 # 虚拟IP vrrp vrid 1 priority 120 # 高优先级=Master vrrp vrid 1 preempt-mode timer delay 5 # 抢占延迟防震荡 vrrp vrid 1 track interface Eth-Trunk1 reduced 30 # 上行链路跟踪 # LSW2配置(VLAN10备份网关) interface Vlanif10 ip address 192.168.10.2 255.255.255.0 vrrp vrid 1 virtual-ip 192.168.10.254 vrrp vrid 1 priority 100 # 低优先级=Backup ``` > ⚠️ **VRRP接口跟踪**:当上行链路故障时,优先级自动降低(如`reduced 30`),触发主备切换[^3] --- ### **四、故障切换流程** 1. **场景1:LSW1物理故障** - MSTP检测链路中断,实例1重新选根(LSW2成为新根) - VRRP组1:LSW2优先级升为最高,切换为Master - 流量路径:接入层 → LSW2 → 核心层 2. **场景2:LSW1上行口故障** - `vrrp track`触发优先级降低(120 → 90) - LSW2(优先级100)自动接管Master角色 - MSTP实例1根桥不变,流量经聚合链路到LSW2转发 --- ### **五、验证命令** ```bash # 检查MSTP状态 display stp instance 1 brief # 查看实例1根桥 # 检查VRRP状态 display vrrp brief # 查看主备状态 display vrrp track # 验证接口跟踪状态 # 测试流量路径 tracert 192.168.10.254 # 跟踪网关路径 ``` --- ### **六、设计建议** 1. **根桥保护**:启用`stp root-protection`防止非法设备抢占根桥 2. **BFD加速收敛**:结合BFD检测链路故障,收敛时间<50ms 3. **负载均衡优化**: - 按业务类型划分VLAN组(如VIP用户用实例1,普通用户用实例2) - 调整VRRP权重:根据设备性能分配主网关角色 > 📌 **典型部署误区**: > - 未配置抢占延迟 → 网络震荡 > - MSTP域参数不一致 → 生成树分裂 > - 忽略上行跟踪 → 网关单点故障[^2][^3]
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包

打赏作者

小小怪绘梨衣

你的鼓励将是我创作的最大动力

¥1 ¥2 ¥4 ¥6 ¥10 ¥20
扫码支付:¥1
获取中
扫码支付

您的余额不足,请更换扫码支付或充值

打赏作者

实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值