实验二十六：GVRP协议.doc

实验二十六：GVRP协议一、 理论基础在VLAN个数较少的情况下，静态VLAN配置较为方便，但是在VLAN众多的情况下，这样的工作显得较为复杂。通过GVRP协议，在交换机上动态的创建和注册VLAN，避免了手工配置的苦恼。只需在交换机的系统模式和端口模式下分别启动GVRP协议，就可以自动的学习到VLAN信息。在交换机的Trunk端口上，VLAN的GVRP有三种情况：normal、fixed、forbidden。其中normal是默认的注册方法，表示允许在该端口手工或动态创建、注册和注销VLAN。fixed表示允许在该端口手工或动态创建和注册VLAN，不允许动态删除或注册VLAN。Forbidden表示在端口注销除了VLAN1之外的其它所有VLAN，并且禁止在该端口创建和注销其它任何VLAN。二、 实验案例GVRP的配置1、实验拓扑图： 2、配置说明：交换机A的e0/2和交换机B的e0/2,并把这两个端口设置为trunk模式。3、具体配置：交换机A的配置：Quidwayint e0/2Quidway-Ethernet0/2port link-type trunkQuidway-Ethernet0/2port trunk permit vlan all Please wait. Done.Quidwaygvrp GVRP is enabled globally.Quidwayint e0/2Quidway-Ethernet0/2gvrp GVRP is enabled on port Ethernet0/2.Quidway-Ethernet0/2quitQuidwayvlan 2Quidway-vlan2vlan 3Quidway-vlan3quitQuidwaydis cur sysname Quidwayradius scheme system server-type huawei primary authentication 127.0.0.1 1645 primary accounting 127.0.0.1 1646 user-name-format without-domaindomain system radius-scheme system access-limit disable state active idle-cut disable self-service-url disable messenger time disable domain default enable system local-server nas-ip 127.0.0.1 key huawei gvrp queue-scheduler wrr 1 2 4 8vlan 1vlan 2vlan 3interface Aux0/0interface Ethernet0/1interface Ethernet0/2 port link-type trunk port trunk permit vlan all gvrpinterface Ethernet0/3interface Ethernet0/4interface Ethernet0/5interface Ethernet0/6interface Ethernet0/7interface Ethernet0/8interface NULL0user-interface aux 0user-interface vty 0 4returnQuidwaydis gvrp statistics GVRP statistics on port Ethernet0/2 GVRP Status : Enabled GVRP Failed Registrations : 0 GVRP Last Pdu Origin : 0000-0000-0000 GVRP Registration Type : NormalQuidwaydis int e0/2 Ethernet0/2 current state : UP IP Sending Frames Format is PKTFMT_ETHNT_2, Hardware address is 000f-e201-07c7 The Maximum Transmit Unit is 1500 Media type is twisted pair, loopback not set Port hardware type is 100_BASE_TX 100Mbps-speed mode, full-duplex mode Link speed type is autonegotiation, link duplex type is autonegotiation Flow-control is not enabled The Maximum Frame Length is 1518 Broadcast MAX-ratio: 100% PVID: 1 Mdi type: normal Port link-type: trunk VLAN passing : 1(default vlan), 2-3 VLAN allowed : 1(default vlan), 2-4094 Trunk port encapsulation: IEEE 802.1q Last 300 seconds input: 0 packets/sec 4 bytes/sec Last 300 seconds output: 0 packets/sec 8 bytes/sec Input(total): 6167 packets, 2389909 bytes 851 broadcasts, 2908 multicasts Input(normal): - packets, - bytes - broadcasts, - multicasts Input: 0 input errors, - runts, 0 giants, - throttles, 0 CRC 0 frame, - overruns, 0 aborts, 0 ignored, - parity errors Output(total): 1927267 packets, 131177961 bytes 536 broadcasts, 1924614 multicasts, 0 pauses Output(normal): - packets, - bytes - broadcasts, - multicasts, - pauses Output: 0 output errors, - underruns, - buffer failures - aborts, 0 deferred, 0 collisions, 0 late collisions - lost carrier, - no carrierQuidwaydis vlan VLAN function is enabled. Now, the following VLAN exist(s): 1(default), 2-3交换机B的配置：（已经自动学习到了动态的VLAN2，VLAN3） quidwaygvrp GVRP is enabled globally.quidwayint e0/2quidway-Ethernet0/2port link-type trunkquidway-Ethernet0/2port trunk permit vlan all Please wait. Done.quidway-Ethernet0/2gvrp GVRP is enabled on port Ethernet0/2.quidwaydis vlan VLAN function is enabled. Now, the following VLAN exist(s): 1(default), 2-3quidwaydis int e0/2 Ethernet0/2 current state : UP IP Sending Frames Format is PKTFMT_ETHNT_2, Hardware address is 000f-e206-f643 The Maximum Transmit Unit is 1500 Media type is twisted pair, loopback not set Port hardware type is 100_BASE_TX 100Mbps-speed mode, full-duplex mode Link speed type is autonegotiation, link duplex type is autonegotiation Flow-control is not enabled Port-flow-constrain has not been configured completely The Maximum Frame Length is 1518 Broadcast MAX-ratio: 100% PVID: 1 Mdi type: normal Port link-type: trunk VLAN passing : 1(default vlan), 2-3 VLAN allowed : 1(default vlan), 2-4094 Trunk port encapsulation: IEEE 802.1q Last 300 seconds input: 0 packets/sec 25 bytes/sec Last 300 seconds output: 0 packets/sec 11 bytes/sec Input(total): 3289 packets, 1363964 bytes 2264 broadcasts, 893 multicasts Input(normal): 3289 packets, - bytes 2264 broadcasts, 893 multicasts Input: 0 input errors, 0 runts, 0 giants, - throttles, 0 CRC 0 frame, - overruns, 0 aborts, 0 ignored, - parity errors Output(total): 432 packets, 41132 bytes 184 broadcasts, 109 multicasts, 0 pauses Output(normal): 432 packets, - bytes 184 broadcasts, 109 multicasts, - pauses Output: 0 output errors, - underruns, - buffer failures 0 aborts, 0 deferred, 0 collisions, 0 late collisions - lost carrier, - no carrierquidwaydis gvrp statistics GVRP statistics on port Ethernet0/2 GVRP Status : Enabled GVRP Failed Registrations : 0 GVRP Last Pdu Origin : 000f-e201-07c7 GVRP Registration Type : Normal但如果在交换机B上静态创建VLAN 5（创建好后，在把某一个端口加入其中即可），交换机B的E0/2接口虽然已设置成FIXED，但对方交换机A依然可以学习到vlan5的信息。交换机B：Quidwayvlan 5Quidway-vlan5port e0/4quidway-vlan5dis vlan VLAN function is enabled. Now, the following VLAN exist(s): 1(default), 5交换机A：dis vlan VLAN function is enabled. Now, the following VLAN exist(s): 1(default), 2-5forbidden表示端口将注销除vlan 1之外的所有其它vlan ，并且禁止在该端口创建和注册任何其他VLAN。Quidway-Ethernet0/2gvrp registration forbiddenQuidwaydis int e0/2 Ethernet0/2 current state : UP IP Sending Frames Format is PKTFMT_ETHNT_2, Hardware address is 000f-e201-07c7 The Maximum Transmit Unit is 1500 Media type is twisted pair, loopback not set Port hardware type is 100_BASE_TX 100Mbps-speed mode, full-duplex mode Link speed type is autonegotiation, link duplex type is autonegotiation Flow-control is not enabled The Maximum Frame Length is 1518 Broadcast MAX-ratio: 100% PVID: 1 Mdi type: normal Port link-type: trunk VLAN passing VLAN allowed : 1(default vlan), 2-4094 Trunk port encapsulation: IEEE 802.1q Last 300 seconds input: 0 packets/sec 25 bytes/sec Last 300 seconds output: 0 pac