Mstp+Vrrp 实验.doc

Mstp+Vrrp双核心网络架构：在这个双核心的网络架构中所应用到的技术：1、 Mstp，在交换机层开启Mstp，创建实例instance 一个实例就是一棵树，使用Mstp来实现数据分流和备份链路；2、 Mstp+Vrrp Vrrp 是虚拟路由冗余协议，Vrrp下的IP是虚拟网关， 而VLAN 下的地址是虚拟路由器的物理地址，用户所获取到的网关使Vrrp下的虚拟网关地址；3、 Dhcp 动态分配地址，设置在两台核心中，两个地址池要分别排除对面的地址；4、 浮动路由，在双核心出接口写默认，一条主，一条加管理距离；5、 端口聚合，在双核心之间用若干条线互连，把这些端口加入到聚合端口，打trunk，来作为Vrrp的心跳线；6、 ACL 访问控制列表 、NAT 网络地址转换，设置在出口路由器中，允许哪些用户上网，创建NAT地址转换池，允许上网的网段调入overload即可。接下来是我在做这个实验的过程：首先是写好配置模板，写模板的好处是，理清思路，配置有条理，出了问题先看看模板有没有问题，缺少什么等接入层交换机的配置模板：conf tspanning-tree spanning-tree mode mstp（开启多生成树Mstp）vlan 2vlan 3vlan 4vlan 5vlan 6vlan 7exitint range f0/1-5spanning-tree portfast （速端口，用户断网和恢复网路切换速度快）spanning-tree bpduguard enable （防自环）sw acc vlan 2int range f0/6-10spanning-tree portfast spanning-tree bpduguard enable sw acc vlan 3int range f0/11-12spanning-tree portfast spanning-tree bpduguard enable sw acc vlan 4int range f0/13-14spanning-tree portfast spanning-tree bpduguard enable sw acc vlan 5int range f0/15-16spanning-tree portfast spanning-tree bpduguard enable sw acc vlan 6int range f0/17-18spanning-tree portfast spanning-tree bpduguard enable sw acc vlan 7exitint gi0/25（上联口）sw mode trunkint gi0/26sw mode trunkexitspanning-tree mst conf（创建多生成树实例）instance 1 vlan 3,5,7instance 2 vlan 2,4,6exitwrite核心1配置模板：conf tip routingint gi0/25（下联口trunk）sw mode trunkexitspanning-tree spanning-tree mode mstp（开启Mstp）vlan 2vlan 3vlan 4vlan 5vlan 6vlan 7exitint vlan 2ip add 10.0.2.253 255.255.255.0（虚拟路由器的物理地址）vrrp 2 ip 10.0.2.254（用户的虚拟网关，用户实际获取到的网关）exitint vlan 3ip add 10.0.3.253 255.255.255.0vrrp 3 ip 10.0.3.254vrrp 3 pr 110（Vrrp虚拟路由器的优先级，默认100,0255,255最高）exitint vlan 4ip add 10.0.4.253 255.255.255.0vrrp 4 ip 10.0.4.254exitint vlan 5ip add 10.0.5.253 255.255.255.0vrrp 5 ip 10.0.5.254vrrp 5 pr 110exitint vlan 6ip add 10.0.6.253 255.255.255.0vrrp 6 ip 10.0.6.254exitint vlan 7ip add 10.0.7.253 255.255.255.0vrrp 7 ip 10.0.7.254vrrp 7 pr 110exitspanning-tree mst conf （创建Mstp instance实例，修改实例优先级）instance 1 vlan 3,5,7instance 2 vlan 2,4,6exitspanning-tree mst 1 p 4096spanning-tree mst 2 p 8192service dhcp（开启并创建Dhcp地址池）ip dhcp pool vlan2network 10.0.2.0 255.255.255.0dns 8.8.8.8default-router 10.0.2.254exitip dhcp ex 10.0.2.100 10.0.2.254ip dhcp pool vlan3network 10.0.3.0 255.255.255.0lease 0 12 0dns 8.8.8.8default-router 10.0.3.254exitip dhcp ex 10.0.3.100 10.0.3.254ip dhcp pool vlan4network 10.0.4.0 255.255.255.0lease 0 12 0dns 8.8.8.8default-router 10.0.4.254exitip dhcp ex 10.0.4.100 10.0.4.254ip dhcp pool vlan5network 10.0.5.0 255.255.255.0lease 0 12 0dns 8.8.8.8default-router 10.0.5.254exitip dhcp ex 10.0.5.100 10.0.5.254ip dhcp pool vlan6network 10.0.6.0 255.255.255.0lease 0 12 0dns 8.8.8.8default-router 10.0.6.254exitip dhcp ex 10.0.6.100 10.0.6.254ip dhcp pool vlan7network 10.0.7.0 255.255.255.0lease 0 12 0dns 8.8.8.8default-router 10.0.7.254exitip dhcp ex 10.0.7.100 10.0.7.254int range f0/1-2（创建端口聚合）port-group 1int aggregateport 1（聚合端口1打trunk）sw mode trunkexitint f0/3spanning-tree bpdufilter enable （不向上一层发送BPDU 桥协议数据单元 报文）exit int f0/3no swip add 10.0.8.1 255.255.255.252no shutip route 0.0.0.0 0.0.0.0 10.0.8.2ip route 0.0.0.0 0.0.0.0 10.0.8.6 100（浮动路由）exitwrite核心2配置模板：conf tip routing（下联口trunk）int gi0/25sw mode trunkexitspanning-tree spanning-tree mode mstpvlan 2vlan 3vlan 4vlan 5vlan 6vlan 7exitint vlan 2ip add 10.0.2.252 255.255.255.0vrrp 2 ip 10.0.2.254vrrp 2 p 110exitint vlan 3ip add 10.0.3.252 255.255.255.0vrrp 3 ip 10.0.3.254exitint vlan 4ip add 10.0.4.252 255.255.255.0vrrp 4 ip 10.0.4.254vrrp 4 p 110exitint vlan 5ip add 10.0.5.252 255.255.255.0vrrp 5 ip 10.0.5.254exitint vlan 6ip add 10.0.6.252 255.255.255.0vrrp 6 ip 10.0.6.254vrrp 6 p 110exitint vlan 7ip add 10.0.7.252 255.255.255.0vrrp 7 ip 10.0.7.254exitspanning-tree mst conf instance 1 vlan 3,5,7instance 2 vlan 2,4,6exitspanning-tree mst 1 p 8192spanning-tree mst 2 p 4096service dhcpip dhcp pool vlan2network 10.0.2.0 255.255.255.0lease 0 12 0dns 8.8.8.8default-router 10.0.2.254exitip dhcp ex 10.0.2.1 10.0.2.99ip dhcp ex 10.0.2.252 10.0.2.254ip dhcp pool vlan3network 10.0.3.0 255.255.255.0lease 0 12 0dns 8.8.8.8default-router 10.0.3.254exitip dhcp ex 10.0.3.1 10.0.3.99ip dhcp ex 10.0.3.252 10.0.3.254ip dhcp pool vlan4network 10.0.4.0 255.255.255.0lease 0 12 0dns 8.8.8.8default-router 10.0.3.254exitip dhcp ex 10.0.4.1 10.0.4.99ip dhcp ex 10.0.4.252 10.0.4.254ip dhcp pool vlan5network 10.0.5.0 255.255.255.0lease 0 12 0dns 8.8.8.8default-router 10.0.5.254exitip dhcp ex 10.0.5.1 10.0.5.99ip dhcp ex 10.0.5.252 10.0.5.254ip dhcp pool vlan6network 10.0.6.0 255.255.255.0lease 0 12 0dns 8.8.8.8default-router 10.0.6.254exitip dhcp ex 10.0.6.1 10.0.6.99ip dhcp ex 10.0.6.252 10.0.6.254ip dhcp pool vlan7network 10.0.7.0 255.255.255.0lease 0 12 0dns 8.8.8.8default-router 10.0.7.254exitip dhcp ex 10.0.7.1 10.0.7.99ip dhcp ex 10.0.7.252 10.0.7.254int range f0/1-2port-group 1int aggregateport 1sw mode trunkexitint f0/3spanning-tree bpdufilter enable exit int f0/3no swip add 10.0.8.5 255.255.255.252no shutexitip route 0.0.0.0 0.0.0.0 10.0.8.6ip route 0.0.0.0 0.0.0.0 10.0.8.1 100exitwrite用一台三层做出口路由器：conf tip routingspanning-tree spanning-tree mode mstpip route 0.0.0.0 0.0.0.0 172.16.1.2int f0/1no swip add 10.0.8.2 255.255.255.252no shutip nat insideexitint f0/2no swip add 10.0.8.6 255.255.255.252no shutip nat insideexitint f0/3no swip add 172.16.1.1 255.255.255.252no shutip nat outsideexitip route 10.0.0.0 255.255.248.0 172.16.1.1ip nat pool dizhichi 20.0.0.1 20.0.0.254 netmask 255.255.255.0access-l