VRRP+MSTP典型组网配置
VRRP是一种容错协议，它保证当主机的下一跳路由器出现故障时，由另一台路由器来代替出现故障的路由器进行工作，从而保持网络通信的连续性和可靠性。
MSTP：多生成树协议，通过生成多个生成树，来解决以太网环路问题。
实验拓扑
一、VLAN配置
SW3配置
sy sw3un in envlan batch 10 20 30 40
interface g0/0/2port link-type accessport default vlan 10qinterface g0/0/3port link-type accessport default vlan 20
SW4配置
sy sw4un in envlan batch 10 20 30 40interface g0/0/2port link-type accessport default vlan 30qinterface g0/0/3port link-type accessport default vlan 40q
二、Trunk配置
SW3配置
interface g0/0/1port link-type trunkport trunk allow-pass vlan 10 20interface g0/0/4port link-type trunkport trunk allow-pass vlan 10 20
SW4配置
interface g0/0/1port link-type trunkport trunk allow-pass vlan 30 40qinterface g0/0/4port link-type trunkport trunk allow-pass vlan 30 40q
SW1配置
sy sw1un in envlan batch 10 20 30 40interface GigabitEthernet0/0/1port link-type trunkport trunk allow-pass vlan 10 20interface GigabitEthernet0/0/3port link-type trunkport trunk allow-pass vlan 30 40
SW2配置
sy sw2un in envlan batch 10 20 30 40interface GigabitEthernet0/0/1port link-type trunkport trunk allow-pass vlan 30 40interface GigabitEthernet0/0/3port link-type trunkport trunk allow-pass vlan 10 20
三、链路聚合
SW1和SW2之间我们用两根网线，做成链路聚合。
SW1配置
[hxsw1]int Eth-Trunk 1[hxsw1-Eth-Trunk1]mode lacp-static[hxsw1-Eth-Trunk1]trunkport g0/0/2Info: This operation may take a few seconds. Please wait for a moment...done.[hxsw1-Eth-Trunk1]trunkport g0/0/5Info: This operation may take a few seconds. Please wait for a moment...done.
SW2配置
[hxsw2]int Eth-Trunk 1[hxsw2-Eth-Trunk1]mode lacp-static [hxsw2-Eth-Trunk1]trunkport g0/0/2Info: This operation may take a few seconds. Please wait for a moment...done.[hxsw2-Eth-Trunk1]trunkport g0/0/5Info: This operation may take a few seconds. Please wait for a moment...done.[hxsw2-Eth-Trunk1]
验证查看：
[hxsw1]dis eth-trunk Eth-Trunk1's state information is:Local:LAG ID: 1 WorkingMode: STATIC Preempt Delay: DisabledHash arithmetic: According to SIP-XOR-DIP System Priority: 32768System ID: 4c1f-cc6a-6dffLeast Active-linknumber: 1 Max Active-linknumber: 8Operate status: upNumber Of Up Port In Trunk: 2 --------------------------------------------------------------------------------ActorPortNameStatus PortType PortPri PortNo PortKey PortState WeightGigabitEthernet0/0/2 Selected 1GE32768 330510111100 1GigabitEthernet0/0/5 Selected 1GE32768 630510111100 1Partner:--------------------------------------------------------------------------------ActorPortNameSysPri SystemID PortPri PortNo PortKey PortStateGigabitEthernet0/0/2 32768 4c1f-ccb4-3bac 32768 330510111100GigabitEthernet0/0/5 32768 4c1f-ccb4-3bac 32768 630510111100[hxsw1]
配置trunk，允许所有vlan通过
sw1
[sw1]int Eth-Trunk 1[sw1-Eth-Trunk1]port link-type trunk [sw1-Eth-Trunk1]port trunk allow-pass vlan 10 20 30 40
sw2
[sw2]int Eth-Trunk 1[sw2-Eth-Trunk1]port link-type trunk[sw2-Eth-Trunk1]port trunk allow-pass vlan 10 20 30 40
四、MSTP配置
公共配置
以下步骤必须在所有的有冗余的交换机上做，我们没有汇聚就算了，但是我们接入交换机有冗余所以要做。
stp region-configurationregion-name pokes01 #域名pokes01revision-level 1 #修订好统一为1instance 1 vlan 10 20 #将vlan10/20映射到实例1里面instance 2 vlan 30 40active region-configuration #激活才能生效q
纯净版便于复制
stp region-configurationregion-name pokes01revision-level 1instance 1 vlan 10 20instance 2 vlan 30 40active region-configurationq
SW1配置
stp instance 1 root primary #将SW1作为实例1的根桥stp instance 2 root secondary #将SW1作为实例2的备份根桥
SW2配置
stp instance 1 root secondarystp instance 2 root primary
分别在SW3、SW4上面验证
SW3配置
在下面的查看中，我们看不到实例2，那是因为我们在SW3的trunk没有允许VLAN30/40通过
[sw3]dis stp briefMSTID Port Role STP StateProtection0 GigabitEthernet0/0/1 DESI FORWARDINGNONE0 GigabitEthernet0/0/2 DESI DISCARDINGNONE0 GigabitEthernet0/0/3 DESI FORWARDINGNONE0 GigabitEthernet0/0/4 DESI FORWARDINGNONE1 GigabitEthernet0/0/1 ROOT FORWARDINGNONE1 GigabitEthernet0/0/2 DESI DISCARDINGNONE1 GigabitEthernet0/0/3 DESI FORWARDINGNONE1 GigabitEthernet0/0/4 ALTE DISCARDINGNONE2 GigabitEthernet0/0/1 DESI FORWARDINGNONE2 GigabitEthernet0/0/4 DESI FORWARDINGNONE
SW4配置
在下面的查看中，我们看不到实例1，那是因为我们在SW3的trunk没有允许VLAN10/20通过
[sw4]dis stp briefMSTID Port Role STP StateProtection0 GigabitEthernet0/0/1 ALTE DISCARDINGNONE0 GigabitEthernet0/0/2 DESI FORWARDINGNONE0 GigabitEthernet0/0/3 DESI FORWARDINGNONE0 GigabitEthernet0/0/4 ROOT FORWARDINGNONE1 GigabitEthernet0/0/1 DESI FORWARDINGNONE1 GigabitEthernet0/0/4 DESI FORWARDINGNONE2 GigabitEthernet0/0/1 ROOT FORWARDINGNONE2 GigabitEthernet0/0/2 DESI FORWARDINGNONE2 GigabitEthernet0/0/3 DESI FORWARDINGNONE2 GigabitEthernet0/0/4 ALTE DISCARDINGNONE
五、VRRP配置
sw1配置
interface Vlanif10ip address 192.168.10.253 255.255.255.0vrrp vrid 10 virtual-ip 192.168.10.1vrrp vrid 10 priority 120interface Vlanif20ip address 192.168.20.253 255.255.255.0vrrp vrid 20 virtual-ip 192.168.20.1vrrp vrid 20 priority 120interface Vlanif30ip address 192.168.30.253 255.255.255.0vrrp vrid 30 virtual-ip 192.168.30.1interface Vlanif40ip address 192.168.40.253 255.255.255.0vrrp vrid 40 virtual-ip 192.168.40.1
sw2配置
interface Vlanif10ip address 192.168.10.254 255.255.255.0vrrp vrid 10 virtual-ip 192.168.10.1interface Vlanif20ip address 192.168.20.254 255.255.255.0vrrp vrid 20 virtual-ip 192.168.20.1interface Vlanif30ip address 192.168.30.254 255.255.255.0vrrp vrid 30 virtual-ip 192.168.30.1vrrp vrid 30 priority 120interface Vlanif40ip address 192.168.40.254 255.255.255.0vrrp vrid 40 virtual-ip 192.168.40.1vrrp vrid 40 priority 120
检测验证
<sw1>dis vrrp briefVRID State InterfaceTypeVirtual IP----------------------------------------------------------------10 Master Vlanif10 Normal 192.168.10.1 20 Master Vlanif20 Normal 192.168.20.1 30 Backup Vlanif30 Normal 192.168.30.1 40 Backup Vlanif40 Normal 192.168.40.1 ----------------------------------------------------------------Total:4Master:2Backup:2Non-active:0
[sw2]dis vrrp brief VRID State InterfaceTypeVirtual IP----------------------------------------------------------------10 Backup Vlanif10 Normal 192.168.10.1 20 Backup Vlanif20 Normal 192.168.20.1 30 Master Vlanif30 Normal 192.168.30.1 40 Master Vlanif40 Normal 192.168.40.1 ----------------------------------------------------------------Total:4Master:2Backup:2Non-active:0
六、VRRP+MSTP的注意事项
拓扑图中所有的交换机都要创建vlan10/20/30/40sw1和sw2之间的聚合链路，两头都要配置。八、路由器配置
SW1
[sw1]vlan 800[sw1-vlan800]q[sw1]int vlanif800[sw1-Vlanif800]ip add 192.168.12.2 24[sw1-Vlanif800]q
SW2
[sw2]vlan 801[sw2-vlan801]q[sw2]int Vlanif 801[sw2-Vlanif801]ip add 192.168.23.2 24[sw2-Vlanif801]q
R1
[Huawei]sysname R1[R1]un in en[R1]in g0/0/0[R1-GigabitEthernet0/0/0]ip add 192.168.12.1 24[R1]in g0/0/1[R1-GigabitEthernet0/0/1]ip add 192.168.23.1 24[R1-GigabitEthernet0/0/1]q[R1]q
九、BGP跟踪的配置
作用：当设备假死的时候，我们使它能够自动切换。
[sw1]bfd#启用[sw1-bfd]q[sw1]bf[sw1]bfd szpr01 bind peer-ip 192.168.12.1 source-ip 192.168.12.2 auto [sw1-bfd-session-szpr01]com[sw1-bfd-session-szpr01]commit
szpr01是我起的名字peer-ip是对端地址source-ip是本地地址
[R1]bfd[R1-bfd]q[R1]bfd szpr01 bind peer-ip 192.168.12.2 source-ip 192.168.12.1 auto [R1-bfd-session-szpr02]commit
注意：在这里szpr01的名字，要和SW1上一致。
查看
[sw1]dis bfd session all--------------------------------------------------------------------------------Local RemotePeerIpAddrStateType InterfaceName --------------------------------------------------------------------------------8192 0192.168.12.1 DownS_AUTO_PEER - --------------------------------------------------------------------------------Total UP/DOWN Session Number : 0/1
