一、实验拓扑及描述

1、这是一个由三台交换机组成的倒三角型二层交换网络;网络中有4个VLAN:101、200;接口编号如拓扑图所示;LSW1为接入层交换机,SW1、SW2为汇聚层交换机;
2、VLAN101对应的网段为172.16.101.0/24; VLAN200对应的网段为192.168.200.0/24;各VLAN的网关均为.254的地址,该地址为VRRP组的虚拟地址;
3、SW1的vlanif101的接口实际IP地址分别为:172.16.101.252;SW1的vlanif200接口实际IP地址分别为:192.168.200.253;
4、SW2的vlanif100和vlanif101的接口实际IP地址分别为: 172.16.101.253;SW2的vlanif200的接口实际IP地址分别为: 192.168.200.252。
二、实验需求
1、由于网络中VLAN较多,并且存在二层环路因此使用MSTP实现环路避免,同时实现负载分担。要求vlan101的流量主走PC1-LSW1-SW1这一侧链路,vlan200的流量主走PC2-LSW1-SW2这一侧链路;
2、为了提高网络的网关层冗余能力,在SW1及SW2的vlanif101、 vlanif200、上部署VRRP,一共2组。
三、实现步骤及配置
接入LSW1的配置如下:
sysname LSW1
# 在LSW1上创建VLAN,并将接口加入相应的VLAN
vlan batch 101 200
# 配置HXSW的接口信息
interface Ethernet0/0/1
description to PC1
port link-type access
port default vlan 200
interface Ethernet0/0/2
description to PC2
port link-type access
port default vlan 101
interface GigabitEthernet0/0/1
description to SW1G0/0/0
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 101 200
interface GigabitEthernet0/0/2
description to SW2G0/0/0
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 101 200
# 配置MSTP,将vlan101映射到实例1,将vlan200映射到实例2
# 在LSW1上,MSTP实例1及实例2的优先级保持默认32768
stp enable
stp mode mstp
stp region-configuration
region-name huawei
instance 1 vlan 101
instance 2 vlan 200
active region-configuration
SW1 的配置如下:
sysname SW1
vlan batch 101 200 255
dhcp enable
interface GigabitEthernet0/0/1
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 101 200
interface GigabitEthernet0/0/21
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 101 200
interface GigabitEthernet0/0/24
description to ISPG0/0/1
port link-type access
port default vlan 255
# 配置MSTP,将vlan101映射到实例1,将vlan200映射到实例2
# 将SW1的MSTP设置为实例1的主根,实例2的次根
stp enable
stp mode mstp
stp region-configuration
region-name huawei
instance 1 vlan 101
instance 2 vlan 200
active region-configuration
stp instance 1 root primary
stp instance 2 root secondary
# 配置vlanif101、vlanif200,分别加入VRRP组101,200,
# 其中SW1为VRRP组101的Master,为组200的Backup
interface Vlanif101
ip address 172.16.101.252 255.255.255.0
vrrp vrid 101 virtual-ip 172.16.101.254
vrrp vrid 101 priority 120
vrrp vrid 101 track interface GigabitEthernet0/0/24 reduced 35
interface Vlanif200
ip address 192.168.200.253 255.255.255.0
vrrp vrid 200 virtual-ip 192.168.200.254
interface Vlanif255
ip address 10.10.255.1 255.255.255.252
# 配置DHCP
ip pool vlan101
gateway-list 172.16.101.254
network 172.16.101.0 mask 255.255.255.0
lease day 3 hour 12 minute 0
dns-list 8.8.8.8 114.114.114.114
quit
ip pool vlan200
gateway-list 192.168.200.254
network 192.168.200.0 mask 255.255.255.0
excluded-ip-address 192.168.200.230 192.168.200.253
lease day 3 hour 12 minute 0
dns-list 8.8.8.8 114.114.114.114
interface Vlanif101
dhcp select global
interface Vlanif200
dhcp select global
# 配置默认路由
ip route-static 0.0.0.0 0.0.0.0 10.10.255.2
SW2 的配置如下:
sysname SW2
vlan batch 101 200 254
interface GigabitEthernet0/0/1
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 101 200
interface GigabitEthernet0/0/21
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 101 200
interface GigabitEthernet0/0/24
description to ISPG0/0/1
port link-type access
port default vlan 254
# 配置MSTP,将vlan101映射到实例1,将vlan200映射到实例2
# 将SW1的MSTP设置为实例1的主根,实例2的次根
stp enable
stp mode mstp
stp region-configuration
region-name huawei
instance 1 vlan 101
instance 2 vlan 200
active region-configuration
stp instance 1 root secondary
stp instance 2 root primary
# 配置vlanif101、vlanif200,分别加入VRRP组101,200
# 其中SW1为VRRP组101的Backup,为组200的Master
interface Vlanif101
ip address 172.16.101.253 255.255.255.0
vrrp vrid 101 virtual-ip 172.16.101.254
vrrp vrid 101 track interface GigabitEthernet0/0/24 reduced 35
interface Vlanif200
ip address 192.168.200.252 255.255.255.0
vrrp vrid 200 virtual-ip 192.168.200.254
vrrp vrid 200 priority 120
vrrp vrid 200 track interface GigabitEthernet0/0/24 reduced 35
interface Vlanif254
ip address 10.10.254.1 255.255.255.252
# 配置DHCP
ip pool vlan101
gateway-list 172.16.101.254
network 172.16.101.0 mask 255.255.255.0
lease day 3 hour 12 minute 0
dns-list 8.8.8.8 114.114.114.114
quit
ip pool vlan200
gateway-list 192.168.200.254
network 192.168.200.0 mask 255.255.255.0
excluded-ip-address 192.168.200.230 192.168.200.253
lease day 3 hour 12 minute 0
dns-list 8.8.8.8 114.114.114.114
interface Vlanif101
dhcp select global
interface Vlanif200
dhcp select global
# 配置默认路由
ip route-static 0.0.0.0 0.0.0.0 10.10.254.2
ISP 路由器:
sysname ISP
interface GigabitEthernet0/0/1
ip address 10.10.255.2 255.255.255.252
interface GigabitEthernet0/0/2
ip address 10.10.254.2 255.255.255.252
interface LoopBack0
ip address 6.6.6.6 255.255.255.255
ip route-static 0.0.0.0 0.0.0.0 10.10.255.1
ip route-static 0.0.0.0 0.0.0.0 10.10.254.1
完成配置后,各VLAN的用户都能够ping通6.6.6.6:

在LSW1上看看:


我们看到,MSTP实例1中被Block掉的端口是GE0/0/2口;MSTP实例2中被Block掉的端口是GE0/0/1,符合需求。再去SW1上看看VRRP组的状态:


查看dhc已经租用的IP
<SW1>dis ip pool name vlan101 used

dis ip pool name vlan101 [all | conflict | expired | used]
conflict:可以查看地址池中发生冲突的IPv4地址信息。
Expired:可以查看地址池中过期的IPv4地址信息。
Used:可以查看地址池中已使用的IPv4地址信息。