ip生产区

实验拓扑及需求

实验配置

需求一:交换机之间trunk使用最少vlan透传原则

D-1\]vlan batch 21 22 23 100 \[D-1-GigabitEthernet0/0/3\]port link-type trunk \[D-1-GigabitEthernet0/0/3\]port trunk allow-pass vlan 21 \[D-2-GigabitEthernet0/0/4\]port link-type trunk \[D-2-GigabitEthernet0/0/4\]port trunk allow-pass vlan 22 \[D-2-GigabitEthernet0/0/5\]port link-type trunk \[D-2-GigabitEthernet0/0/5\]port trunk allow-pass vlan 23 100 \[A-1-GigabitEthernet0/0/1\]port link-type trunk \[A-1-GigabitEthernet0/0/1\]port trunk allow-pass vlan 21 \[A-1-GigabitEthernet0/0/2\]port link-type access \[A-1-GigabitEthernet0/0/2\]port default vlan 21 \[A-2-GigabitEthernet0/0/1\]port link-type access \[A-2-GigabitEthernet0/0/1\]port default vlan 22 \[A-2-GigabitEthernet0/0/2\]port link-type trunk \[A-2-GigabitEthernet0/0/2\]port trunk allow-pass vlan 22 \[A-3-GigabitEthernet0/0/1\]port link-type trunk \[A-3-GigabitEthernet0/0/1\]port trunk allow-pass vlan 23 100 需求二:D-1,D-2之间做链路聚合 \[D-1\]int Eth-Trunk 0 \[D-1-Eth-Trunk0\]trunkport g0/0/1 \[D-1-Eth-Trunk0\]trunkport g0/0/2 \[D-2\]interface Eth-Trunk 0 \[D-2-Eth-Trunk0\]trunkport g0/0/1 \[D-2-Eth-Trunk0\]trunkport g0/0/2 \[D-1-Eth-Trunk0\]port link-type trunk \[D-1-Eth-Trunk0\]port trunk allow-pass vlan 21 22 23 100 \[D-2-Eth-Trunk0\]port link-type trunk \[D-2-Eth-Trunk0\]port trunk allow-pass vlan 21 22 23 100 需求三:MSTP name 配置为SC 需求四:MSTP 实例映射为: instance 1 vlan 21 instance 2 vlan 22 23 100 需求五:D-1为实例1,0的根,实例二的备份根 需求六:D-2为实例二的根,实例1,0的备份根 \[D-1\]stp enable \[D-1\]stp region-configuration \[D-1-mst-region\]region-name SC \[D-1-mst-region\]instance 1 vlan 21 \[D-1-mst-region\]instance 2 vlan 22 23 100 \[D-1-mst-region\]active region-configuration \[D-1\]stp instance 1 root primary \[D-1\]stp instance 0 root primary \[D-1\]stp instance 2 root secondary \[D-2\]stp enable \[D-2-mst-region\]region-name SC \[D-2-mst-region\]instance 1 vlan 21 \[D-2-mst-region\]instance 2 vlan 22 23 100 \[D-2-mst-region\]active region-configuration \[D-2\]stp instance 0 root secondary \[D-2\]stp instance 1 root secondary \[D-2\]stp instance 2 root primary 需求七:所有access接口配置为边缘接口,并配置BPDU保护,同时需要过滤用户收到stp相关报文 \[A-1-GigabitEthernet0/0/2\]stp edged-port enable \[A-1-GigabitEthernet0/0/2\]stp bpdu-filter enable \[A-1\]stp bpdu-protection \[A-2-GigabitEthernet0/0/1\]stp edged-port enable \[A-2-GigabitEthernet0/0/2\]stp bpdu-filter enable \[A-2\]stp bpdu-protection 需求八:D-1为vlanif 21 的master,D-2为backup 需求九:D-2为vlanif 22 的master,D-1为backup \[D-1\]int vlanif 21 \[D-1-Vlanif21\]ip address 192.168.1.1 255.255.255.0 \[D-1-Vlanif21\]vrrp vrid 1 virtual-ip 192.168.1.2 \[D-1-Vlanif21\]vrrp vrid 1 priority 101 \[D-2\]int vlanif 22 \[D-2-Vlanif22\]ip address 192.168.1.3 255.255.255.0 \[D-2-Vlanif22\]vrrp vrid 1 virtual-ip 192.168.1.2 \[D-2-Vlanif22\]vrrp vrid 1 priority 101 需求十:D-1与D-2的vrrp需监控上行链路,双上行都down时切换网关,抢占延时为20s \[D-1-Vlanif21\]vrrp vrid 1 track interface g0/0/3 reduced 2 \[D-2-Vlanif22\]vrrp vrid 1 track interface g0/0/4 reduced 2 \[D-1-Vlanif21\]vrrp vrid 1 preempt-mode timer delay 20 \[D-2-Vlanif22\]vrrp vrid 1 preempt-mode timer delay 20 ![](https://i-blog.csdnimg.cn/direct/9281b60388d245248b041b2cc8c1e2d4.png) ![](https://i-blog.csdnimg.cn/direct/67c45fae2ca2467ab6c015c7953f46cc.png) ![](https://i-blog.csdnimg.cn/direct/b8200aad1856426b952c86fadfb2380d.png) ![](https://i-blog.csdnimg.cn/direct/c42b252f7c1d4294b4e868f8cec15b59.png)

相关推荐
Sinclair3 天前
简单几步,安卓手机秒变服务器,安装 CMS 程序
android·服务器
Rockbean4 天前
用40行代码搭建自己的无服务器OCR
服务器·python·deepseek
茶杯梦轩4 天前
CompletableFuture 在 项目实战 中 创建异步任务 的核心优势及使用场景
服务器·后端·面试
海天鹰4 天前
【免费】PHP主机=域名+解析+主机
服务器
DianSan_ERP4 天前
电商API接口全链路监控:构建坚不可摧的线上运维防线
大数据·运维·网络·人工智能·git·servlet
呉師傅4 天前
火狐浏览器报错配置文件缺失如何解决#操作技巧#
运维·网络·windows·电脑
不是二师兄的八戒4 天前
Linux服务器挂载OSS存储的完整实践指南
linux·运维·服务器
芝士雪豹只抽瑞克五4 天前
Nginx 高性能Web服务器笔记
服务器·nginx
gihigo19984 天前
基于TCP协议实现视频采集与通信
网络协议·tcp/ip·音视频
失重外太空啦4 天前
Tomcat
java·服务器·tomcat