MSTP+VRRP的典型組網(wǎng)
1 實(shí)驗(yàn)拓?fù)浼懊枋?/p>
1. 這是一個(gè)由三臺(tái)交換機(jī)組成的倒三角型二層交換網(wǎng)絡(luò)；
2. 網(wǎng)絡(luò)中有4個(gè)VLAN：10、20、30、40；
3. 接口編號(hào)如圖所示；
4. VLAN10對(duì)應(yīng)的網(wǎng)段為192.168.10.0/24；VLAN20對(duì)應(yīng)的網(wǎng)段為192.168.20.0/24；
VLAN30對(duì)應(yīng)的網(wǎng)段為192.168.30.0/24；VLAN40對(duì)應(yīng)的網(wǎng)段為192.168.40.0/24；
各VLAN的網(wǎng)關(guān)均為.254的地址，該地址為VRRP組的虛擬地址；
5. SW1的vlanif10和vlanif20的IP地址分別為：192.168.10.253、192.168.20.253
SW1的vlanif30和vlanif40的IP地址分別為：192.168.30.252、192.168.40.252
6. SW1的vlanif10和vlanif20的IP地址分別為：192.168.10.252、192.168.20.252
SW1的vlanif30和vlanif40的IP地址分別為：192.168.30.253、192.168.40.253
2 實(shí)驗(yàn)需求
1. 由于網(wǎng)絡(luò)中VLAN較多，并且存在二層環(huán)路因此使用MSTP實(shí)現(xiàn)環(huán)路避免，同時(shí)實(shí)現(xiàn)負(fù)載分擔(dān)。
2. 將vlan10、20映射到MSTP實(shí)例1；將vlan30、40映射到MSTP實(shí)例2；
3. MSTP實(shí)例1Block掉的端口為SW3的GE0/0/23；實(shí)例2Block掉的端口為SW2的GE0/0/22；
4. 為了提高網(wǎng)絡(luò)的網(wǎng)關(guān)層冗余能力，在SW1及SW2的vlanif10、vlanif20、vlanif30、vlanif40上部署VRRP，一共4組。而VRRP的Master及Backup需與MSTP的主、備根重疊。也就是說(shuō)SW1的vlanif10及vlanif20為各自VRRP組的Master，此外vlanif30及vlanif40為各自VRRP組的Backup；SW2正好相反。
3 實(shí)驗(yàn)步驟及配置
SW3的配置如下：
#在SW3上創(chuàng)建VLAN，并將接口加入相應(yīng)的VLAN
[SW3] vlan batch 10 20 30 40
[SW3] interface GigabitEthernet0/0/22
[SW3-GigabitEthernet0/0/22] port link-type trunk
[SW3-GigabitEthernet0/0/22] port trunk allow-pass vlan 10 20 30 40
[SW3] interface GigabitEthernet0/0/23
[SW3-GigabitEthernet0/0/23] port link-type trunk
[SW3-GigabitEthernet0/0/23] port trunk allow-pass vlan 10 20 30 40
#配置MSTP，將vlan10 20映射到實(shí)例1，將vlan30 40映射到實(shí)例2
#在SW3上，MSTP實(shí)例1及實(shí)例2的優(yōu)先級(jí)保持默認(rèn)32768
[SW3] stp mode mstp
[SW3] stp region-configuration
[SW3-mst-region] region-name huawei
[SW3-mst-region] instance 1 vlan 10 20
[SW3-mst-region] instance 2 vlan 30 40
[SW3-mst-region] active region-configuration
[SW3-mst-region] quit
[SW3] stp instance 1 priority 32768
[SW3] stp instance 2 priority 32768
[SW3] stp enable
SW1的配置如下：
[SW1] vlan batch 10 20 30 40
[SW1] interface GigabitEthernet0/0/24
[SW1-GigabitEthernet0/0/24] port link-type trunk
[SW1-GigabitEthernet0/0/24] port trunk allow-pass vlan 10 20 30 40
[SW1] interface GigabitEthernet0/0/22
[SW1-GigabitEthernet0/0/22] port link-type trunk
[SW1-GigabitEthernet0/0/22] port trunk allow-pass vlan 10 20 30 40
#配置MSTP，將vlan10 20映射到實(shí)例1，將vlan30 40映射到實(shí)例2
#將SW1的MSTP設(shè)置為實(shí)例1的主根，實(shí)例2的次根
[SW1] stp mode mstp
[SW1] stp region-configuration
[SW1-mst-region] region-name huawei
[SW1-mst-region] instance 1 vlan 10 20
[SW1-mst-region] instance 2 vlan 30 40
[SW1-mst-region] active region-configuration
[SW1-mst-region] quit
[SW1] stp instance 1 root primary
[SW1] stp instance 2 root secondary
[SW1] stp enable
#配置vlanif10、vlanif20、vlanif30、vlanif40
#配置vlanif10、vlanif20、vlanif30、vlanif40，分別加入VRRP組1,2,3,4
#其中SW1為VRRP組1及2的Master，為組3及4的Backup
[SW1] interface Vlanif10
[SW1-vlanif10] ip address 192.168.10.253 255.255.255.0
[SW1-vlanif10] vrrp vrid 1 virtual-ip 192.168.10.254
[SW1-vlanif10] vrrp vrid 1 priority 120
[SW1-vlanif10] vrrp vrid 1 preempt-mode timer delay 20
[SW1] interface Vlanif20
[SW1-vlanif20] ip address 192.168.20.253 255.255.255.0
[SW1-vlanif20] vrrp vrid 2 virtual-ip 192.168.20.254
[SW1-vlanif20] vrrp vrid 2 priority 120
[SW1-vlanif20] vrrp vrid 2 preempt-mode timer delay 20
[SW1] interface Vlanif30
[SW1-vlanif30] ip address 192.168.30.252 255.255.255.0
[SW1-vlanif30] vrrp vrid 3 virtual-ip 192.168.30.254
[SW1] interface Vlanif40
[SW1-vlanif40] ip address 192.168.40.252 255.255.255.0
[SW1-vlanif40] vrrp vrid 4 virtual-ip 192.168.40.254
SW2的配置如下：
[SW2] vlan batch 10 20 30 40
[SW2] interface GigabitEthernet0/0/24
[SW2-GigabitEthernet0/0/24] port link-type trunk
[SW2-GigabitEthernet0/0/24] port trunk allow-pass vlan 10 20 30 40
[SW2] interface GigabitEthernet0/0/23
[SW2-GigabitEthernet0/0/23] port link-type trunk
[SW2-GigabitEthernet0/0/23] port trunk allow-pass vlan 10 20 30 40
#配置MSTP，將vlan10 20映射到實(shí)例1，將vlan30 40映射到實(shí)例2
#將SW1的MSTP設(shè)置為實(shí)例2的主根，實(shí)例1的次根
[SW2] stp mode mstp
[SW2] stp region-configuration
[SW2-mst-region] region-name huawei
[SW2-mst-region] instance 1 vlan 10 20
[SW2-mst-region] instance 2 vlan 30 40
[SW2-mst-region] active region-configuration
[SW2-mst-region] quit
[SW2] stp instance 1 root secondary
[SW2] stp instance 2 root primary
[SW2] stp enable
#配置vlanif10、vlanif20、vlanif30、vlanif40
#配置vlanif10、vlanif20、vlanif30、vlanif40，分別加入VRRP組1,2,3,4
#其中SW1為VRRP組3及4的Master，為組1及2的Backup
[SW2] interface Vlanif10
[SW2-vlanif10] ip address 192.168.10.252 255.255.255.0
[SW2-vlanif10] vrrp vrid 1 virtual-ip 192.168.10.254
[SW2] interface Vlanif20
[SW2-vlanif20] ip address 192.168.20.252 255.255.255.0
[SW2-vlanif20] vrrp vrid 2 virtual-ip 192.168.20.254
[SW2] interface Vlanif30
[SW2-vlanif30] ip address 192.168.30.252 255.255.255.0
[SW2-vlanif30] vrrp vrid 3 virtual-ip 192.168.30.254
[SW2-vlanif30] vrrp vrid 3 priority 120
[SW2] interface Vlanif40
[SW2-vlanif40] ip address 192.168.40.252 255.255.255.0
[SW2-vlanif40] vrrp vrid 4 virtual-ip 192.168.40.254
[SW2-vlanif40] vrrp vrid 4 priority 120
完成配置后，各VLAN的用戶(hù)都能夠ping通自己的網(wǎng)關(guān)；
我們?cè)赟W3上看看：
[SW3] display stp brief
MSTID Port Role STP State Protection
0 GigabitEthernet0/0/1 DESI FORWARDING NONE
0 GigabitEthernet0/0/2 DESI FORWARDING NONE
0 GigabitEthernet0/0/22 DESI FORWARDING NONE
0 GigabitEthernet0/0/23 DESI FORWARDING NONE
1 GigabitEthernet0/0/1 DESI FORWARDING NONE
1 GigabitEthernet0/0/22 ROOT FORWARDING NONE
1 GigabitEthernet0/0/23 ALTE DISCARDING NONE
2 GigabitEthernet0/0/2 DESI FORWARDING NONE
2 GigabitEthernet0/0/22 ALTE DISCARDING NONE
2 GigabitEthernet0/0/23 ROOT FORWARDING NONE
我們看到，MSTP實(shí)例1中被Block掉的端口是GE0/0/23口；MSTP實(shí)例2中被Block掉的端口是GE0/0/22，符合我們的需求。再去SW1上看看VRRP組的狀態(tài)：
[SW1] display vrrp brief
VRID State Interface Type Virtual IP
----------------------------------------------------------------
1 Master Vlanif10 Normal 192.168.10.254
2 Master Vlanif20 Normal 192.168.20.254
3 Backup Vlanif30 Normal 192.168.30.254
4 Backup Vlanif40 Normal 192.168.40.254
----------------------------------------------------------------
Total:4 Master:2 Backup:2 Non-active:0
從上述輸出可以看出，SW1為VRRP組1及組2的Master，同時(shí)也為VRRP組3和組4的Backup。
