Mstp+Vrrp 實驗.doc

Mstp+Vrrp雙核心網絡架構：在這個雙核心的網絡架構中所應用到的技術：1、 Mstp，在交換機層開啟Mstp，創(chuàng)建實例instance 一個實例就是一棵樹，使用Mstp來實現數據分流和備份鏈路；2、 Mstp+Vrrp Vrrp 是虛擬路由冗余協議，Vrrp下的IP是虛擬網關， 而VLAN 下的地址是虛擬路由器的物理地址，用戶所獲取到的網關使Vrrp下的虛擬網關地址；3、 Dhcp 動態(tài)分配地址，設置在兩臺核心中，兩個地址池要分別排除對面的地址；4、 浮動路由，在雙核心出接口寫默認，一條主，一條加管理距離；5、 端口聚合，在雙核心之間用若干條線互連，把這些端口加入到聚合端口，打trunk，來作為Vrrp的心跳線；6、 ACL 訪問控制列表 、NAT 網絡地址轉換，設置在出口路由器中，允許哪些用戶上網，創(chuàng)建NAT地址轉換池，允許上網的網段調入overload即可。接下來是我在做這個實驗的過程：首先是寫好配置模板，寫模板的好處是，理清思路，配置有條理，出了問題先看看模板有沒有問題，缺少什么等接入層交換機的配置模板：conf tspanning-tree spanning-tree mode mstp（開啟多生成樹Mstp）vlan 2vlan 3vlan 4vlan 5vlan 6vlan 7exitint range f0/1-5spanning-tree portfast （速端口，用戶斷網和恢復網路切換速度快）spanning-tree bpduguard enable （防自環(huán)）sw acc vlan 2int range f0/6-10spanning-tree portfast spanning-tree bpduguard enable sw acc vlan 3int range f0/11-12spanning-tree portfast spanning-tree bpduguard enable sw acc vlan 4int range f0/13-14spanning-tree portfast spanning-tree bpduguard enable sw acc vlan 5int range f0/15-16spanning-tree portfast spanning-tree bpduguard enable sw acc vlan 6int range f0/17-18spanning-tree portfast spanning-tree bpduguard enable sw acc vlan 7exitint gi0/25（上聯口）sw mode trunkint gi0/26sw mode trunkexitspanning-tree mst conf（創(chuàng)建多生成樹實例）instance 1 vlan 3,5,7instance 2 vlan 2,4,6exitwrite核心1配置模板：conf tip routingint gi0/25（下聯口trunk）sw mode trunkexitspanning-tree spanning-tree mode mstp（開啟Mstp）vlan 2vlan 3vlan 4vlan 5vlan 6vlan 7exitint vlan 2ip add 10.0.2.253 255.255.255.0（虛擬路由器的物理地址）vrrp 2 ip 10.0.2.254（用戶的虛擬網關，用戶實際獲取到的網關）exitint vlan 3ip add 10.0.3.253 255.255.255.0vrrp 3 ip 10.0.3.254vrrp 3 pr 110（Vrrp虛擬路由器的優(yōu)先級，默認100,0255,255最高）exitint vlan 4ip add 10.0.4.253 255.255.255.0vrrp 4 ip 10.0.4.254exitint vlan 5ip add 10.0.5.253 255.255.255.0vrrp 5 ip 10.0.5.254vrrp 5 pr 110exitint vlan 6ip add 10.0.6.253 255.255.255.0vrrp 6 ip 10.0.6.254exitint vlan 7ip add 10.0.7.253 255.255.255.0vrrp 7 ip 10.0.7.254vrrp 7 pr 110exitspanning-tree mst conf （創(chuàng)建Mstp instance實例，修改實例優(yōu)先級）instance 1 vlan 3,5,7instance 2 vlan 2,4,6exitspanning-tree mst 1 p 4096spanning-tree mst 2 p 8192service dhcp（開啟并創(chuàng)建Dhcp地址池）ip dhcp pool vlan2network 10.0.2.0 255.255.255.0dns 8.8.8.8default-router 10.0.2.254exitip dhcp ex 10.0.2.100 10.0.2.254ip dhcp pool vlan3network 10.0.3.0 255.255.255.0lease 0 12 0dns 8.8.8.8default-router 10.0.3.254exitip dhcp ex 10.0.3.100 10.0.3.254ip dhcp pool vlan4network 10.0.4.0 255.255.255.0lease 0 12 0dns 8.8.8.8default-router 10.0.4.254exitip dhcp ex 10.0.4.100 10.0.4.254ip dhcp pool vlan5network 10.0.5.0 255.255.255.0lease 0 12 0dns 8.8.8.8default-router 10.0.5.254exitip dhcp ex 10.0.5.100 10.0.5.254ip dhcp pool vlan6network 10.0.6.0 255.255.255.0lease 0 12 0dns 8.8.8.8default-router 10.0.6.254exitip dhcp ex 10.0.6.100 10.0.6.254ip dhcp pool vlan7network 10.0.7.0 255.255.255.0lease 0 12 0dns 8.8.8.8default-router 10.0.7.254exitip dhcp ex 10.0.7.100 10.0.7.254int range f0/1-2（創(chuàng)建端口聚合）port-group 1int aggregateport 1（聚合端口1打trunk）sw mode trunkexitint f0/3spanning-tree bpdufilter enable （不向上一層發(fā)送BPDU 橋協議數據單元 報文）exit int f0/3no swip add 10.0.8.1 255.255.255.252no shutip route 0.0.0.0 0.0.0.0 10.0.8.2ip route 0.0.0.0 0.0.0.0 10.0.8.6 100（浮動路由）exitwrite核心2配置模板：conf tip routing（下聯口trunk）int gi0/25sw mode trunkexitspanning-tree spanning-tree mode mstpvlan 2vlan 3vlan 4vlan 5vlan 6vlan 7exitint vlan 2ip add 10.0.2.252 255.255.255.0vrrp 2 ip 10.0.2.254vrrp 2 p 110exitint vlan 3ip add 10.0.3.252 255.255.255.0vrrp 3 ip 10.0.3.254exitint vlan 4ip add 10.0.4.252 255.255.255.0vrrp 4 ip 10.0.4.254vrrp 4 p 110exitint vlan 5ip add 10.0.5.252 255.255.255.0vrrp 5 ip 10.0.5.254exitint vlan 6ip add 10.0.6.252 255.255.255.0vrrp 6 ip 10.0.6.254vrrp 6 p 110exitint vlan 7ip add 10.0.7.252 255.255.255.0vrrp 7 ip 10.0.7.254exitspanning-tree mst conf instance 1 vlan 3,5,7instance 2 vlan 2,4,6exitspanning-tree mst 1 p 8192spanning-tree mst 2 p 4096service dhcpip dhcp pool vlan2network 10.0.2.0 255.255.255.0lease 0 12 0dns 8.8.8.8default-router 10.0.2.254exitip dhcp ex 10.0.2.1 10.0.2.99ip dhcp ex 10.0.2.252 10.0.2.254ip dhcp pool vlan3network 10.0.3.0 255.255.255.0lease 0 12 0dns 8.8.8.8default-router 10.0.3.254exitip dhcp ex 10.0.3.1 10.0.3.99ip dhcp ex 10.0.3.252 10.0.3.254ip dhcp pool vlan4network 10.0.4.0 255.255.255.0lease 0 12 0dns 8.8.8.8default-router 10.0.3.254exitip dhcp ex 10.0.4.1 10.0.4.99ip dhcp ex 10.0.4.252 10.0.4.254ip dhcp pool vlan5network 10.0.5.0 255.255.255.0lease 0 12 0dns 8.8.8.8default-router 10.0.5.254exitip dhcp ex 10.0.5.1 10.0.5.99ip dhcp ex 10.0.5.252 10.0.5.254ip dhcp pool vlan6network 10.0.6.0 255.255.255.0lease 0 12 0dns 8.8.8.8default-router 10.0.6.254exitip dhcp ex 10.0.6.1 10.0.6.99ip dhcp ex 10.0.6.252 10.0.6.254ip dhcp pool vlan7network 10.0.7.0 255.255.255.0lease 0 12 0dns 8.8.8.8default-router 10.0.7.254exitip dhcp ex 10.0.7.1 10.0.7.99ip dhcp ex 10.0.7.252 10.0.7.254int range f0/1-2port-group 1int aggregateport 1sw mode trunkexitint f0/3spanning-tree bpdufilter enable exit int f0/3no swip add 10.0.8.5 255.255.255.252no shutexitip route 0.0.0.0 0.0.0.0 10.0.8.6ip route 0.0.0.0 0.0.0.0 10.0.8.1 100exitwrite用一臺三層做出口路由器：conf tip routingspanning-tree spanning-tree mode mstpip route 0.0.0.0 0.0.0.0 172.16.1.2int f0/1no swip add 10.0.8.2 255.255.255.252no shutip nat insideexitint f0/2no swip add 10.0.8.6 255.255.255.252no shutip nat insideexitint f0/3no swip add 172.16.1.1 255.255.255.252no shutip nat outsideexitip route 10.0.0.0 255.255.248.0 172.16.1.1ip nat pool dizhichi 20.0.0.1 20.0.0.254 netmask 255.255.255.0access-l