華三交換機(jī)路由器的簡(jiǎn)單配置筆記

1、h3c交換機(jī)的vlan配置創(chuàng)建vlan10并把端口加入vlansys-viewvlan10portGigabitEthernet+端口號(hào)創(chuàng)建多個(gè)vlan[H3C]vlan10to50查看vlan[H3C]displayvlanbrief[H3C]displayvlan+vlan號(hào)將interfaceGigabitEthernet1/0/1加入vlan10中[H3C]interfaceGigabitEthernet1/0/1[H3C-GigabitEthernet1/0/1]portaccessvlan10創(chuàng)建vlan接口Interfacevlan-interface+vlanID顯示vlan接口信息displayinterfacevlan-interface+接口刪除vlan[H3C]undovlan11to50加端口進(jìn)vlan[H3C-vlan10]portGigabitEthernet1/0/1

配置端口的模式，進(jìn)入端口[H3C-GigabitEthernet1/0/1]portlink-type+模式(access/hybrid/trunk)使用mac-addressstatic命令，來完成MAC地址與端口之間的綁定。例如：[SwitchA]mac-addressstatic00e0-fc22-f8d3interfaceEthernet0/1vlan1[SwitchA]mac-addressmax-mac-count02、通過ip來配置vlan間路由通信PC3吃4VLAN3PC3吃4VLAN3nr-1(1)創(chuàng)建VLAN3和VLAN4,并把GigabitEthernet1/0/1、GigabitEthernet1/0/2加入到VLAN3中，把GigabitEthernet1/0/3、GigabitEthernet1/0/4加入到VLAN4中。<H3C>system-viewSystemView:returntoUserViewwithCtrl+Z.[H3C]vlan3[H3C-vlan3]portGigabitEthernet1/0/1GigabitEthernet1/0/2[H3C-vlan3]quit[H3C]vlan4[H3C-vlan4]portGigabitEthernet1/0/3GigabitEthernet1/0/4

[H3C-vlan4]quit(2)配置VLAN3的VLAN接口IP地址為，子網(wǎng)掩碼為；VLAN4的VLAN接口IP地址1.2.1.2.3.4.5.6.[H3C]interfaceVlan-interface3[H3C-Vlan-interface3]ipaddress[H3C-Vlan-interface3]quit[H3C]interfaceVlan-interface4[H3C-Vlan-interface3]ipaddress3、通過以太網(wǎng)子接口實(shí)現(xiàn)VLAN間單臂路由配置liilcmefEJ3liilcmefEJ3A」￡嗎itchA1皿軌VIAN10丄」￡嗎itchA1皿軌VIAN10丄4■朋VLAN20GE2rt).2O4AO.IZ8VI.AK2(12222/KV!.AN20Il.lIWVl\\:口3.J.J.3/KVIAN⑴Vi.AKICI(jti1/flZfl2AO.1/8VLANM在路由上創(chuàng)建子接口并圭寸裝vlan，有多少vlan就建幾個(gè)接口,必須要開啟對(duì)應(yīng)的端口undoshutdown，每個(gè)子接口配置基本一致。<Router>system-view

[Router]interfacegigabitethernet1/!--創(chuàng)建以太網(wǎng)子接口[Router-GigabitEthernet1/]ipaddress!--設(shè)置以太網(wǎng)子接口IP地址[Router-GigabitEthernet1/]vlan-typedot1qvid10!--設(shè)置子接口上的封裝類型為dotlq,并隸屬于VLAN10,以太網(wǎng)子接口!--只有在與VLAN關(guān)聯(lián)后才能被激活，收發(fā)報(bào)文基于端口的VLAN和VLAN接口典型配置HastAHostBVLAN-1M192.168.1.024VLAU200-102.16*.2.O<24HdStOHostDHastAHostBVLAN-1M192.168.1.024VLAU200-102.16*.2.O<24HdStOHostDVLAH100152.1SS.1.024VLAM200-102.-1-6^.2.0^4交換機(jī)A與交換機(jī)B配置基本相同Ten-GigabitEthernet1/0/1加入VLAN100,Ten-GigabitEthernet1/0/2加入VLAN200。[DeviceA]vlan100[DeviceA-vlan100]portten-gigabitethernet1/0/1#[DeviceA-vlan100]quit[DeviceA]vlan200[DeviceA-vlan200]portten-gigabitethernet1/0/2[DeviceA-vlan200]quit#創(chuàng)建Vian-interface100與Vlan-interface200并配置其IP地址為/24與/24。[DeviceA]interfaceVlan-interface100[DeviceA-Vlan-interface100]ipaddress24[DeviceA]interfaceVlan-interface200[DeviceA-Vlan-interface200]ipaddress24#為了使交換機(jī)A上VLAN100和VLAN200的報(bào)文能發(fā)送給交換機(jī)B,將Ten-GigabitEthernetlO/3的鏈路類型配置為Trunk,并允許VLAN100和VLAN200的報(bào)文通過或全部vlan通過,取消允許VLAN1通過?！綶DeviceA]interfaceten-gigabitethernet1/0/3[DeviceA-Ten-GigabitEthernet1/0/3]portlink-typetrunk[DeviceA-Ten-GigabitEthernet1/0/3]porttrunkpermitvlan100200/all[DeviceA-Ten-GigabitEthernet1/0/3]undoporttrunkpermitvlan1[DeviceA-Ten-GigabitEthernet1/0/3]quit驗(yàn)證通過displayvian命令查看顯示信息驗(yàn)證配置是否成功，以查看DeviceA上VLAN100和VLAN200的配置信息為例。HostA和HostC能夠互相ping通。查看HostA的ARP表，表中有HostC的IP地址和MAC地址對(duì)應(yīng)的ARP表項(xiàng)。查看HostC的ARP表，表中有HostA的IP地址和MAC地址對(duì)應(yīng)的ARP表項(xiàng)。HostA和HostD能夠互相ping通。查看HostA的ARP表，表中沒有HostD的ARP表項(xiàng)。查看HostD的ARP表，表中也沒有HostA的ARP表項(xiàng)。4、H3C交換機(jī)MVRP配置學(xué)習(xí)vlan1.1.[SwitchA]displayvlandynamic配置思路：全局和端口都開啟gvrp/mvrp,再將對(duì)應(yīng)端口設(shè)為trunk,并允許全部vlan通過即可。(1)配置SwitchA。注意在端口上啟用mvrp/gvrp<SwitchA>system-view[SwitchA]mvrpglobalenable!--開啟全局MVRP/gvrp[SwitchA]interfaceethernet2/0/1[SwitchA-Ethernet2/0/1]portlink-typetrunk!--將以太網(wǎng)端口Ethernet2/0/1配置為Trunk端口[SwitchA-Ethernet2/0/1]porttrunkpermitvlanall!--允許所有VLAN通過6.7.8.9.》[SwitchA-Ethernet2/0/1]mvrpenable!--在Trunk端口上開啟mvrp/GVRP[SwitchA-Ethernet2/0/1]quit[SwitchA]vlan2!--創(chuàng)建VLAN2(2)配置SwitchB。<SwitchB>system-view[SwitchB]mvrpglobalenable!--開啟全局MVRP/gvrp[SwitchB]interfaceethernet2/0/1[SwitchB-Ethernet2/0/1]portlink-typetrunk!--將以太網(wǎng)端口Ethernet2/0/1配置為Trunk端口[SwitchB-Ethernet2/0/1]porttrunkpermitvlanall!--允許所有VLAN通過[SwitchB-Ethernet2/0/1]mvrpenable!--在Trunk端口上開啟MVRP7.8.[SwitchB-Ethernet2/0/1]quit9.[SwitchB]vlan3!--創(chuàng)建VLAN3(3)驗(yàn)證GVRP的VLAN注冊(cè)功能是否已發(fā)揮。在SwitchA上執(zhí)行displayvlandynamic命令查看本交換機(jī)所學(xué)習(xí)到的動(dòng)態(tài)VLAN信息。從輸出信息中可以看出，它已動(dòng)態(tài)學(xué)習(xí)到SwitchB上創(chuàng)建的VLAN3。Now,thefollowingdynamicVLANexist（s）:3同樣在SwitchB上執(zhí)行displayvlandynamic命令查看本交換機(jī)所學(xué)習(xí)到的動(dòng)態(tài)VLAN信息。從輸出信息中可以看出，它已動(dòng)態(tài)學(xué)習(xí)到SwitchA上創(chuàng)建的VLAN2。[SwitchB]displayvlandynamicNow,thefollowingdynamicVLANexist（s）:2(交換機(jī)的訪問控制aclSwitchHostA10.1.1.1HRdept.SwitchHostA10.1.1.1HRdept.配置思路：定義周期時(shí)間time-range,定義規(guī)則rule允許（permit）或拒絕（deny）相關(guān)網(wǎng)絡(luò)在規(guī)定時(shí)間訪問其他網(wǎng)絡(luò)。需求：HostA和HostB通過端口GigabitEthernet1/0/1接入交換機(jī)，HostA的IP地址為。要求配置基本IPv4ACL,實(shí)現(xiàn)在每天8:30?18:00的時(shí)間段內(nèi)，只允許HostA訪問HR部門的服務(wù)器，拒絕其它的IP報(bào)文通過。#定義周期時(shí)間段working_time,時(shí)間范圍為每天的8:30?18:00。<Switch>system-view[Switch]time-rangeworking_time8:30to18:00daily#定義基本IPv4ACL2000，配置匹配源IP地址為的訪問規(guī)則。[Switch]aclnumber2000（[Switch-acl-basic-2000]rulepermitsource0time-rangeworking_time[Switch-acl-basic-2000]quit#定義基本IPv4ACL2001，配置匹配源IP地址為任意地址的訪問規(guī)則。[Switch]aclnumber2001[Switch-acl-basic-2001]ruledenysourceanytime-rangeworking_time[Switch-acl-basic-2001]quit關(guān)于supervlan與subvlan的配置<H3C>system-viewSystemView:returntoUserViewwithCtrl+Z.[H3C]vlan10[H3C-vlan10]supervlan[H3C-vlan10]vlan2&[H3C-vlan2]portethernet3/1/1ethernet3/1/2[H3C-vlan2]arpproxyenable[H3C-vlan2]vlan3[H3C-vlan3]portEthernet3/1/3ethernet3/1/4[H3C-vlan3]arpproxyenable[H3C-vlan3]vlan5[H3C-vlan5]portethernet3/1/5ethernet3/1/6[H3C-vlan5]arpproxyenable[H3C-vlan5]vlan10[H3C-vlan10]subvlan235》[H3C-vlan10]interfacevlan10[H3C-Vlan-interface10]ipaddressh3c交換機(jī)的irf虛擬設(shè)備、鏈路聚合相關(guān)配置irf配置Master（主設(shè)備）和Slave（從設(shè)備）組成IRF有獨(dú)立運(yùn)行模式和irf模式irf模式配置成員編號(hào)（<H3C>system-view[H3C]irfdomain<0-95>配置成員優(yōu)先級(jí)，優(yōu)先級(jí)越高當(dāng)選為Master的可能性越大。⑴當(dāng)前Master優(yōu)先（IRF系統(tǒng)形成時(shí)，沒有Master設(shè)備，所有加入的設(shè)備都認(rèn)為自己是Master，會(huì)跳轉(zhuǎn)到第二條規(guī)則繼續(xù)比較）；（2）成員優(yōu)先級(jí)大的優(yōu)先；⑶系統(tǒng)運(yùn)行時(shí)間長(zhǎng)的優(yōu)先（各設(shè)備的系統(tǒng)運(yùn)行時(shí)間信息也是通過IRFHello報(bào)文來傳遞的）；⑷橋MAC地址小的優(yōu)先。[H3C]irfmemberINTEGER<1-10>MemberID[H3C]irfmember2pr[H3C]irfmember2priorityINTEGER<1-32>PriorityLevel[H3C]irfmember2priority創(chuàng)建irf端口

鏈路聚合二層聚合聚合概念：創(chuàng)建聚合組接口(interfacebridge-aggregation1),選擇采用模式(靜態(tài)或者動(dòng)態(tài))，然后將端口劃入聚合組中，將全部需要聚合的接口設(shè)為trunk，并允許對(duì)應(yīng)vlan通過。rFLAMY—GEIOirFLAMY—GEIOiSwitchA廠r、<LAN1(>】GEimG=105【\『LAM囚>jJBAGG1G=105【\『LAM囚>jJBAGG1廠-rrfLAN2!3]JGE105#進(jìn)入系統(tǒng)視圖，并配置全局按照?qǐng)?bào)文的源MAC地址和目的MAC地址進(jìn)行聚合負(fù)載分擔(dān)。<SwitchA>system-view[SwitchA]link-aggregationglobalload-sharingmodesource-macdestination-mac采用靜態(tài)聚合模式：創(chuàng)建二層聚合接口1[SwitchA]interfacebridge-aggregation1/創(chuàng)建聚合組1[SwitchA-Bridge-Aggregation1]quit采用動(dòng)態(tài)聚合模式：創(chuàng)建二層聚合接口，并配置動(dòng)態(tài)聚合模式[SwitchA]interfacebridge-aggregation1[SwitchA-Bridge-Aggregation1]link-aggregationmodedynamic[SwitchA-Bridge-Aggregation1]quit#分別將端口GigabitEthernet1/0/1至GigabitEthernet1/0/3加入到聚合組1中。[SwitchA]interfacegigabitethernet1/0/1[SwitchA-GigabitEthernet1/0/1]portlink-aggregationgroup1[SwitchA-GigabitEthernet1/0/1]quit[SwitchA]interfacegigabitethernet1/0/2[SwitchA-GigabitEthernet1/0/2]portlink-aggregationgroup1[SwitchA-GigabitEthernet1/0/2]quit}[SwitchA]interfacegigabitethernet1/0/3[SwitchA-GigabitEthernet1/0/3]portlink-aggregationgroup1[SwitchA-GigabitEthernet1/0/3]quit#配置二層聚合接口1為Trunk端口，并允許VLAN10和VLAN20的報(bào)文通過。[SwitchA]interfacebridge-aggregation1[SwitchA-Bridge-Aggregation1]portlink-typetrunk[SwitchA-Bridge-Aggregation1]porttrunkpermitvlan1020Pleasewait...Done.ConfiguringGigabitEthernet1/0/1...Done.ConfiguringGigabitEthernet1/0/2...Done.ConfiguringGigabitEthernet1/0/3...Done.[SwitchA-Bridge-Aggregation1]quit通過displaylink-aggregationverbose命令來顯示聚合組的相關(guān)信息，以驗(yàn)證配置是否成功三層聚合創(chuàng)建聚會(huì)組接口，采用模式（靜態(tài)或動(dòng)態(tài)），端口加入聚會(huì)組中（要開啟route模式），配置優(yōu)先級(jí)。缺省情況下，端口的優(yōu)先級(jí)取值為32768，取值越小，優(yōu)先級(jí)越高創(chuàng)建三層聚合接口1。（根據(jù)具體情況選擇下面兩種方式之一）采用靜態(tài)聚合模式：創(chuàng)建三層聚合接口1[SwitchA]interfaceroute-aggregation1采用動(dòng)態(tài)聚合模式：創(chuàng)建三層聚合接口1，并配置動(dòng)態(tài)聚合模式[SwitchA]interfaceroute-aggregation1][SwitchA-Route-Aggregation1]link-aggregationmodedynamic#配置三層聚合接口1的IP地址為和子網(wǎng)掩碼，并配置聚合組的最大選中端口數(shù)為2。[SwitchA-Route-Aggregation1]ipaddress24[SwitchA-Route-Aggregation1]link-aggregationselected-portmaximum2[SwitchA-Route-Aggregation1]quit分別將端口GigabitEthernet1/0/1至GigabitEthernet1/0/3加入到聚合組1中，并配置GigabitEthernet1/0/2、GigabitEthernet1/0/3的優(yōu)先級(jí)為100。注意在端口啟用（route模式）[SwitchA]interfacegigabitethernet1/0/1[SwitchA-GigabitEthernet1/0/1]portlink-moderoute[SwitchA-GigabitEthernet1/0/1]portlink-aggregationgroup1[SwitchA-GigabitEthernet1/0/1]quit))[SwitchA]interfacegigabitethernet1/0/2[SwitchA-GigabitEthernet1/0/2]portlink-moderoute[SwitchA-GigabitEthernet1/0/2]portlink-aggregationgroup1[SwitchA-GigabitEthernet1/0/2]link-aggregationport-priority100[SwitchA-GigabitEthernet1/0/2]quit[SwitchA]interfacegigabitethernet1/0/3[SwitchA-GigabitEthernet1/0/3]portlink-moderoute[SwitchA-GigabitEthernet1/0/3]portlink-aggregationgroup1[SwitchA-GigabitEthernet1/0/3]link-aggregationport-priority100)[SwitchA-GigabitEthernet1/0/3]quitSwitchB的配置SwitchB上的配置與SwitchA完全相同，此處不再贅述。驗(yàn)證#通過displaylink-aggregationverbose命令來顯示聚合組的相關(guān)信息，以驗(yàn)證配置是否成功。結(jié)果說明：由于限制了最大選中端口數(shù)為2，聚合組1中只有兩個(gè)成員端口成為選中端口。由于GigabitEthernet1/0/2與GigabitEthernet1/0/3的優(yōu)先級(jí)高于GigabitEthernet1/0/1,因此GigabitEthernet1/0/2、GigabitEthernet1/0/3為選中端口，GigabitEthernet1/0/1未被選中。6、多生成樹協(xié)議Mstp與vrrp配置Mstp配置舉例@@0MSTregionDeviceADeviceBDeviteCDeviceD0MSTregionDeviceADeviceBDeviteCDeviceDDeviceE配置思路：配置vian并配置端口trunk、允許vian,端口開啟stp協(xié)議，配置MST域，配置修訂級(jí)別，將vian映射到實(shí)例（instance+實(shí)例編號(hào)），查看配置是否完成，激活MST域。配置實(shí)例根橋與備份根橋，配置mstp模式和全局開啟stpglobalenable。⑴配置VLAN和端口請(qǐng)按照?qǐng)D1所示，在DeviceA、DeviceB和DeviceE上分別創(chuàng)建VLAN10、20和30，在DeviceC上創(chuàng)建VLAN10和20，在DeviceD上創(chuàng)建VLAN20和30；將各設(shè)備在本舉例中涉及的各端口配置為Trunk端口并允許相應(yīng)的VLAN通過，開啟各端口的生成樹協(xié)議。缺省情況下，端口上的生成樹協(xié)議處于開啟狀態(tài)。各設(shè)備的配置方法相似，本文僅列舉出DeviceA的配置。<DeviceA>system-view[DeviceA]vlan10[DeviceA-vlan10]quit[DeviceA]vlan20[DeviceA-vlan20]quit[DeviceA]vlan30[DeviceA-vlan30]quit[DeviceA]interfaceten-gigabitethernet1/0/1[DeviceA-Ten-GigabitEthernet1/0/1]portlink-typetrunk[DeviceA-Ten-GigabitEthernet1/0/1]undoporttrunkpermitvlan1[DeviceA-Ten-GigabitEthernet1/0/1]porttrunkpermitvlan1020[DeviceA-Ten-GigabitEthernet1/0/1]stpenable[DeviceA-Ten-GigabitEthernet1/0/1]quit[DeviceA]interfaceten-gigabitethernet1/0/2[DeviceA-Ten-GigabitEthernet1/0/2]portlink-typetrunk[DeviceA-Ten-GigabitEthernet1/0/2]undoporttrunkpermitvlan1[DeviceA-Ten-GigabitEthernet1/0/2]porttrunkpermitvlan2030[DeviceA-Ten-GigabitEthernet1/0/2]stpenable[DeviceA-Ten-GigabitEthernet1/0/2]quit[DeviceA]interfaceten-gigabitethernet1/0/3[DeviceA-Ten-GigabitEthernet1/0/3]portlink-typetrunk[DeviceA-Ten-GigabitEthernet1/0/3]undoporttrunkpermitvlan1[DeviceA-Ten-GigabitEthernet1/0/3]porttrunkpermitvlan102030[DeviceA-Ten-GigabitEthernet1/0/3]stpenable[DeviceA-Ten-GigabitEthernet1/0/3]quit配置DeviceA#配置MST域的域名為example,將VLAN10、20、30分別映射到生成樹實(shí)例1、0、2上，并配置MSTP的修訂級(jí)別為0。缺省情況下，MST域的域名為設(shè)備的橋MAC地址，所有VLAN都映射到instanee0上,MSTP的修訂級(jí)別為0。<DeviceA>system-view[DeviceA]stpregion-configuration[DeviceA-mst-region]region-nameexample[DeviceA-mst-region]instance1vlan10[DeviceA-mst-region]instance0vlan20[DeviceA-mst-region]instance2vlan30[DeviceA-mst-region]revision-level01-4#查看MST域的預(yù)配置信息(建議在激活MST域的配置前，先查看MST域的預(yù)配置是否正確，】確認(rèn)配置無誤后再激活MST域的配置)。[DeviceA-mst-region]checkregion-configuration#激活MST域的配置。[DeviceA-mst-region]activeregion-configuration[DeviceA-mst-region]quit配置本設(shè)備為生成樹實(shí)例1和實(shí)例2的根橋。[DeviceA]stpinstance1rootprimary[DeviceA]stpinstance2rootprimary配置本設(shè)備為生成樹實(shí)例0的備份根橋。[DeviceA]stpinstance0rootsecondary##配置生成樹的工作模式為MSTP模式。缺省情況下，生成樹的工作模式為MSTP模式。[DeviceA]stpmodemstp#全局使能MSTP協(xié)議。[DeviceA]stpglobalenable#全局執(zhí)行mcheck操作確保設(shè)備各端口都工作于MSTP模式。[DeviceA]stpglobalmcheck配置DeviceB#配置MST域的域名為example,將VLAN10、20、30分別映射到生成樹實(shí)例1、0、2上，并配置MSTP的修訂級(jí)別為0。缺省情況下，MST域的域名為設(shè)備的橋MAC地址，所有VLAN都映射到instanee0上,MSTP的修訂級(jí)別為0。#<DevieeB>system-view[DevieeB]vlan10[DevieeB]vlan20[DevieeB]vlan30[DevieeB]stpregion-eonfiguration[DevieeB-mst-region]region-nameexample[DevieeB-mst-region]instanee1vlan10[DevieeB-mst-region]instanee0vlan20[DevieeB-mst-region]instanee2vlan30[DevieeB-mst-region]revision-level0￥#查看MST域的預(yù)配置信息(建議在激活MST域的配置前，先查看MST域的預(yù)配置是否正確，確認(rèn)配置無誤后再激活MST域的配置)。[DevieeB-mst-region]eheekregion-eonfiguration#激活MST域的配置。[DevieeB-mst-region]aetiveregion-eonfiguration[DevieeB-mst-region]quit配置本設(shè)備為生成樹實(shí)例0的根橋。[DevieeB]stpinstanee0rootprimary配置本設(shè)備為生成樹實(shí)例1和實(shí)例2的備份根橋。[DevieeB]stpinstanee1rootseeondary@[DevieeB]stpinstanee2rootseeondary#配置生成樹的工作模式為MSTP模式。缺省情況下，生成樹的工作模式為MSTP模式。[DevieeB]stpmodemstp#全局使能MSTP協(xié)議。1-5[DevieeB]stpglobalenable#全局執(zhí)行mcheck操作確保設(shè)備各端口都工作于MSTP模式。[DevieeB]stpglobalmeheek配置DeviceC#配置MST域的域名為example，將VLAN10、20、30分別映射到生成樹實(shí)例1、0、2上，并配￥置MSTP的修訂級(jí)別為0。缺省情況下，MST域的域名為設(shè)備的橋MAC地址，所有VLAN都映射到instanee0上，MSTP的修訂級(jí)別為0。<DeviceC>system-view[Devieee]vlan10[Devieee]vlan20[DevieeC]stpregion-eonfiguration[DevieeC-mst-region]region-nameexample[DevieeC-mst-region]instanee1vlan10[DevieeC-mst-region]instanee0vlan20[DevieeC-mst-region]instanee2vlan30[DevieeC-mst-region]revision-level0#查看MST域的預(yù)配置信息(建議在激活MST域的配置前，先查看MST域的預(yù)配置是否正確，確認(rèn)配置無誤后再激活MST域的配置)。[DevieeC-mst-region]eheekregion-eonfiguration#激活MST域的配置。[DevieeC-mst-region]aetiveregion-eonfiguration[DevieeC-mst-region]quit#配置DeviceC的Ten-GigabitEthernet1/0/1端口在實(shí)例1中的路徑開銷值為1。[DevieeC]interfaeeten-gigabitethernet1/0/1[DeviceC-Ten-GigabitEthernet1/0/1]stpinstance1cost1[DeviceC-Ten-GigabitEthernet1/0/1]quit#配置生成樹的工作模式為MSTP模式。缺省情況下，生成樹的工作模式為MSTP模式。[DeviceC]stpmodemstp#全局使能MSTP協(xié)議。[DeviceC]stpglobalenable#全局執(zhí)行mcheck操作確保設(shè)備各端口都工作于MSTP模式。[DeviceC]stpglobalmcheck配置DeviceD#配置MST域的域名為example，將VLAN10、20、30分別映射到生成樹實(shí)例1、0、2上，并配置MSTP的修訂級(jí)別為0。缺省情況下，MST域的域名為設(shè)備的橋MAC地址，所有VLAN都映射*到instanee0上,MSTP的修訂級(jí)別為0。<DeviceD>system-view[DeviceD]vlan20[DeviceD]vlan30[DeviceD]stpregion-configuration[DeviceD-mst-region]region-nameexample[DeviceD-mst-region]instance1vlan10[DeviceD-mst-region]instance0vlan20[DeviceD-mst-region]instance2vlan30[DeviceD-mst-region]revision-level0|#查看MST域的預(yù)配置信息（建議在激活MST域的配置前，先查看MST域的預(yù)配置是否正確，確認(rèn)配置無誤后再激活MST域的配置）。1-6[DeviceD-mst-region]checkregion-configuration#激活MST域的配置。[DeviceD-mst-region]activeregion-configuration[DeviceD-mst-region]quit#配置DeviceD的Ten-GigabitEthernet1//0/1端口在實(shí)例2中的路徑開銷值為1。[DeviceD]interfaceten-gigabitethernet1/0/1[DeviceD-Ten-GigabitEthernet1/0/1]stpinstance2cost1！[DeviceD-Ten-GigabitEthernet1/0/1]quit#配置生成樹的工作模式為MSTP模式。缺省情況下，生成樹的工作模式為MSTP模式。[DeviceD]stpmodemstp#全局使能MSTP協(xié)議。[DeviceD]stpglobalenable#全局執(zhí)行mcheck操作確保設(shè)備各端口都工作于MSTP模式。[DeviceD]stpglobalmcheck（6）配置DeviceE#配置MST域的域名為example，將VLAN10、20、30分別映射到生成樹實(shí)例1、0、2上，并配置MSTP的修訂級(jí)別為0。缺省情況下，MST域的域名為設(shè)備的橋MAC地址，所有VLAN都映射{到instanee0上,MSTP的修訂級(jí)別為0。<DeviceE>system-view[DeviceE]vlan10[DeviceE]vlan20[DeviceE]vlan30[DeviceE]stpregion-configuration[DeviceE-mst-region]region-nameexample[DeviceE-mst-region]instance1vlan10[DeviceE-mst-region]instance0vlan20[DeviceE-mst-region]instance2vlan30\[DeviceE-mst-region]revision-level0#查看MST域的預(yù)配置信息（建議在激活MST域的配置前，先查看MST域的預(yù)配置是否正確，確認(rèn)配置無誤后再激活MST域的配置）。##[DeviceE-mst-region]checkregion-configuration#激活MST域的配置。[DeviceE-mst-region]activeregion-configuration[DeviceE-mst-region]quit#配置DeviceE的Ten-GigabitEthernet1//0/2端口在實(shí)例0中的路徑開銷值為1。[DeviceE]interfaceten-gigabitethernet1/0/2[DeviceE-Ten-GigabitEthernet1/0/2]stpinstance0cost1#[DeviceE-Ten-GigabitEthernet1/0/2]quit#配置生成樹的工作模式為MSTP模式。缺省情況下，生成樹的工作模式為MSTP模式。[DeviceE]stpmodemstp#全局使能MSTP協(xié)議。[DeviceE]stpglobalenable#全局執(zhí)行mcheck操作確保設(shè)備各端口都工作于MSTP模式。[DeviceE]stpglobalmcheck驗(yàn)證當(dāng)網(wǎng)絡(luò)拓?fù)浞€(wěn)定后，通過使用displaystpbrief命令可以查看各設(shè)備上生成樹的簡(jiǎn)要信息。例如：查看DeviceA上生成樹的簡(jiǎn)要信息。配置文件DeviceA#vlan10#vlan20#vlan30#stpregion-configuration》region-nameexampleinstance1vlan10instance2vlan30activeregion-configuration#stpinstance0rootsecondarystpinstance1rootprimarystpinstance2rootprimarystpglobalenableinterfaceTen-GigabitEthernet1/0/1portlink-typetrunkundoporttrunkpermitvlan1porttrunkpermitvlan1020#1-9interfaceTen-GigabitEthernet1/0/2portlink-typetrunkundoporttrunkpermitvlan1porttrunkpermitvlan2030#interfaceTen-GigabitEthernet1/0/3portlink-typetrunkundoporttrunkpermitvlan1porttrunkpermitvlan102030#?DeviceB#vlan10#<vlan20#vlan30#stpregion-configurationregion-nameexampleinstance1vlan10instance2vlan30activeregion-configuration#<stpinstance0rootprimarystpinstance1rootsecondarystpinstance2rootsecondarystpglobalenable#interfaceTen-GigabitEthernet1/0/1portlink-typetrunkundoporttrunkpermitvlan1porttrunkpermitvlan1020interfaceTen-GigabitEthernet1/0/2portlink-typetrunkundoporttrunkpermitvlan1porttrunkpermitvlan2030#interfaceTen-GigabitEthernet1/0/3portlink-typetrunkundoporttrunkpermitvlan1porttrunkpermitvlan102030#?DeviceC#vlan10#1-10vlan20#stpregion-configurationregion-nameexampleinstance1vlan10)instance2vlan30activeregion-configuration#stpglobalenable#interfaceTen-GigabitEthernet1/0/1portlink-typetrunkundoporttrunkpermitvlan1porttrunkpermitvlan1020stpinstance1cost1#interfaceTen-GigabitEthernet1/0/2portlink-typetrunkundoporttrunkpermitvlan1porttrunkpermitvlan1020#?DeviceD#vlan20[[vlan30#stpregion-configurationregion-nameexampleinstance1vlan10instance2vlan30activeregion-configuration#stpglobalenable#)interfaceTen-GigabitEthernet1/0/1portlink-typetrunkundoporttrunkpermitvlan1porttrunkpermitvlan2030stpinstance2cost1#interfaceTen-GigabitEthernet1/0/2portlink-typetrunkundoporttrunkpermitvlan1porttrunkpermitvlan2030)#?DeviceE#1-11vlan10#vlan20#vlan30#@stpregion-configurationregion-nameexampleinstance1vlan10instance2vlan30activeregion-configuration#stpglobalenable#interfaceTen-GigabitEthernet1/0/1portlink-typetrunkXGE1O3Vlan-int3HostAInternetXGE1O5Vlan-int22023XGE1O3Vlan-int3HostAInternetXGE1O5Vlan-int22023釦號(hào),沖XGEIAVaVlarHntJundoporttrunkpermitvlan1porttrunkpermitvlan102030#interfaceTen-GigabitEthernet1/0/2portlink-typetrunkundoporttrunkpermitvlan1porttrunkpermitvlan102030stpinstance0cost1#VRRP配置舉例VRRP根據(jù)優(yōu)先級(jí)來確定備份組中每臺(tái)路由器的角色（Master路由器或Backup路由器）。優(yōu)先級(jí)越高（1-254），則越有可能成為Master路由器。配置思路：在vlan接口設(shè)置vrrp版本號(hào)，創(chuàng)建備份組配置虛擬ip,再設(shè)置其優(yōu)先級(jí)，認(rèn)證方式搶占延時(shí)。備份組中的虛擬ip，認(rèn)證方式需相同。圖1VRRP單備份組配置組網(wǎng)圖VirtualIPaddress：202,30,160.111/24XGE1TOVlaNnt2202.38.160.1/24SwitchASwitchB⑴配置SwitchA配置VLAN3。<SwitchA>system-view[SwitchA]vlan3[SwitchA-vlan3]portten-gigabitethernet1/0/3[SwitchA-vlan3]quit[SwitchA]interfacevlan-interface