华为的MSTP+VRRP配置

vrrpmstpIRF的配置全解irf的堆叠（v5版系统）对于多个设备，可以通过虚拟化将其堆叠到一个设备中，实现集中管理。

不同域之间的IRF也可以相互堆叠，这大大提高了设备的处理能力。

IRF的主选择应基于设备优先级、系统运行时间、成员编号和MAC地址。

组网：两台h3c5800要求：通过IRF将两个设备堆叠成一个。

成员1的优先级为10，成员2的优先级为5irf1配置#sysnameirf#系统视图中的Irfdomain10（指定IRF的域号。

同一个域号属于同一组堆叠设备，或者可以在不同组之间堆叠）irfmember1priority10（1-32，数值越高优先级越高，优先成为master）#进入internet1/关闭端口interfaceten-gigabitethernet1/0/28shutdown#Irf-port1/1（输入Irf堆栈端口进行配置）portgroupinterfacegigabitethernet1/0/27portgroupinterface gigabitethernet1/0/28#interfaceten-gigabitethernet1/0/27undoshutdown(激活端口)interfaceten-gigabitethernet1/0/28undoshutdownsaveIRF端口配置激活irf2配置#系统视图下Irfmember1renumber2（修改IRF成员编号）保存reboot(保存并重启后修改的成员号生效可以displaycurrent-configuration查看当前配置可以看到端口号为原来的gigabitethernet1/0/1变为gigabitethernet2/0/1)#Irfdomain10（指定IRF的域号。

同一个域号属于同一组堆叠设备，或者可以在不同组之间堆叠）IrfMember2Priority 5（1-32。

值越高，优先级越高，优先级成为主）#interfaceten-gigabitethernet1/0/27(进入堆叠的端口)shutdown（关闭）interfaceten-gigabitethernet1/0/28关闭#irf-port1/1（进入irf堆叠端口进行配置）portgroupinterfaceten-gigabitethernet1/0/27portgroupinterfaceten-gigabitethernet1/0/28#接口千兆以太网1/0/27unshut（激活端口）interfaceten-gigabitethernet1/0/28unshut保存（此时，优先级较低的设备必须在激活IRF之前保存配置，否则在选择后重新启动将清除配置）irf-port-configurationactive(激活irf的配置)通过查看配置，可以同时看到两台机器的端口测试：显示拓扑displayirfconfiguration您可以看到IRF配置是成功的。

Z 端 20.0.1.10/24Z 交换机A 交换机Vlan 2:20.0.1.1/24Vlan 3:30.0.1.1/24Vlan 4:40.0.1.1/24Vlan 5:50.0.1.1/24Vlan 3:30.0.1.3/24Vlan 4:40.0.1.3/24Vlan 5:50.0.1.3/24Mstp 元素：Name:wushan Revision:2Instance 1:vlan3,5Instance 2:vlan2,4Vlan 3,5主用路由Vlan 2,4备用路由Vlan 2:20.0.1.2/24Vlan 3:30.0.1.2/24Vlan 4:40.0.1.2/24Vlan 5:50.0.1.2/24Vlan 2,4主用路由Vlan 3,5备用路由注：mstp 同一区域中，不同交换机mstp 的3大属性（名称、修订号、instance 与vlan 的映射关系）必须完全相同。

Switch A:(config)#int range g0/23-24(config-range-if)#switchport trunk encapusulation dot1q (config-range-if)#switchport allow vlan 1-6 (config-range-if)#switchport mode trunk(config)#int g0/20(config-if)#switchport trunk encapusulation dot1q (config)#switchport allow vlan 1-6 (config-if)#switchport mode trunk(config)#int g0/11(config-if)#switchport mode access (config-if)#switchport access vlan 2(config)#spanning tree mode mst(config-mst)#spanning-tree mst configuration (config-mst)#name wushan (config-mst)#revision 2(config-mst)#instance 1 vlan 3,5(config-mst)#instance 2 vlan 2,4(config)#spanning-tree mst 1 root primary#show spanning-tree mst#show spanning-tree mst 1#show spanning-tree mst 1 detail#show spanning-tree mst int g0/23路由(config)# ip routing(config)# router ospf 1(config-router)#network 10.0.1.0 0.0.0.255 area 0(config-router)# network 20.0.1.0 0.0.0.255 area 0(config-router)#network 30.0.1.0 0.0.0.255 area 0(config-router)#network 40.0.1.0 0.0.0.255 area 0(config-router)#network 50.0.1.0 0.0.0.255 area 0//(config-router)#network 60.0.1.0 0.0.0.255 area 0#show ip ospf interface#show ip ospf database#show ip ospf neighborVrrp配置(config)#int vlan 2(config-if)#vrrp 2 ip 20.0.1.50(config-if)#vrrp 1 priority 90(config-if)#vrrp 1 timer learn(config-if)#end注: 一个vrrp组只有一个主用路由，一个或多个备用路由Vrrp group-number ip x.x.x.x x.x.x.x可以使虚拟的，也可以跟路由器的物理地址。

IRF的堆叠（V5版系统）对于多台设备，可通过虚拟化，堆叠成一台设备，可以实现集中化管理，不同域之间的irf 还可以相互堆叠，也大大提高了设备的处理能力。

IRF的Master选举要根据设备优先级和系统运行时间成员号大小mac地址大小来选举。

组网：两台h3c 5800要求：通过irf把两台设备堆叠成一台，成员1的优先级为10 成员2的优先级为5IRF1配置#sysname IRF#系统视图下irf domain 10 （指定irf的域号，同一域号下属于同一组堆叠设备，也可以不同组之间堆叠）irf member 1 priority 10 （1-32，数值越高优先级越高，优先成为master）#interface Ten-GigabitEthernet 1/0/27(进入堆叠的端口)Shutdown（关闭）interface Ten-GigabitEthernet 1/0/28Shutdown#irf-port 1/1（进入IRF堆叠端口进行配置）port group interface Ten-GigabitEthernet 1/0/27port group interface Ten-GigabitEthernet 1/0/28#interface Ten-GigabitEthernet 1/0/27undo shutdown(激活端口)interface Ten-GigabitEthernet 1/0/28undo shutdownsaveirf-port-configuration active (激活irf的配置)IRF 2配置#系统视图下irf member 1 renumber 2（修改irf成员号）SaveReboot(保存并重启后修改的成员号生效可以display current-configuration 查看当前配置可以看到端口号为原来的GigabitEthernet 1/0/1变为GigabitEthernet 2/0/1)#irf domain 10 （指定irf的域号，同一域号下属于同一组堆叠设备，也可以不同组之间堆叠）irf member 2 priority 5 （1-32，数值越高优先级越高，优先成为master）#interface Ten-GigabitEthernet 1/0/27(进入堆叠的端口)Shutdown（关闭）interface Ten-GigabitEthernet 1/0/28Shutdown#irf-port 1/1（进入IRF堆叠端口进行配置）port group interface Ten-GigabitEthernet 1/0/27port group interface Ten-GigabitEthernet 1/0/28#interface Ten-GigabitEthernet 1/0/27Un shut(激活端口)interface Ten-GigabitEthernet 1/0/28Un shutSave（此时这台作为优先级较低的设备务必要保存配置后再激活irf否则经过选举后重启将清空配置）irf-port-configuration active (激活irf的配置)可以通过查看配置同时可以看到两台机器的端口或者测试：display irf topologydisplay irf configuration可以看到IRF配置成功。

图3-128??配置VRRP主备备份组网图配置思路采用VRRP主备备份实现网关冗余备份，配置思路如下：1.配置各设备接口IP地址及路由协议，使各设备间网络层连通。

2.在SwitchA和SwitchB上配置VRRP备份组。

其中，SwitchA上配置较高优先级和20秒抢占延时，作为Master设备承担流量转发；SwitchB上配置较低优先级，作为备用交换机，实现网关冗余备份。

操作步骤1.配置设备间的网络互连#配置设备各接口的IP地址，以SwitchA为例。

SwitchB和SwitchC的配置与SwitchA类似，详见配置文件。

<HUAWEI>system-view[HUAWEI]sysnameSwitchA[SwitchA]vlanbatch100300[SwitchA]interfacegigabitethernet1/0/1[SwitchA-GigabitEthernet1/0/1]portlink-typehybrid[SwitchA-GigabitEthernet1/0/1]porthybridpvidvlan300[SwitchA-GigabitEthernet1/0/1]porthybriduntaggedvlan300[SwitchA-GigabitEthernet1/0/1]quit[SwitchA]interfacegigabitethernet1/0/2[SwitchA-GigabitEthernet1/0/2]portlink-typehybrid[SwitchA-GigabitEthernet1/0/2]porthybridpvidvlan100[SwitchA-GigabitEthernet1/0/2]porthybriduntaggedvlan100[SwitchA-GigabitEthernet1/0/2]quit[SwitchA]interfacevlanif100[SwitchA-Vlanif100]ipaddress24[SwitchA-Vlanif100]quit[SwitchA]interfacevlanif300[SwitchA-Vlanif300]ipaddress24[SwitchA-Vlanif300]quit#配置Switch的二层转发功能。

实验报告学号 1409040147 姓名 刘丽 课堂号 B0900630 实验日期 2016.12.20 同组人谢文霞、赖晓央、涂智潇指导教师刘琪实验一、MSTP一、实验目的和要求在接入层和汇聚层交换机上配置MSTP 并进行验证。

二、实验规划1. 实验背景传统的生成树协议是基于整个交换网络产生一个树形拓扑结构，所有的VLAN 都共享一个生成树，这种结构不能进行网络流量的负载均衡，是的有些交换设备比较繁忙，而另一些设备又很空闲。

为了克服这个问题，决定采用基于VLAN 的多生成树协议MSTP 。

现在要在交换机上做适当配置来完成这一任务。

S2126-1与S2126-2上的VLAN 配置不同，现在我们希望在任意一台交换机上都可以识别并传递相应VLAN 的信息。

请用GVRP 来解决这个问题。

同时自行设计修剪方式。

2. 实验设备锐捷S2126和S3550交换机，数据线若干。

3. 实验拓扑三、实验步骤与实验内容步骤一：配置接入层交换机S2126-1S2126-1 (config)#spanning-tree ！开启生成树S2126-1 (config)#spanning-tree mode mstp ！配置生成树模式为MSTPS3550S2126-2S2126-1F0/20F0/20 F0/10F0/10F0/20VLAN 10VLAN 20VLAN 30VLAN 10F0/10Join timer 200msLeave timer 600msLeaveall timer 1000ms查看GVRP的配置信息Switch#show gvrp configuration查看GVRP的运行状态switch#show gvrp status查看GVRP的端口统计信息Switch#show gvrp statistics { interface-id | all}四、结果验证验证测试：验证MSTP配置S2126-1#show spanning-tree mst configuration ！显示MSTP全局配置验证测试：验证MSTP配置S2126-2#show spanning-tree mst configuration验证测试：验证MSTP配置S3550-A#show spanning-tree mst configuration验证交换机配置：S3550-A#show spanning-tree mst 1 ！显示交换机S3550-A上实例1的特性S2126-1#show spanning-tree mst 1 ！显示交换机S2126-1上实例1的特性S2126-1#show spanning-tree mst 2 ！显示交换机S2126-1上实例2的特性4、IP地址规划设备名接口IP地址子网掩码S3550-1VLAN10192.168.10.1255.255.255.0VLAN20192.168.20.1255.255.255.0 S3550-2VLAN10192.168.10.2255.255.255.0VLAN20192.168.20.2255.255.255.0 R2624F0/1192.168.1.2 255.255.255.0F0/2192.168.1.6255.255.255.0Loopback1 1.1.1.1255.255.255.0F0172.26.10.200255.255.255.0F1172.26.30.200255.255.255.0 S2126S0200.20.20.21255.255.255.0Loopback2 2.2.2.2255.255.255.0三、实验内容S3550-1的配置：interface vlan 10ip add 192.168.10.1 255.255.255.0no shutdowninterface vlan 20ip add 192.168.20.1router ripversion 2no auto-summary network 192.168.10.0 network 192.168.20.0interface vlan 10standby 1 ip 192.168.10.254 standby 1 priority 120 interface vlan 20standby 2 ip 192.168.20.254S3550-2的配置：no shutdowninterface vlan 10ip add 192.168.10.2 255.255.255.0 no shutdowninterface vlan 20ip add 192.168.20.2 255.255.255.0 no shutdownrouter ripversion 2no auto-summarynetwork 192.168.10.0network 192.168.20.0interface vlan 10standby 1 ip 192.168.10.254 interface vlan 20standby 2 ip 192.168.20.254 standby 2 priority 120S2126的配置：show runvlan1PC1和PC2ping自己的网关，请问是否可以ping通？答：可以ping通，结果如下：在PC1和PC2上的cmd窗口中分别执行命令：route print，查看一下它们各自的网关是谁！在相关设备上分别：Show vrrp [brief]Show vrrp interfaceR2624配置：五、回答问题：什么情况下使用VRRP？什么是VRRP的负载均衡？答：虚拟路由冗余协议(Virtual Router Redundancy Protocol，简称VRRP)是由IETF提出的解决局域网中配置静态网关出现单点失效现象的路由协议，1998年已推出正式的2. 实验设备S3550,路由器，两个交换机。

防火墙双机热备配置及组网指导防火墙双机热备，主要是提供冗余备份的功能，在网络发生故障的时候避免业务出现中断。

防火墙双机热备组网根据防火墙的模式，分路由模式下的双机热备组网和透明模式下的双机热备组网，下面分别根据防火墙的不同模式下的组网提供组网说明及典型配置。

防火墙双机热备命令行说明防火墙的双机热备的配置主要涉及到HRP的配置，VGMP的配置，以及VRRP的配置，防火墙的双机热备组网配置需要根据现网的业务和用户的需求来进行调整，下面就防火墙的双机热备配置涉及到的命令行做一个解释说明。

HRP命令行配置说明HRP是华为的冗余备份协议，Eudemon 防火墙使用此协议进行备份组网，达到链路状态备份的目的，从而保证在设备发生故障的时候业务正常。

HRP协议是华为自己开发的协议，主要是在VGMP协议的基础上进行扩展得到的；VGMP 是华为的私有协议，主要是用来管理VRRP的，VGMP也是华为的私有协议，是在VRRP的基础上进行扩展得到的。

不管是VGMP的报文，还是HRP的报文，都是VRRP的报文，只是防火墙在识别这些报文的时候能根据自己定义的字段能判断出是VGMP的报文，HRP的报文，或者是普通的VRRP的报文。

在Eudemon防火墙上，hrp的作用主要是备份防火墙的会话表，备份防火墙的servermap表，备份防火墙的黑名单，备份防火墙的配置，以及备份ASPF模块中的公私网地址映射表和上层会话表等。

两台防火墙正确配置VRRP，VGMP，以及HRP之后，将会形成主备关系，这个时候防火墙的命令行上会自动显示防火墙状态是主还是备，如果命令行上有HRP_M的标识，表示此防火墙和另外一台防火墙进行协商之后抢占为主防火墙，如果命令行上有HRP_S的标识，表示此防火墙和另外一台防火墙进行协商之后抢占为备防火墙。

防火墙的主备状态只能在两台防火墙之间进行协商，并且协商状态稳定之后一定是一台为主状态另外一台为备状态，不可能出现两台都为主状态或者都是备状态的。

华为CE交换机MSTPVRRP冗余备份配置适用产品和版本CE12800/CE6800/CE5800系列产品V100R001C00或更高版本，CE7800系列产品V100R003C00或更高版本，CE8800系列产品V100R006C00或更高版本，CE12800E系列产品V200R002C50或更高版本。

组网需求在数据中心场景中，接入层交换机以双上行方式接入核心层。

用户希望：•考虑到业务的可靠性，部署冗余链路，在一条上行链路断开的时候，流量能切换到另外一条上行链路转发。

•避免冗余备份链路导致的环网问题，消除网络中的环路。

图2-37配置MSTP+VRRP负载分担组网需求分析•通过在SwitchA和SwitchB之间部署VRRP，实现链路冗余备份。

•通过在SwitchA、SwitchB和SwitchC之间部署MSTP，消除网络中的环路。

操作步骤1.配置MSTP基本功能配置SwitchA、SwitchB、SwitchC到域名为RG1的域内，创建实例MSTI12.# 配置SwitchA的MST域。

system-view[~HUAWEI] sysname SwitchA[*HUAWEI] commit[~SwitchA] stp region-configuration[~SwitchA-mst-region] region-name RG1[*SwitchA-mst-region] instance 1 vlan 2[*SwitchA-mst-region] commit[~SwitchA-mst-region] quit# 配置SwitchB的MST域。

system-view[~HUAWEI] sysname SwitchB[*HUAWEI] commit[~SwitchB] stp region-configuration[~SwitchB-mst-region] region-name RG1[*SwitchB-mst-region] instance 1 vlan 2[*SwitchB-mst-region] commit[~SwitchB-mst-region] quit# 配置SwitchC的MST域。

交换机vrrp+mstp配置实例一、组网需求1、switch a 、switch b选用两台锐捷的s5750 ；switch c 、shwich d 选用锐捷的s3750和s37602、全网共有两个业务vlan ,为vlan 10 、vlan 203、Switch a 、switch b 都分别对两vlan起用两vrrp组，实现两组的业务的负载分担和备份。

4、Switch a、switch b、switch c、switch d 都起用mstp多生成数协议，并且所有设备都属于同一个mst域，且实例映射一致（vlan 10映射实例1、vlan 20映射实例2 其他vlan映射默认实例0）。

5、Vlan 10业务以switch a为根桥；vlan 20业务以switch b为根桥；实现阻断网络环路，并能实现不同vlan数据流负载分担功能。

二、组网图三、配置步骤Switch a配置：s1#show runBuilding configuration...Current configuration : 1651 bytes!version RGNOS 10.2.00(2), Release(29287)(Tue Dec 25 20:39:14 CST 2007 -ngcf49) hostname s1co-operate enable!!!vlan 1!vlan 10!vlan 20!!no service password-encryption!spanning-tree 开启生成树（默认为mstp）spanning-tree mst configuration 进入mst配置模式revision 1 指定MST revision number 为1name region1 指定mst配置名称instance 0 vlan 1-9, 11-19, 21-4094 缺省情况下vlan都属于实例0instance 1 vlan 10 手工指定vlan10属于实例1instance 2 vlan 20 手工指定vlan20属于实例2spanning-tree mst 1 priority 0 指定实例1的优先级为0（为根桥）spanning-tree mst 2 priority 4096 指定实例2的优先级为4096interface GigabitEthernet 0/1switchport access vlan 10 配置g0/1属于vlan10!interface GigabitEthernet 0/2switchport access vlan 20 配置g0/2属于vlan 20!interface GigabitEthernet 0/3!..interface GigabitEthernet 0/24 设置g0/24为trunk接口且允许vlan10/20通过switchport mode trunk!interface VLAN 10 创建vlan 10 svi接口ip address 192.168.10.1 255.255.255.0 配置ip地址vrrp 1 priority 120 配置vrrp组1 优先级为120vrrp 1 ip 192.168.10.254 配置vrrp组1虚拟ip地址为192.168.10.254!interface VLAN 20 创建vlan 20 svi接口ip address 192.168.20.1 255.255.255.0 配置ip地址vrrp 2 ip 192.168.20.254 配置vrrp组2虚拟ip地址为192.168.20.254默认vrrp组的优先级为100默认不显示!line con 0line vty 0 4logins1#show vlanVLAN Name Status Ports---- -------------------------------- --------- ----------------------------------1 VLAN0001 STA TIC Gi0/3, Gi0/4, Gi0/5, Gi0/6Gi0/7, Gi0/8, Gi0/9, Gi0/10Gi0/11, Gi0/12, Gi0/13, Gi0/14Gi0/15, Gi0/16, Gi0/17, Gi0/18Gi0/19, Gi0/20, Gi0/21, Gi0/22Gi0/23, Gi0/2410 VLAN0010 STATIC Gi0/1, Gi0/2420 VLAN0020 STATIC Gi0/2, Gi0/24Switch b配置：s2#show runBuilding configuration...Current configuration : 1607 bytes!version RGNOS 10.2.00(2), Release(27932)(Thu Dec 13 10:32:09 CST 2007 -ngcf31) hostname s2!!!vlan 1!vlan 10!vlan 20!!no service password-encryption!spanning-treespanning-tree mst configurationrevision 1name region1instance 0 vlan 1-9, 11-19, 21-4094instance 1 vlan 10instance 2 vlan 20spanning-tree mst 1 priority 4096spanning-tree mst 2 priority 0interface GigabitEthernet 0/1switchport access vlan 10!interface GigabitEthernet 0/2switchport access vlan 20!..interface GigabitEthernet 0/24switchport mode trunk!interface VLAN 10ip address 192.168.10.2 255.255.255.0vrrp 1 ip 192.168.10.254!interface VLAN 20ip address 192.168.20.2 255.255.255.0vrrp 2 priority 120vrrp 2 ip 192.168.20.254!line con 0line vty 0 4login!!ends2#show vlanVLAN Name Status Ports---- -------------------------------- --------- -----------------------------------1 VLAN0001 STA TIC Gi0/3, Gi0/4, Gi0/5, Gi0/6Gi0/7, Gi0/8, Gi0/9, Gi0/10Gi0/11, Gi0/12, Gi0/13, Gi0/14Gi0/15, Gi0/16, Gi0/17, Gi0/18Gi0/19, Gi0/20, Gi0/21, Gi0/22Gi0/23, Gi0/2410 VLAN0010 STATIC Gi0/1, Gi0/2420 VLAN0020 STATIC Gi0/2, Gi0/24Switch c配置：s3#show runBuilding configuration...Current configuration : 1540 bytes!version RGNOS 10.2.00(2), Release(28794)(Fri Dec 21 09:27:15 CST 2007 -ngcf32) hostname s3!vlan 1!vlan 10!!service password-encryption!spanning-treespanning-tree mst configurationrevision 1name region1instance 0 vlan 1-9, 11-19, 21-4094instance 1 vlan 10instance 2 vlan 20spanning-tree mst 1 priority 0spanning-tree mst 2 priority 4096interface FastEthernet 0/1switchport access vlan 10!interface FastEthernet 0/2switchport access vlan 10!..interface GigabitEthernet 0/25!interface GigabitEthernet 0/26!interface GigabitEthernet 0/27!interface GigabitEthernet 0/28!interface VLAN 10ip address 192.168.10.3 255.255.255.0!ip route 0.0.0.0 0.0.0.0 192.168.10.254!!line con 0line vty 0 4loginSwitch d配置：s4#show runBuilding configuration...Current configuration : 1066 bytes!version RGNOS 10.2.00(2), Release(27932)(Thu Dec 13 10:31:41 CST 2007 -ngcf32) hostname s4!vlan 1!vlan 20!!no service password-encryption!spanning-treespanning-tree mst configurationrevision 1name region1instance 0 vlan 1-9, 11-19, 21-4094instance 1 vlan 10instance 2 vlan 20spanning-tree mst 1 priority 4096spanning-tree mst 2 priority 0interface GigabitEthernet 0/1switchport access vlan 20!interface GigabitEthernet 0/2switchport access vlan 20!..interface GigabitEthernet 0/12!interface VLAN 20ip address 192.168.20.3 255.255.255.0!!!!ip route 0.0.0.0 0.0.0.0 192.168.20.254!!line con 0line vty 0 4login!四、查看vrrp、mstp信息Switch a 信息：s1#show vrrp 查看vrrp 信息VLAN 10 - Group 1State is MasterVirtual IP address is 192.168.10.254 configuredVirtual MAC address is 0000.5e00.0101Advertisement interval is 1 secPreemption is enabledmin delay is 0 secPriority is 120Master Router is 192.168.10.1 (local), priority is 120Master Advertisement interval is 1 secMaster Down interval is 3 secVLAN 20 - Group 2State is BackupVirtual IP address is 192.168.20.254 configuredVirtual MAC address is 0000.5e00.0102Advertisement interval is 1 secPreemption is enabledmin delay is 0 secPriority is 100Master Router is 192.168.20.2 , priority is 120Master Advertisement interval is 1 secMaster Down interval is 3 secs1#s1#s1#s1#show spanning-tree interface gigabitEthernet 0/1 查看g0/1接口stp状态信息PortAdminPortFast : Disabled PortOperPortFast : Disabled PortAdminAutoEdge : Enabled PortOperAutoEdge : Disabled PortAdminLinkType : auto PortOperLinkType : point-to-point PortBPDUGuard : DisabledPortBPDUFilter : Disabled###### MST 0 vlans mapped :1-9, 11-19, 21-4094 PortState : forwardingPortPriority : 128PortDesignatedRoot : 8000.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :8000.00d0.f836.ed70 PortDesignatedPort : 8001 PortForwardTransitions : 6 PortAdminPathCost : 200000 PortOperPathCost : 200000PortRole : designatedPort###### MST 1 vlans mapped :10PortState : forwardingPortPriority : 128PortDesignatedRoot : 0001.00d0.f823.ef82 PortDesignatedCost : 0 PortDesignatedBridge :0001.00d0.f823.ef82 PortDesignatedPort : 8001 PortForwardTransitions : 5 PortAdminPathCost : 200000 PortOperPathCost : 200000PortRole : rootPort###### MST 2 vlans mapped :20PortState : forwardingPortPriority : 128PortDesignatedRoot : 0002.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :1002.00d0.f836.ed70 PortDesignatedPort : 8001 PortForwardTransitions : 4 PortAdminPathCost : 200000 PortOperPathCost : 200000PortRole : designatedPorts1#s1#s1#show spanning-tree interface gigabitEthernet 0/2 查看g0/2接口stp状态信息PortAdminPortFast : DisabledPortOperPortFast : DisabledPortAdminAutoEdge : EnabledPortOperAutoEdge : DisabledPortAdminLinkType : autoPortOperLinkType : point-to-pointPortBPDUGuard : DisabledPortBPDUFilter : Disabled###### MST 0 vlans mapped :1-9, 11-19, 21-4094PortState : forwardingPortPriority : 128PortDesignatedRoot : 8000.001a.a909.8fe0PortDesignatedCost : 0PortDesignatedBridge :8000.00d0.f836.ed70PortDesignatedPort : 8002PortForwardTransitions : 5PortAdminPathCost : 20000PortOperPathCost : 20000PortRole : designatedPort###### MST 1 vlans mapped :10PortState : forwardingPortPriority : 128PortDesignatedRoot : 0001.00d0.f823.ef82PortDesignatedCost : 0PortDesignatedBridge :0001.00d0.f836.ed70PortDesignatedPort : 8002PortForwardTransitions : 4PortAdminPathCost : 20000PortOperPathCost : 20000PortRole : designatedPort###### MST 2 vlans mapped :20PortState : discardingPortPriority : 128PortDesignatedRoot : 0002.001a.a909.8fe0PortDesignatedCost : 0PortDesignatedBridge :0002.00d0.f8d7.ae12PortDesignatedPort : 8002PortForwardTransitions : 3PortAdminPathCost : 20000PortOperPathCost : 20000PortRole : alternatePorts1#s1#s1#show spanning-tree interface gigabitEthernet 0/24 g0/24接口stp状态信息PortAdminPortFast : DisabledPortOperPortFast : DisabledPortAdminAutoEdge : EnabledPortOperAutoEdge : DisabledPortAdminLinkType : autoPortOperLinkType : point-to-pointPortBPDUGuard : DisabledPortBPDUFilter : Disabled###### MST 0 vlans mapped :1-9, 11-19, 21-4094PortState : forwardingPortPriority : 128PortDesignatedRoot : 8000.001a.a909.8fe0PortDesignatedCost : 0PortDesignatedBridge :8000.001a.a909.8fe0PortDesignatedPort : 8018PortForwardTransitions : 5PortAdminPathCost : 20000PortOperPathCost : 20000PortRole : rootPort###### MST 1 vlans mapped :10PortState : forwardingPortPriority : 128PortDesignatedRoot : 0001.00d0.f823.ef82PortDesignatedCost : 0PortDesignatedBridge :0001.00d0.f836.ed70PortDesignatedPort : 8018PortForwardTransitions : 5PortAdminPathCost : 20000PortOperPathCost : 20000PortRole : designatedPort###### MST 2 vlans mapped :20PortState : forwardingPortPriority : 128PortDesignatedRoot : 0002.001a.a909.8fe0 PortDesignatedCost : 0PortDesignatedBridge :0002.001a.a909.8fe0 PortDesignatedPort : 8018 PortForwardTransitions : 4PortAdminPathCost : 20000PortOperPathCost : 20000PortRole : rootPorts1#Switch b 信息：s2#show vrrpVLAN 10 - Group 1State is BackupVirtual IP address is 192.168.10.254 configured Virtual MAC address is 0000.5e00.0101 Advertisement interval is 1 secPreemption is enabledmin delay is 0 secPriority is 100Master Router is 192.168.10.1 , priority is 120 Master Advertisement interval is 1 secMaster Down interval is 3 secVLAN 20 - Group 2State is MasterVirtual IP address is 192.168.20.254 configured Virtual MAC address is 0000.5e00.0102 Advertisement interval is 1 secPreemption is enabledmin delay is 0 secPriority is 120Master Router is 192.168.20.2 (local), priority is 120 Master Advertisement interval is 1 secMaster Down interval is 3 secs2#s2#s2#s2#s2#s2#s2#show spanning-tree interface gigabitEthernet 0/1PortAdminPortFast : Disabled PortOperPortFast : Disabled PortAdminAutoEdge : Enabled PortOperAutoEdge : Disabled PortAdminLinkType : auto PortOperLinkType : point-to-point PortBPDUGuard : DisabledPortBPDUFilter : Disabled###### MST 0 vlans mapped :1-9, 11-19, 21-4094 PortState : forwardingPortPriority : 128PortDesignatedRoot : 8000.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :8000.001a.a909.8fe0 PortDesignatedPort : 8001 PortForwardTransitions : 1 PortAdminPathCost : 200000 PortOperPathCost : 200000PortRole : designatedPort###### MST 1 vlans mapped :10PortState : forwardingPortPriority : 128PortDesignatedRoot : 0001.00d0.f823.ef82 PortDesignatedCost : 0 PortDesignatedBridge :0001.00d0.f823.ef82 PortDesignatedPort : 8002 PortForwardTransitions : 2 PortAdminPathCost : 200000 PortOperPathCost : 200000PortRole : rootPort###### MST 2 vlans mapped :20PortState : forwardingPortPriority : 128PortDesignatedRoot : 0002.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :0002.001a.a909.8fe0 PortDesignatedPort : 8001 PortForwardTransitions : 1 PortAdminPathCost : 200000 PortOperPathCost : 200000PortRole : designatedPorts2#s2#s2#s2#show spanning-tree interface gigabitEthernet 0/2 PortAdminPortFast : Disabled PortOperPortFast : Disabled PortAdminAutoEdge : Enabled PortOperAutoEdge : Disabled PortAdminLinkType : autoPortOperLinkType : point-to-point PortBPDUGuard : DisabledPortBPDUFilter : Disabled###### MST 0 vlans mapped :1-9, 11-19, 21-4094 PortState : forwardingPortPriority : 128PortDesignatedRoot : 8000.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :8000.001a.a909.8fe0 PortDesignatedPort : 8002 PortForwardTransitions : 1 PortAdminPathCost : 20000 PortOperPathCost : 20000PortRole : designatedPort###### MST 1 vlans mapped :10PortState : forwardingPortPriority : 128PortDesignatedRoot : 0001.00d0.f823.ef82 PortDesignatedCost : 0 PortDesignatedBridge :1001.001a.a909.8fe0 PortDesignatedPort : 8002 PortForwardTransitions : 2 PortAdminPathCost : 20000 PortOperPathCost : 20000PortRole : designatedPort###### MST 2 vlans mapped :20PortState : forwardingPortPriority : 128PortDesignatedRoot : 0002.001a.a909.8fe0 PortDesignatedCost : 0PortDesignatedBridge :0002.001a.a909.8fe0 PortDesignatedPort : 8002 PortForwardTransitions : 1PortAdminPathCost : 20000PortOperPathCost : 20000PortRole : designatedPorts2#s2#s2#s2#s2#show spanning-tree interface gigabitEthernet 0/24 PortAdminPortFast : Disabled PortOperPortFast : Disabled PortAdminAutoEdge : Enabled PortOperAutoEdge : Disabled PortAdminLinkType : autoPortOperLinkType : point-to-point PortBPDUGuard : DisabledPortBPDUFilter : Disabled###### MST 0 vlans mapped :1-9, 11-19, 21-4094 PortState : forwardingPortPriority : 128PortDesignatedRoot : 8000.001a.a909.8fe0 PortDesignatedCost : 0PortDesignatedBridge :8000.001a.a909.8fe0 PortDesignatedPort : 8018 PortForwardTransitions : 1PortAdminPathCost : 20000PortOperPathCost : 20000PortRole : designatedPort###### MST 1 vlans mapped :10PortState : discardingPortPriority : 128PortDesignatedRoot : 0001.00d0.f823.ef82 PortDesignatedCost : 0PortDesignatedBridge :0001.00d0.f836.ed70 PortDesignatedPort : 8018 PortForwardTransitions : 1PortAdminPathCost : 20000PortOperPathCost : 20000PortRole : alternatePort###### MST 2 vlans mapped :20PortState : forwardingPortPriority : 128PortDesignatedRoot : 0002.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :0002.001a.a909.8fe0 PortDesignatedPort : 8018 PortForwardTransitions : 1 PortAdminPathCost : 20000 PortOperPathCost : 20000PortRole : designatedPorts2#Switch c 信息：s3#show spanning-tree interface fastEthernet 0/1 PortAdminPortFast : Disabled PortOperPortFast : Disabled PortAdminAutoEdge : Enabled PortOperAutoEdge : Disabled PortAdminLinkType : auto PortOperLinkType : point-to-point PortBPDUGuard : DisabledPortBPDUFilter : Disabled###### MST 0 vlans mapped :1-9, 11-19, 21-4094 PortState : discardingPortPriority : 128PortDesignatedRoot : 8000.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :8000.00d0.f836.ed70 PortDesignatedPort : 8001 PortForwardTransitions : 1 PortAdminPathCost : 200000 PortOperPathCost : 200000PortRole : alternatePort###### MST 1 vlans mapped :10PortState : forwardingPortPriority : 128PortDesignatedRoot : 0001.00d0.f823.ef82PortDesignatedCost : 0 PortDesignatedBridge :0001.00d0.f823.ef82 PortDesignatedPort : 8001 PortForwardTransitions : 1 PortAdminPathCost : 200000 PortOperPathCost : 200000PortRole : designatedPort###### MST 2 vlans mapped :20PortState : discardingPortPriority : 128PortDesignatedRoot : 0002.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :1002.00d0.f836.ed70 PortDesignatedPort : 8001 PortForwardTransitions : 0 PortAdminPathCost : 200000 PortOperPathCost : 200000PortRole : alternatePorts3#s3#s3#s3#s3#show spanning-tree interface fastEthernet 0/2 PortAdminPortFast : Disabled PortOperPortFast : Disabled PortAdminAutoEdge : Enabled PortOperAutoEdge : Disabled PortAdminLinkType : auto PortOperLinkType : point-to-point PortBPDUGuard : DisabledPortBPDUFilter : Disabled###### MST 0 vlans mapped :1-9, 11-19, 21-4094 PortState : forwardingPortPriority : 128PortDesignatedRoot : 8000.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :8000.001a.a909.8fe0 PortDesignatedPort : 8001 PortForwardTransitions : 1 PortAdminPathCost : 200000 PortOperPathCost : 200000PortRole : rootPort###### MST 1 vlans mapped :10PortState : forwardingPortPriority : 128PortDesignatedRoot : 0001.00d0.f823.ef82 PortDesignatedCost : 0 PortDesignatedBridge :0001.00d0.f823.ef82 PortDesignatedPort : 8002 PortForwardTransitions : 2 PortAdminPathCost : 200000 PortOperPathCost : 200000PortRole : designatedPort###### MST 2 vlans mapped :20PortState : forwardingPortPriority : 128PortDesignatedRoot : 0002.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :0002.001a.a909.8fe0 PortDesignatedPort : 8001 PortForwardTransitions : 1 PortAdminPathCost : 200000 PortOperPathCost : 200000PortRole : rootPorts3#Switch d 信息：s4#show spanning-tree interface gigabitEthernet 0/1 PortAdminPortFast : Disabled PortOperPortFast : Disabled PortAdminAutoEdge : Enabled PortOperAutoEdge : Disabled PortAdminLinkType : autoPortOperLinkType : point-to-point PortBPDUGuard : DisabledPortBPDUFilter : Disabled###### MST 0 vlans mapped :1-9, 11-19, 21-4094 PortState : forwardingPortPriority : 128PortDesignatedRoot : 8000.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :8000.001a.a909.8fe0 PortDesignatedPort : 8002 PortForwardTransitions : 1 PortAdminPathCost : 20000 PortOperPathCost : 20000PortRole : rootPort###### MST 1 vlans mapped :10PortState : discardingPortPriority : 128PortDesignatedRoot : 0001.00d0.f823.ef82 PortDesignatedCost : 0 PortDesignatedBridge :1001.001a.a909.8fe0 PortDesignatedPort : 8002 PortForwardTransitions : 1 PortAdminPathCost : 20000 PortOperPathCost : 20000PortRole : alternatePort###### MST 2 vlans mapped :20PortState : forwardingPortPriority : 128PortDesignatedRoot : 0002.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :0002.001a.a909.8fe0 PortDesignatedPort : 8002 PortForwardTransitions : 1 PortAdminPathCost : 20000 PortOperPathCost : 20000PortRole : rootPorts4#s4#s4#s4#show spanning-tree interface gigabitEthernet 0/2 PortAdminPortFast : Disabled PortOperPortFast : Disabled PortAdminAutoEdge : Enabled PortOperAutoEdge : Disabled PortAdminLinkType : autoPortOperLinkType : point-to-point PortBPDUGuard : DisabledPortBPDUFilter : Disabled###### MST 0 vlans mapped :1-9, 11-19, 21-4094 PortState : discardingPortPriority : 128PortDesignatedRoot : 8000.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :8000.00d0.f836.ed70 PortDesignatedPort : 8002 PortForwardTransitions : 1 PortAdminPathCost : 20000 PortOperPathCost : 20000PortRole : alternatePort###### MST 1 vlans mapped :10PortState : forwardingPortPriority : 128PortDesignatedRoot : 0001.00d0.f823.ef82 PortDesignatedCost : 0 PortDesignatedBridge :0001.00d0.f836.ed70 PortDesignatedPort : 8002 PortForwardTransitions : 2 PortAdminPathCost : 20000 PortOperPathCost : 20000PortRole : rootPort###### MST 2 vlans mapped :20PortState : forwardingPortPriority : 128PortDesignatedRoot : 0002.001a.a909.8fe0 PortDesignatedCost : 0 PortDesignatedBridge :0002.00d0.f8d7.ae12 PortDesignatedPort : 8002 PortForwardTransitions : 2 PortAdminPathCost : 20000 PortOperPathCost : 20000PortRole : designatedPorts4#FAQ:1.1 RSTP和MSTP配合为什么有问题1.1.1 原因分析由于RSTP/MSTP的指定端口快速迁移机制，即接收到下游的agreement报文才能进行快速迁移。

dhcp+mstp+vrrp实验一、VLAN配置SW3配置sy sw3un in envlan batch 10 20 30 40interface g0/0/3port link-type accessport default vlan 10qinterface g0/0/4port link-type accessport default vlan 20SW4配置sy sw4un in envlan batch 10 20 30 40interface g0/0/3port link-type accessport default vlan 30qinterface g0/0/4port link-type accessport default vlan 40q二、Trunk配置SW3配置interface g0/0/1port link-type trunkport trunk allow-pass vlan 10 20interface g0/0/2port link-type trunkport trunk allow-pass vlan 10 20SW4配置interface g0/0/1port link-type trunkport trunk allow-pass vlan 30 40qinterface g0/0/2port link-type trunkport trunk allow-pass vlan 30 40q三、链路聚合SW1和SW2之间我们用两根网线，做成链路聚合。

SW1配置[hxsw1]int Eth-Trunk 1[hxsw1-Eth-Trunk1]mode lacp-static[hxsw1-Eth-Trunk1]trunkport g0/0/2[hxsw1-Eth-Trunk1]trunkport g0/0/3SW2配置[hxsw2]int Eth-Trunk 1[hxsw2-Eth-Trunk1]mode lacp-static[hxsw2-Eth-Trunk1]trunkport g0/0/1[hxsw2-Eth-Trunk1]trunkport g0/0/3[hxsw2-Eth-Trunk1]配置trunk，允许所有vlan通过sw1[sw1]int Eth-Trunk 1[sw1-Eth-Trunk1]port link-type trunk[sw1-Eth-Trunk1]port trunk allow-pass vlan 10 20 30 40Sw2[sw2]int Eth-Trunk 1[sw2-Eth-Trunk1]port link-type trunk[sw2-Eth-Trunk1]port trunk allow-pass vlan 10 20 30 40四、MSTP配置公共配置以下步骤必须在所有的有冗余的交换机上做，stp region-configurationregion-name pokes01 #域名pokes01revision-level 1 #修订好统一为1instance 1 vlan 10 20 #将vlan10/20映射到实例1里面instance 2 vlan 30 40active region-configuration #激活才能生效qSW1配置[sw1]stp instance 1 root primary #将SW1作为实例1的根桥[sw1]stp instance 2 root secondary #将SW1作为实例2的备份根桥SW2配置[sw2]stp instance 1 root secondary[sw2]stp instance 2 root primary五、VRRP配置sw1配置interface Vlanif10ip address 192.168.10.253 255.255.255.0 vrrp vrid 10 virtual-ip 192.168.10.1vrrp vrid 10 priority 120interface Vlanif20ip address 192.168.20.253 255.255.255.0 vrrp vrid 20 virtual-ip 192.168.20.1vrrp vrid 20 priority 120interface Vlanif30ip address 192.168.30.253 255.255.255.0 vrrp vrid 30 virtual-ip 192.168.30.1interface Vlanif40ip address 192.168.40.253 255.255.255.0 vrrp vrid 40 virtual-ip 192.168.40.1sw2配置interface Vlanif10ip address 192.168.10.254 255.255.255.0 vrrp vrid 10 virtual-ip 192.168.10.1interface Vlanif20ip address 192.168.20.254 255.255.255.0 vrrp vrid 20 virtual-ip 192.168.20.1interface Vlanif30ip address 192.168.30.254 255.255.255.0 vrrp vrid 30 virtual-ip 192.168.30.1vrrp vrid 30 priority 120interface Vlanif40ip address 192.168.40.254 255.255.255.0 vrrp vrid 40 virtual-ip 192.168.40.1vrrp vrid 40 priority 120六、DHCP配置以下步骤在sw1、sw2一样[sw1]dhcp enable[sw1]ip pool vlan_10 #创建地址池[sw1]network 192.168.10.0 mask 24[sw1]gateway-list 192.168.10.254 #创建网关[sw1]dns-list 223.5.5.5 #创建dns[sw1-Vlanif10]int Vlanif 10[sw1-Vlanif10]dhcp select global[sw1]ip pool vlan_20 #创建地址池[sw1]network 192.168.20.0 mask 24[sw1]gateway-list 192.168.20.254 #创建网关[sw1]dns-list 223.5.5.5 #创建dns[sw1-Vlanif10]int Vlanif 20[sw1-Vlanif10]dhcp select global[sw1]ip pool vlan_30 #创建地址池[sw1]network 192.168.30.0 mask 24[sw1]gateway-list 192.168.30.254 #创建网关[sw1]dns-list 223.5.5.5 #创建dns[sw1-Vlanif10]int Vlanif 30[sw1-Vlanif10]dhcp select global[sw1]ip pool vlan_40 #创建地址池[sw1]network 192.168.40.0 mask 24[sw1]gateway-list 192.168.40.254 #创建网关[sw1]dns-list 223.5.5.5 #创建dns[sw1-Vlanif10]int Vlanif 40[sw1-Vlanif10]dhcp select global。

Ø虚拟路由冗余协议ØVRRP相关术语ØVRRP工作过程Ø监视上行链路ØVRRP配置流程ØVRRP配置命令•目前在构建网络平台时，除了满足基本的业务承载、通信速率等需求外，还要考虑可用性，主要体现在稳定性和容错性两方面，即网络不间断运行的能力及出现故障后的快速恢复能力。

•MSTP、VRRP是分别基于二、三层的冗余备份技术，将两者有效融合，合理规划设计网络，可以在最大程度上保障网络通信的稳定。

•本次任务介绍两项技术的结合方法及部署应用。

Ø同一台VRRP设备可以加入多个VRRP组，然后设置其在不同的备份组中的优先级，以实现其在不同的备份组中具有不同的角色。

VRRP负载分担ØMSTP和VRRP在功能特性上有许多相似之处：•冗余设计，用户数据具有多条转发路径；•主备状态，能够提供主路径和备份路径；•负载分担，能够基于VLAN进行分流设计；•主备切换，能够根据拓扑变化自动切换通信线路。

Ø融合设计：•交换网络部署MSTP，实现二层链路冗余备份。

•三层转发通过部署VRRP，实现网关冗余。

•主备的一致性，即基于某VLAN的MSTP的根或备份根对应该VLAN的VRRP备份组的Master或Backup。

（1）理解VRRP负载分担的工作原理；（2）掌握MSTP+VRRP多备份组的结合及配置方法。

某公司网络部署两台核心交换机为多个业务网段提供冗余网关，同时交换网络也构建冗余链路。

管理员希望采用相应的技术手段，将二、三层冗余技术有效结合，最大程度地提高网络的稳定性和通信性能。

（1）拓扑图（2）操作流程•交换机配置VLAN及干道链路；•核心交换机S3、S4之间构建聚合链路（LACP），提升内网数据交换速率；•R1、S3和S4配置网络参数并运行OSPF协议，R1的loopback1接口IP地址1.1.1.1/32作为访问测试的目的地址。

vrrp+mstp配置实例1.switch a 、switch b选用两台锐捷的s5750 ；switch c 、shwich d 选2.用锐捷的s3750和s37603.全网共有两个业务vlan ,为vlan 10 、vlan 204.Switch a 、switch b 都分别对两vlan起用两vrrp组，实现两组的业务的负载分担和备份。

5.Switch a、switch b、switch c、switch d 都起用mstp多生成数协议，并且所有设备都属于同一个mst域，且实例映射一致（vlan 10映射实例1、vlan 20映射实例2 其他vlan映射默认实例0）。

6.Vlan 10业务以switch a为根桥；vlan 20业务以switch b为根桥；实现阻断网络环路，并能实现不同vlan数据流负载分担功能。

SW A与SW B配置基本相同第一步：开启生成树MSTP协议第二步：进入生成树配置模式，定义实例，修订号（不理解就当学号），名称（相当于学生名字）第三步：指定实例的优先级第四步：为不同的VLAN划分地址，而且对ＶＬＡＮ的优先级进行设置，以及转换虚拟路由地址SW C 与SW D 配置第一步：开启生成树MSTP协议第二步：进入生成树配置模式，定义实例，修订号（不理解就当学号），名称（相当于学生名字）第三步：指定实例的优先级部分命令如下生成树类spanning-tree 开启生成树（默认为mstp）spanning-tree mst configuration 进入mst配置模式revision 1 指定MST revision number 为1name region1 指定mst配置名称instance 0 vlan 1-9, 11-19, 21-4094 缺省情况下vlan都属于实例0instance 1 vlan 10 手工指定vlan10属于实例1instance 2 vlan 20 手工指定vlan20属于实例2spanning-tree mst 1 priority 0 指定实例1的优先级为0（为根桥）spanning-tree mst 2 priority 4096 指定实例2的优先级为4096VLAN优先级类及转换的IP地址interface VLAN 10 创建vlan 10 svi接口ip address 192.168.10.1 255.255.255.0 配置ip地址vrrp 1 priority 120 配置vrrp组1 优先级为120vrrp 1 ip 192.168.10.254 配置vrrp组1虚拟ip地址为192.168.10.254查看信息show vrrp 查看vrrp 信息show spanning-tree interface gigabitEthernet 0/1 查看g0/1接口stp状态信息链路聚合第一步：F0/23 、F0/24 加入Port-group 1inter range fa 0/23 -24port-group 1第二步：将AG1设为Trunkinter aggregateport 1switchport mode trunk。

高级应用-VRRP配置交换机VRRP配置1 功能需求及组网说明VRRP配置『配置环境参数』SwitchA通过E0/24与SwitchC相连，通过E0/23上行SwitchB通过E0/24与SwitchC相连，通过E0/23上行交换机SwitchA通过ethernet 0/24与SwitchB的ethernet 0/24连接到SwitchC SwitchA和SwitchB上分别创建两个虚接口，interface vlan 10和interface 20做为三层接口，其中interface vlan 10分别包含ethernet 0/24端口，interface 20包含ethernet 0/23端口，做为出口。

『组网需求』SwitchA和 SwitchB之间做VRRP，interface vlan 10做为虚拟网关接口，Switch A为主设备，允许抢占，SwitchB为从设备，PC1主机的网关设置为VRRP虚拟网关地址192.168.100.1，进行冗余备份。

访问远端主机PC2 10.1.1.1/242 数据配置步骤『两台交换机主备的配置流程』通常一个网络内的所有主机都设置一条缺省路由，主机发往外部网络的报文将通过缺省路由发往该网关设备，从而实现了主机与外部网络的通信。

当该设备发生故障时，本网段内所有以此设备为缺省路由下一跳的主机将断掉与外部的通信。

VRRP就是为解决上述问题而提出的，它为具有多播或广播能力的局域网（如以太网）设计。

VRRP可以将局域网的一组交换机（包括一个Master即活动交换机和若干个Backup即备份交换机）组织成一个虚拟路由器，这组交换机被称为一个备份组。

虚拟的交换机拥有自己的真实IP地址（这个IP地址可以和备份组内的某个交换机的接口地址相同），备份组内的交换机也有自己的IP地址。

局域网内的主机仅仅知道这个虚拟路由器的IP地址（通常被称为备份组的虚拟IP地址），而不知道具体的Master交换机的IP地址以及Backup交换机的IP地址。

VRRP实验：SW1的VRRP的配置：interface Vlan-interface1ip address 192.168.1.251 255.255.255.0vrrp vrid 1 virtual-ip 192.168.1.254vrrp vrid 1 priority 120vrrp vrid 1 preempt-mode timer delay 30 （延迟30秒抢占）vrrp vrid 1 track interface GigabitEthernet0/1/0 reduced 30SW2的VRRP的配置：interface Vlan-interface1ip address 192.168.1.252 255.255.255.0vrrp vrid 1 virtual-ip 192.168.1.254vrrp vrid 1 preempt-mode （默认已开启抢占功能）查看：[sw1]disp vrrp verboseIPv4 Standby Information:Run Mode : StandardRun Method : Virtual MACTotal number of virtual routers : 1Interface Vlan-interface1VRID : 1 Adver Timer : 1Admin Status : Up State : MasterConfig Pri : 120 Running Pri : 120Preempt Mode : Yes Delay Time : 30Auth Type : NoneVirtual IP : 192.168.1.254Virtual MAC : 0000-5e00-0101Master IP : 192.168.1.251VRRP Track Information:Track Interface: GE0/1/0 State : Up Pri Reduced : 30案例分析：在H3C三层交换机上配置MSTP + VRRP一．. 配置VRRP, 实现不同VLAN间的三层网关冗余及负均衡。

AR-1<Huawei><Huawei>undo terminal monitorInfo: Current terminal monitor is off.<Huawei>system-viewEnter system view, return user view with Ctrl+Z. [Huawei]interface ethernet 0/0/0[Huawei-Ethernet0/0/0]ip address 192.168.0.2 30 [Huawei-Ethernet0/0/0]interface ethernet0/0/1 [Huawei-Ethernet0/0/1]ip address 192.168.0.6 30 [Huawei-Ethernet0/0/1]q[Huawei]interface loopback 0[Huawei-LoopBack0]ip address 1.1.1.1 32[Huawei-LoopBack0]q[Huawei]ip route-static 172.16.0.0 24 192.168.0.1 [Huawei]ip route-static 172.16.1.0 24 192.168.0.5 [Huawei][Huawei][Huawei]ip route-static 0.0.0.0 0 192.168.0.5 [Huawei][Huawei]LSW2<Huawei>undo terminal monitorInfo: Current terminal monitor is off.<Huawei>system-viewEnter system view, return user view with Ctrl+Z.[Huawei][Huawei][Huawei]vlan batch 11 21 22 2 3Info: This operation may take a few seconds. Please wait for a moment...done.[Huawei]interface vlanif 11[Huawei-Vlanif11]ip address 192.168.1.2 28[Huawei-Vlanif11]vrrp vrid 1 virtual-ip 192.168.1.1[Huawei-Vlanif11]vrrp vrid 1 priority 200[Huawei-Vlanif11]vrrp vrid 1 track interface ethernet 0/0/5 reduced 150 [Huawei-Vlanif11]q[Huawei]interface vlanif 21[Huawei-Vlanif21]ip address 172.16.0.2 24[Huawei-Vlanif21]vrrp vrid 2 virtual-ip 172.16.0.1[Huawei-Vlanif21]vrrp vrid 2 priority 200[Huawei-Vlanif21]vrrp vrid 2 track interface ethernet 0/0/5 reduced 150 [Huawei-Vlanif21]q[Huawei]interface vlanif 22[Huawei-Vlanif22]ip address 172.16.1.2 24[Huawei-Vlanif22]vrrp vrid 3 virtual-ip 172.16.1.1[Huawei-Vlanif22]vrrp vrid 3 priority 80[Huawei-Vlanif22]q[Huawei]interface ethernet 0/0/1[Huawei-Ethernet0/0/1]port link-type trunk[Huawei-Ethernet0/0/1]port trunk allow-pass vlan 11 21[Huawei-Ethernet0/0/1]interface ethernet 0/0/2[Huawei-Ethernet0/0/2]port link-type trunk[Huawei-Ethernet0/0/2]port trunk allow-pass vlan 11 22[Huawei-Ethernet0/0/2]interface ethernet 0/0/3[Huawei-Ethernet0/0/3]port link-type trunk[Huawei-Ethernet0/0/3]port trunk allow-pass vlan 11 21 22[Huawei-Ethernet0/0/3]q[Huawei]stp enable[Huawei]stp mode mstp[Huawei]stp region-configuration[Huawei-mst-region]region-name 001[Huawei-mst-region]instance 1 vlan 11[Huawei-mst-region]instance 2 vlan 21[Huawei-mst-region]instance 3 vlan 22[Huawei-mst-region]active region-configurationInfo: This operation may take a few seconds. Please wait for a moment...done.[Huawei-mst-region]q[Huawei]stp instance 1 root primary[Huawei]stp instance 2 root primary[Huawei]stp instance 3 root secondary[Huawei]q<Huawei>sysEnter system view, return user view with Ctrl+Z.[Huawei]interface vlanif 2[Huawei-Vlanif2]ip address 192.168.0.1 30[Huawei-Vlanif2]interface ethernet 0/0/5[Huawei-Ethernet0/0/5]port link-type access[Huawei-Ethernet0/0/5]port default vlan 2[Huawei-Ethernet0/0/5]interface vlanif 3[Huawei-Vlanif3]ip address 192.168.0.9 30[Huawei-Vlanif3]interface ethernet0/0/4[Huawei-Ethernet0/0/4]port link-type access[Huawei-Ethernet0/0/4]port default vlan 3[Huawei-Ethernet0/0/4][Huawei-Ethernet0/0/4][Huawei-Ethernet0/0/4]q[Huawei]ip route-static 1.1.1.1 32 192.168.0.2[Huawei]ip route-static 0.0.0.0 0 192.168.0.10[Huawei] User interface con0 is availablePlease Press ENTER.<Huawei><Huawei><Huawei><Huawei><Huawei>dis vrrp briVRID State Interface Type Virtual IP----------------------------------------------------------------1 Master Vlanif11 Normal 192.168.1.12 Master Vlanif21 Normal 172.16.0.13 Backup Vlanif22 Normal 172.16.1.1---------------------------------------------------------------- Total:3 Master:2 Backup:1 Non-active:0<Huawei>Lsw1The device is running!<Huawei>undo terminal monitorInfo: Current terminal monitor is off.<Huawei>system-viewEnter system view, return user view with Ctrl+Z.[Huawei]vlan batch 11 21 22 2 3Info: This operation may take a few seconds. Please wait for a moment...done.[Huawei]interface vlanif 11[Huawei-Vlanif11]ip address 192.168.1.3 28[Huawei-Vlanif11]vrrp vrid 1 virtual-ip 192.168.1.1[Huawei-Vlanif11]q[Huawei]interface vlanif 21[Huawei-Vlanif21]ip address 172.16.0.3 24[Huawei-Vlanif21]vrrp vrid 2 virtual-ip 172.16.0.1[Huawei-Vlanif21]q[Huawei]interface vlanif 22[Huawei-Vlanif22]ip address 172.16.1.3 24[Huawei-Vlanif22]vrrp vrid 2 virtual-ip 172.16.1.1[Huawei-Vlanif22]vrrp vrid 2 priority 200[Huawei-Vlanif22]dis this#interface Vlanif22ip address 172.16.1.3 255.255.255.0vrrp vrid 2 virtual-ip 172.16.1.1vrrp vrid 2 priority 200#return[Huawei-Vlanif22]undo vrrp vrid 2 priority 200^Error:Too many parameters found at '^' position.[Huawei-Vlanif22][Huawei-Vlanif22]undo vrrp vrid 2[Huawei-Vlanif22]disthis^Error: Unrecognized command found at '^' position.[Huawei-Vlanif22]dis this#interface Vlanif22ip address 172.16.1.3 255.255.255.0#return[Huawei-Vlanif22]vrrp vrid 3 virtual-ip 172.16.1.1[Huawei-Vlanif22]vrrp vrid 3 priority 200[Huawei-Vlanif22]vrrp vrid 3 track interface ethernet0/0/5 reduced 150 [Huawei-Vlanif22]q[Huawei]interface ethernet 0/0/1[Huawei-Ethernet0/0/1]port link-type trunk[Huawei-Ethernet0/0/1]port trunk allow-pass vlan 11 21[Huawei-Ethernet0/0/1]interface ethernet 0/0/2[Huawei-Ethernet0/0/2]port link-type trunk[Huawei-Ethernet0/0/2]port trunk allow-pass vlan 11 22[Huawei-Ethernet0/0/2]interface ethernet0/0/3[Huawei-Ethernet0/0/3]port link-type trunk[Huawei-Ethernet0/0/3]port trunk allow-pass vlan 11 21 22[Huawei-Ethernet0/0/3]q[Huawei]stp enable[Huawei]stp mode mstp[Huawei]stp region-configuration[Huawei-mst-region]region-name 001[Huawei-mst-region]instance 1 vlan 11[Huawei-mst-region]instance 2 vlan 21[Huawei-mst-region]instance 3 vlan 22[Huawei-mst-region]active region-configurationInfo: This operation may take a few seconds. Please wait for a moment...done.[Huawei-mst-region]q[Huawei]stp instance 1 root secondary[Huawei]stp instance 2 root secondary[Huawei]stp instance 3 root primary[Huawei]q<Huawei>sysEnter system view, return user view with Ctrl+Z.[Huawei]interface vlanif 2[Huawei-Vlanif2]ip address 192.168.0.5 30[Huawei-Vlanif2]interface ethernet 0/0/5[Huawei-Ethernet0/0/5]port link-type access[Huawei-Ethernet0/0/5]port default vlan 2[Huawei-Ethernet0/0/5]interface vlanif 3[Huawei-Vlanif3]ip address 192.168.0.10 30[Huawei-Vlanif3]interface ethernet0/0/4[Huawei-Ethernet0/0/4]po li a[Huawei-Ethernet0/0/4]po de vl 3[Huawei-Ethernet0/0/4][Huawei-Ethernet0/0/4][Huawei-Ethernet0/0/4]q[Huawei]ip route-static 1.1.1.1 32 192.168.0.6[Huawei]ip route-static 0.0.0.0 0 192.168.0.9[Huawei]dis vrrp bri[Huawei]dis vrrp briefVRID State Interface Type Virtual IP----------------------------------------------------------------1 Backup Vlanif11 Normal 192.168.1.12 Backup Vlanif21 Normal 172.16.0.13 Master Vlanif22 Normal 172.16.1.1---------------------------------------------------------------- Total:3 Master:1 Backup:2 Non-active:0[Huawei]LSW3The device is running!<Huawei>undo terminal monitorInfo: Current terminal monitor is off.<Huawei>system-vew^Error: Unrecognized command found at '^' position.<Huawei>system-viewEnter system view, return user view with Ctrl+Z.[Huawei]vlan batch 11 22Info: This operation may take a few seconds. Please wait for a moment...done.[Huawei]interface vlanif 11[Huawei-Vlanif11]ip address 192.168.1.5 28[Huawei-Vlanif11]q[Huawei]interface ethernet 0/0/3[Huawei-Ethernet0/0/3]port link-type access[Huawei-Ethernet0/0/3]port default vlan 22[Huawei-Ethernet0/0/3]interface ethernet 0/0/1[Huawei-Ethernet0/0/1]port link-type trunk[Huawei-Ethernet0/0/1]port trunk allow-pass vlan 11 22[Huawei-Ethernet0/0/1]interface ethernet 0/0/2[Huawei-Ethernet0/0/2]port link-type trunk[Huawei-Ethernet0/0/2]port trunk allow-pass vlan 11 22[Huawei-Ethernet0/0/2]User interface con0 is availablePlease Press ENTER.LSW4Please press enter to start cmd line!<Huawei>undo terminal monitorInfo: Current terminal monitor is off.<Huawei>system-viewEnter system view, return user view with Ctrl+Z.[Huawei]vlan batch 11 21Info: This operation may take a few seconds. Please wait for a moment...done.[Huawei]interface vlanif 11[Huawei-Vlanif11]ip address 192.168.1.4 28[Huawei-Vlanif11]q[Huawei]interface ethernet0/0/3[Huawei-Ethernet0/0/3]port link-type access[Huawei-Ethernet0/0/3]port default vlan 21[Huawei-Ethernet0/0/3]interface ethernet 0/0/1[Huawei-Ethernet0/0/1]port link-type trunk[Huawei-Ethernet0/0/1]port trunk allow-pass vlan 11 21 [Huawei-Ethernet0/0/1]interface ethernet0/0/2[Huawei-Ethernet0/0/2]port link-type trunk[Huawei-Ethernet0/0/2]port trunk allow-pass vlan 11 21 [Huawei-Ethernet0/0/2]q[Huawei]vlan 11[Huawei-vlan11]description Guanli[Huawei-vlan11]dis this#vlan 11description Guanli#return[Huawei-vlan11] User interface con0 is availablePlease Press ENTER.。

一、创建vlanSwitchA：SwitchA#configure terminalEnter configuration commands, one per line. End with CNTL/Z.SwitchA(config)#vlan range 10,20,30,40SwitchA(config-vlan-range)#exitSwitchB同上；二、配置mst域SwitchA：SwitchA(config)#spanning-tree mst configurationSwitchA(config-mst)#instance 1 vlan 10,20 (将vlan10 20划分到实例1中) %Warning:you must create vlans before configuring instance-vlan relationship SwitchA(config-mst)#instance 2 vlan 30,40 (将vlan30 40划分到实例2中) %Warning:you must create vlans before configuring instance-vlan relationship SwitchA(config-mst)#exitSwitchB同上；三、配置Switch A为MST 0和MST 1的根桥，Switch B为MST 2的根桥SwitchA：(谁的优先级越高数值越小，设备的优先级高即数值越小为根桥)SwitchA(config)#spanning-tree mst 0 priority 4096SwitchA(config)#spanning-tree mst 1 priority 4096SwitchA(config)#spanning-tree mst 2 priority 8192SwitchB：SwitchB(config)#spanning-tree mst 2 priority 4096SwitchB(config)#spanning-tree mst 0 priority 8192SwitchB(config)#spanning-tree mst 1 priority 8192四、使能MSTPSwitchA：SwitchA(config)#spanning-treeEnable spanning-tree.SwitchB同上五、配置各VLAN的SVI，并加入对应的备份组，同时设置备份组的虚拟IP地址SwitchA：SwitchA(config)#interface vlan 10SwitchA(config-if-VLAN 10)#ip address 192.168.10.2 255.255.255.0SwitchA(config-if-VLAN 10)#vrrp 10 ip 192.168.10.1SwitchA(config)#interface vlan 20SwitchA(config-if-VLAN 20)#ip address 192.168.20.2 255.255.255.0 SwitchA(config-if-VLAN 20)#vrrp 20 ip 192.168.20.1SwitchA(config-if-VLAN 20)#exitSwitchA(config)#interface vlan 30SwitchA(config-if-VLAN 30)#ip address 192.168.30.2 255.255.255.0 SwitchA(config-if-VLAN 30)#vrrp 30 ip 192.168.30.1SwitchA(config-if-VLAN 30)#exitSwitchA(config)#interface vlan 40SwitchA(config-if-VLAN 40)#ip address 192.168.40.2 255.255.255.0 SwitchA(config-if-VLAN 40)#vrrp 40 ip 192.168.40.1SwitchA(config-if-VLAN 40)#exitSwitch B：SwitchB(config)#interface vlan 10SwitchB(config-if-VLAN 10)#ip address 192.168.10.3 255.255.255.0 SwitchB(config-if-VLAN 10)#vrrp 10 ip 192.168.10.1SwitchB(config-if-VLAN 10)#exitSwitchB(config)#interface vlan 20SwitchB(config-if-VLAN 20)#ip address 192.168.20.3 255.255.255.0 SwitchB(config-if-VLAN 20)#vrrp 20 ip 192.168.20.1SwitchB(config-if-VLAN 20)#exitSwitchB(config)#interface vlan 30SwitchB(config-if-VLAN 30)#ip address 192.168.30.3 255.255.255.0 SwitchB(config-if-VLAN 30)#vrrp 30 ip 192.168.30.1SwitchB(config-if-VLAN 30)#exitSwitchB(config)#interface vlan 40SwitchB(config-if-VLAN 40)#ip address 192.168.40.3 255.255.255.0 SwitchB(config-if-VLAN 40)#vrrp 40 ip 192.168.40.1SwitchB(config-if-VLAN 40)#exit六、配置优先级SwitchA：SwitchA(config)#interface vlan 10SwitchA(config-if-VLAN 10)#vrrp 10 priority 120 缺省条件下缺省为100 SwitchA(config-if-VLAN 10)#exitSwitchA(config)#interface vlan 20SwitchA(config-if-VLAN 20)#vrrp 20 priority 120SwitchA(config-if-VLAN 20)#exitSwitchB：SwitchB(config)#interface vlan 30SwitchB(config-if-VLAN 30)#vrrp 30 priority 120SwitchB(config)#interface vlan 40SwitchB(config-if-VLAN 40)#vrrp 40 priority 120SwitchB(config-if-VLAN 40)#exit*于是vlan10 20优先从SW A通过，vlan30 40优先从SW B通过，从而达到了冗余的条件七、将备份组的Master路由设备的上链口配置为VRRP组的监视接口。