本实验中,s5130交换机上联为DMZ_S5120和NW_S5500交换机
NW侧的二层聚合接口为BAG13
要使去往NW的VLAN10与VLAN20的数据流量均能通过二层聚合接口13,须配置二层聚合接口的链路类型为Trunk端口,并允许VLAN10和VLAN20的报文通过。
DMZ侧的二层聚合接口为BAG26
要使去往DMZ的VLAN110与VLAN120的数据流量均能通过二层聚合接口26,须配置二层聚合接口的链路类型为Trunk端口,并允许VLAN110和VLAN120的报文通过。
先配置二层链路聚合接口组,退出配置进入对应端口(所有需要加入的端口)依次加入聚合组,再次进入聚合组进行vlan放行,否则端口无法自动识别聚合组内vlan信息
1、配置NW_S5500交换机
1-1、创建二层聚合接口13
system-view
[Sysname] sysname NW
[NW] interface bridge-aggregation 13
[NW-Bridge-Aggregation13] quit
1-2、分别将端口GigabitEthernet1/0/13至 GigabitEthernet1/0/14加入到聚合组13中
[NW] interface gigabitethernet 1/0/13
[NW-gigabitethernet1/0/13] port link-aggregation group 13
[NW-gigabitethernet1/0/13] quit
[NW] interface gigabitethernet 1/0/14
[NW-gigabitethernet1/0/14] port link-aggregation group 13
[NW-gigabitethernet1/0/14] quit
1-3-配置二层聚合接口13为Trunk端口,并允许vlan10和20的报文通过
[NW] interface bridge-aggregation 13
[NW-Bridge-Aggregation13] port link-type trunk
[NW-Bridge-Aggregation13] port trunk permit vlan 10 20
Please wait... Done.
Configuring GigabitEthernet1/0/13... Done.
Configuring GigabitEthernet1/0/14... Done.
[NW-Bridge-Aggregation13] quit
2、配置S5130交换机(与NW交换机互联)
2-1、创建二层聚合接口13
system-view
[Sysname] sysname S5130
[S5130] interface bridge-aggregation 13
[S5130-Bridge-Aggregation13] quit
2-2、分别将端口GigabitEthernet1/0/13至 Ten-GigabitEthernet1/0/14加入到聚合组13中
[S5130] interface gigabitethernet 1/0/13
[S5130-gigabitethernet1/0/13] port link-aggregation group 13
[S5130-gigabitethernet1/0/13] quit
[S5130] interface gigabitethernet 1/0/14
[S5130-gigabitethernet1/0/14] port link-aggregation group 13
[S5130-gigabitethernet1/0/14] quit
2-3、配置二层聚合接口13为Trunk端口,并允许vlan10和20的报文通过。
[S5130] interface bridge-aggregation 13
[S5130-Bridge-Aggregation13] port link-type trunk
[S5130-Bridge-Aggregation13] port trunk permit vlan 10 20
Please wait... Done.
Configuring Ten-GigabitEthernet1/0/13... Done.
Configuring Ten-GigabitEthernet1/0/14... Done.
[S5130-Bridge-Aggregation13] quit
3、配置DMZ_S5120交换机
3-1、创建二层聚合接口26
system-view
[Sysname] sysname DMZ
[DMZ] interface bridge-aggregation 26
[DMZ-Bridge-Aggregation26] quit
3-2、分别将端口GigabitEthernet1/0/26至 GigabitEthernet1/0/27加入到聚合组26中
[DMZ] interface gigabitethernet 1/0/26
[DMZ-gigabitethernet1/0/26] port link-aggregation group 26
[DMZ-gigabitethernet1/0/26] quit
[DMZ] interface gigabitethernet 1/0/27
[DMZ-gigabitethernet1/0/27] port link-aggregation group 26
[DMZ-gigabitethernet1/0/27] quit
3-3、配置二层聚合接口26为Trunk端口,并允许vlan110和120的报文通过
[DMZ] interface bridge-aggregation 26
[DMZ-Bridge-Aggregation26] port link-type trunk
[DMZ-Bridge-Aggregation26] port trunk permit vlan 110 120
Please wait... Done.
Configuring GigabitEthernet1/0/26... Done.
Configuring GigabitEthernet1/0/27... Done.
[DMZ-Bridge-Aggregation26] quit
4、配置S5130堆叠交换机(与DMZ交换机互联)
4-1、创建二层聚合接口26
[S5130] interface bridge-aggregation 26
[S5130-Bridge-Aggregation26] quit
4-2、分别将端口Ten-GigabitEthernet1/0/26至 Ten-GigabitEthernet1/0/27加入到聚合组26中
[S5130] interface Ten-gigabitethernet 1/0/26
[S5130-Ten-gigabitethernet1/0/26] port link-aggregation group 26
[S5130-Ten-gigabitethernet1/0/26] quit
[S5130] interface Ten-gigabitethernet 1/0/27
[S5130-Ten-gigabitethernet1/0/27] port link-aggregation group 26
[S5130-gigabitethernet1/0/27] quit
4-3、配置二层聚合接口26为Trunk端口,并允许vlan110和120的报文通过
[S5130] interface bridge-aggregation 26
[S5130-Bridge-Aggregation26] port link-type trunk
[S5130-Bridge-Aggregation26] port trunk permit vlan 110 120
Please wait... Done.
Configuring Ten-GigabitEthernet1/0/26... Done.
Configuring Ten-GigabitEthernet1/0/27... Done.
[S5130-Bridge-Aggregation13] quit
链路聚合配置信息 display link-aggregation verbose
链路聚合配置信息 display link-aggregation summary