交换机 vrrp+mstp配置实例

 

交换机 vrrp+mstp配置实例

锐捷tac 贾文宇

 

一、        组网需求

 

1、switch a switch b选用两台锐捷的s5750 switch c shwich d

用锐捷的 s 3750 s3760

2、全网共有两个业务vlan , vlan 10 vlan 20

3、Switch a switch b 都分别对两vlan起用两vrrp组,实现两组的业务的负载分担和备份。

4、Switch aswitch bswitch cswitch d 都起用 mstp多生成数协议,并且所有设备都属于同一个mst域,且实例映射一致(vlan 10映射实例1vlan 20映射实例2 其他vlan映射默认实例0)。

5、Vlan 10业务以switch a为根桥; vlan 20业务以switch b为根桥;实现阻断网络环路,并能实现不同vlan数据流负载分担功能。

 

二、        组网图

三、        配置步骤

 

Switch a配置:

s1#show run

 

Building configuration...

Current configuration : 1651 bytes

 

!

version RGNOS 10.2.00(2), Release(29287)(Tue Dec 25 20:39:14 CST 2007 -ngcf49)

hostname s1

co-operate enable

!

!

!

vlan 1

!

vlan 10

!

vlan 20

!

!

no service password-encryption

!

spanning-tree     开启生成树(默认为mstp

spanning-tree mst configuration    进入mst配置模式

 revision 1      指定MST revision number 1

 name region1     指定mst配置名称

 instance 0 vlan 1-9, 11-19, 21- 4094    缺省情况下vlan都属于实例0

 instance 1 vlan 10     手工指定vlan10属于实例1

 instance 2 vlan 20     手工指定vlan20属于实例2

spanning-tree mst 1 priority 0    指定实例1的优先级为0(为根桥)

spanning-tree mst 2 priority 4096    指定实例2的优先级为 4096

interface GigabitEthernet 0/1

 switchport access vlan 10        配置g0/1属于vlan10

!

interface GigabitEthernet 0/2

 switchport access vlan 20        配置g0/2属于vlan 20

!

interface GigabitEthernet 0/3

!

.

.

interface GigabitEthernet 0/24      设置g0/24trunk接口且允许vlan10/20通过

 switchport mode trunk

!

interface VLAN 10               创建vlan 10 svi接口

 ip address 192.168.10.1 255.255.255.0   配置ip地址

 vrrp 1 priority 120           配置vrrp1 优先级为120

 vrrp 1 ip 192.168.10.254      配置vrrp 1虚拟ip地址为 192.168.10.254

!

interface VLAN 20              创建vlan 20 svi接口

 ip address 192.168.20.1 255.255.255.0       配置ip地址

 vrrp 2 ip 192.168.20.254       配置vrrp 2虚拟ip地址为 192.168.20.254

                            默认vrrp组的优先级为100默认不显示

!

line con 0

line vty 0 4

 login

 

s1#show vlan

VLAN Name                             Status    Ports

---- -------------------------------- --------- -------------------------------

---

   1 VLAN0001                         STATIC    Gi0/3, Gi0/4, Gi0/5, Gi0/6

 

                                                Gi0/7, Gi0/8, Gi0/9, Gi0/10

 

                                                Gi0/11, Gi0/12, Gi0/13, Gi0/14

 

                                                Gi0/15, Gi0/16, Gi0/17, Gi0/18

 

                                                Gi0/19, Gi0/20, Gi0/21, Gi0/22

 

                                                Gi0/23, Gi0/24

 

  10 VLAN0010                         STATIC    Gi0/1, Gi0/24

 

  20 VLAN0020                         STATIC    Gi0/2, Gi0/24

 

Switch b配置:

 

s2#show run

 

Building configuration...

Current configuration : 1607 bytes

 

!

version RGNOS 10.2.00(2), Release(27932)(Thu Dec 13 10:32:09 CST 2007 -ngcf31)

hostname s2

 

!

!

!

vlan 1

!

vlan 10

!

vlan 20

!

!

no service password-encryption

!

spanning-tree

spanning-tree mst configuration

 revision 1

 name region1

 instance 0 vlan 1-9, 11-19, 21- 4094

 instance 1 vlan 10

 instance 2 vlan 20

spanning-tree mst 1 priority 4096

spanning-tree mst 2 priority 0

interface GigabitEthernet 0/1

 switchport access vlan 10

!

interface GigabitEthernet 0/2

 switchport access vlan 20

!

.

.

interface GigabitEthernet 0/24

 switchport mode trunk

!

interface VLAN 10

 ip address 192.168.10.2 255.255.255.0

 vrrp 1 ip 192.168.10.254

!

interface VLAN 20

 ip address 192.168.20.2 255.255.255.0

 vrrp 2 priority 120

 vrrp 2 ip 192.168.20.254

!

line con 0

line vty 0 4

 login

!

!

end

s2#show vlan

VLAN Name                             Status    Ports

---- -------------------------------- --------- --------------------------------

 

---

   1 VLAN0001                         STATIC    Gi0/3, Gi0/4, Gi0/5, Gi0/6

 

 

                                                Gi0/7, Gi0/8, Gi0/9, Gi0/10

 

 

                                                Gi0/11, Gi0/12, Gi0/13, Gi0/14

 

 

                                                Gi0/15, Gi0/16, Gi0/17, Gi0/18

 

 

                                                Gi0/19, Gi0/20, Gi0/21, Gi0/22

 

 

                                                Gi0/23, Gi0/24

 

 

  10 VLAN0010                         STATIC    Gi0/1, Gi0/24

 

 

  20 VLAN0020                         STATIC    Gi0/2, Gi0/24

 

Switch c配置:

 

s3#show run

 

Building configuration...

Current configuration : 1540 bytes

 

!

version RGNOS 10.2.00(2), Release(28794)(Fri Dec 21 09:27:15 CST 2007 -ngcf32)

hostname s3

!

vlan 1

!

vlan 10

!

!

service password-encryption

!

spanning-tree

spanning-tree mst configuration

 revision 1

 name region1

 instance 0 vlan 1-9, 11-19, 21- 4094

 instance 1 vlan 10

 instance 2 vlan 20

spanning-tree mst 1 priority 0

spanning-tree mst 2 priority 4096

interface FastEthernet 0/1

 switchport access vlan 10

!

interface FastEthernet 0/2

 switchport access vlan 10

!

.

.

interface GigabitEthernet 0/25

!

interface GigabitEthernet 0/26

!

interface GigabitEthernet 0/27

!

interface GigabitEthernet 0/28

!

interface VLAN 10

 ip address 192.168.10.3 255.255.255.0

!

ip route 0.0.0.0 0.0.0.0 192.168.10.254

!

!

line con 0

line vty 0 4

 login

 

Switch d配置:

 

s4#show run

 

Building configuration...

Current configuration : 1066 bytes

 

!

version RGNOS 10.2.00(2), Release(27932)(Thu Dec 13 10:31:41 CST 2007 -ngcf32)

hostname s4

 

!

vlan 1

!

vlan 20

!

!

no service password-encryption

!

spanning-tree

spanning-tree mst configuration

 revision 1

 name region1

 instance 0 vlan 1-9, 11-19, 21- 4094

 instance 1 vlan 10

 instance 2 vlan 20

spanning-tree mst 1 priority 4096

spanning-tree mst 2 priority 0

interface GigabitEthernet 0/1

 switchport access vlan 20

!

interface GigabitEthernet 0/2

 switchport access vlan 20

!

.

.

interface GigabitEthernet 0/12

!

interface VLAN 20

 ip address 192.168.20.3 255.255.255.0

!

!

!

!

ip route 0.0.0.0 0.0.0.0 192.168.20.254

!

!

line con 0

line vty 0 4

 login

!

四、        查看vrrpmstp信息

 

Switch a 信息

 

s1#show vrrp      查看vrrp 信息

VLAN 10 - Group 1

  State is Master

  Virtual IP address is 192.168.10.254 configured

  Virtual MAC address is 0000.5e00.0101

  Advertisement interval is 1 sec

  Preemption is enabled

    min delay is 0 sec

  Priority is 120

  Master Router is 192.168.10.1 (local), priority is 120

  Master Advertisement interval is 1 sec

  Master Down interval is 3 sec

VLAN 20 - Group 2

  State is Backup

  Virtual IP address is 192.168.20.254 configured

  Virtual MAC address is 0000.5e00.0102

  Advertisement interval is 1 sec

  Preemption is enabled

    min delay is 0 sec

  Priority is 100

  Master Router is 192.168.20.2 , priority is 120

  Master Advertisement interval is 1 sec

  Master Down interval is 3 sec

s1#

s1#s1#

s1#show spanning-tree interface gigabitEthernet 0/1  查看g0/1接口stp状态信息

 

PortAdminPortFast : Disabled

PortOperPortFast : Disabled

PortAdminAutoEdge : Enabled

PortOperAutoEdge : Disabled

PortAdminLinkType : auto

PortOperLinkType : point-to-point

PortBPDUGuard : Disabled

PortBPDUFilter : Disabled

 

###### MST 0 vlans mapped :1-9, 11-19, 21- 4094

PortState : forwarding

PortPriority : 128

PortDesignatedRoot : 8000.001a.a909.8fe0

PortDesignatedCost : 0

PortDesignatedBridge :8000.00d0.f836.ed70

PortDesignatedPort : 8001

PortForwardTransitions : 6

PortAdminPathCost : 200000

PortOperPathCost : 200000

PortRole : designatedPort

 

###### MST 1 vlans mapped :10

PortState : forwarding

PortPriority : 128

PortDesignatedRoot : 0001.00d0.f823.ef82

PortDesignatedCost : 0

PortDesignatedBridge :0001.00d0.f823.ef82

PortDesignatedPort : 8001

PortForwardTransitions : 5

PortAdminPathCost : 200000

PortOperPathCost : 200000

PortRole : rootPort

 

###### MST 2 vlans mapped :20

PortState : forwarding

PortPriority : 128

PortDesignatedRoot : 0002.001a.a909.8fe0

PortDesignatedCost : 0

PortDesignatedBridge :1002.00d0.f836.ed70

PortDesignatedPort : 8001

PortForwardTransitions : 4

PortAdminPathCost : 200000

PortOperPathCost : 200000

PortRole : designatedPort

s1#

s1#

s1#show spanning-tree interface gigabitEthernet 0/2  查看g0/2接口stp状态信息

 

PortAdminPortFast : Disabled

PortOperPortFast : Disabled

PortAdminAutoEdge : Enabled

PortOperAutoEdge : Disabled

PortAdminLinkType : auto

PortOperLinkType : point-to-point

PortBPDUGuard : Disabled

PortBPDUFilter : Disabled

 

###### MST 0 vlans mapped :1-9, 11-19, 21- 4094

PortState : forwarding

PortPriority : 128

PortDesignatedRoot : 8000.001a.a909.8fe0

PortDesignatedCost : 0

PortDesignatedBridge :8000.00d0.f836.ed70

PortDesignatedPort : 8002

PortForwardTransitions : 5

PortAdminPathCost : 20000

PortOperPathCost : 20000

PortRole : designatedPort

 

###### MST 1 vlans mapped :10

PortState : forwarding

PortPriority : 128

PortDesignatedRoot : 0001.00d0.f823.ef82

PortDesignatedCost : 0

PortDesignatedBridge :0001.00d0.f836.ed70

PortDesignatedPort : 8002

PortForwardTransitions : 4

PortAdminPathCost : 20000

PortOperPathCost : 20000

PortRole : designatedPort

 

###### MST 2 vlans mapped :20

PortState : discarding

PortPriority : 128

PortDesignatedRoot : 0002.001a.a909.8fe0

PortDesignatedCost : 0

PortDesignatedBridge :0002.00d0.f8d7.ae12

PortDesignatedPort : 8002

PortForwardTransitions : 3

PortAdminPathCost : 20000

PortOperPathCost : 20000

PortRole : alternatePort

s1#

s1#

s1#show spanning-tree interface gigabitEthernet 0/24 g0/24接口stp状态信息

 

PortAdminPortFast : Disabled

PortOperPortFast : Disabled

PortAdminAutoEdge : Enabled

PortOperAutoEdge : Disabled

PortAdminLinkType : auto

PortOperLinkType : point-to-point

PortBPDUGuard : Disabled

PortBPDUFilter : Disabled

 

###### MST 0 vlans mapped :1-9, 11-19, 21- 4094

PortState : forwarding

PortPriority : 128

PortDesignatedRoot : 8000.001a.a909.8fe0

PortDesignatedCost : 0

PortDesignatedBridge :8000.001a.a909.8fe0

PortDesignatedPort : 8018

PortForwardTransitions : 5

PortAdminPathCost : 20000

PortOperPathCost : 20000

PortRole : rootPort

 

###### MST 1 vlans mapped :10

PortState : forwarding

PortPriority : 128

PortDesignatedRoot : 0001.00d0.f823.ef82

PortDesignatedCost : 0

PortDesignatedBridge :0001.00d0.f836.ed70

PortDesignatedPort : 8018

PortForwardTransitions : 5

PortAdminPathCost : 20000

PortOperPathCost : 20000

PortRole : designatedPort

 

###### MST 2 vlans mapped :20

PortState : forwarding

PortPriority : 128

PortDesignatedRoot : 0002.001a.a909.8fe0

PortDesignatedCost : 0

PortDesignatedBridge :0002.001a.a909.8fe0

PortDesignatedPort : 8018

PortForwardTransitions : 4

PortAdminPathCost : 20000

PortOperPathCost : 20000

PortRole : rootPort

s1#

 

 

 

Switch b 信息

 

s2#show vrrp

VLAN 10 - Group 1

  State is Backup

  Virtual IP address is 192.168.10.254 configured

  Virtual MAC address is 0000.5e00.0101

  Advertisement interval is 1 sec

  Preemption is enabled

    min delay is 0 sec

  Priority is 100

  Master Router is 192.168.10.1 , priority is 120

  Master Advertisement interval is 1 sec

  Master Down interval is 3 sec

VLAN 20 - Group 2

  State is Master

  Virtual IP address is 192.168.20.254 configured

  Virtual MAC address is 0000.5e00.0102

  Advertisement interval is 1 sec

  Preemption is enabled

    min delay is 0 sec

  Priority is 120

  Master Router is 192.168.20.2 (local), priority is 120

  Master Advertisement interval is 1 sec

  Master Down interval is 3 sec

s2#

s2#

s2#

s2#

s2#

s2#

s2#show spanning-tree interface gigabitEthernet 0/1

 

PortAdminPortFast : Disabled

PortOperPortFast : Disabled

PortAdminAutoEdge : Enabled

PortOperAutoEdge : Disabled

PortAdminLinkType : auto

PortOperLinkType : point-to-point

PortBPDUGuard : Disabled

PortBPDUFilter : Disabled

 

###### MST 0 vlans mapped :1-9, 11-19, 21- 4094

PortState : forwarding

PortPriority : 128

PortDesignatedRoot : 8000.001a.a909.8fe0

PortDesignatedCost : 0

PortDesignatedBridge :8000.001a.a909.8fe0

PortDesignatedPort : 8001

PortForwardTransitions : 1

PortAdminPathCost : 200000

PortOperPathCost : 200000

PortRole : designatedPort

 

###### MST 1 vlans mapped :10

PortState : forwarding

PortPriority : 128

PortDesignatedRoot : 0001.00d0.f823.ef82

PortDesignatedCost : 0

PortDesignatedBridge :0001.00d0.f823.ef82

PortDesignatedPort : 8002

PortForwardTransitions : 2

PortAdminPathCost : 200000

PortOperPathCost : 200000

PortRole : rootPort

 

###### MST 2 vlans mapped :20

PortState : forwarding

PortPriority : 128

PortDesignatedRoot : 0002.001a.a909.8fe0

PortDesignatedCost : 0

PortDesignatedBridge :0002.001a.a909.8fe0

PortDesignatedPort : 8001

PortForwardTransitions : 1

PortAdminPathCost : 200000

PortOperPathCost : 200000

PortRole : designatedPort

s2#

s2#

s2#

s2#show spanning-tree interface gigabitEthernet 0/2

 

PortAdminPortFast : Disabled

PortOperPortFast : Disabled

PortAdminAutoEdge : Enabled

PortOperAutoEdge : Disabled

PortAdminLinkType : auto

PortOperLinkType : point-to-point

PortBPDUGuard : Disabled

PortBPDUFilter : Disabled

 

###### MST 0 vlans mapped :1-9, 11-19, 21- 4094

PortState : forwarding

PortPriority : 128

PortDesignatedRoot : 8000.001a.a909.8fe0

PortDesignatedCost : 0

PortDesignatedBridge :8000.001a.a909.8fe0

PortDesignatedPort : 8002

PortForwardTransitions : 1

PortAdminPathCost : 20000

PortOperPathCost : 20000

PortRole : designatedPort

 

###### MST 1 vlans mapped :10

PortState : forwarding

PortPriority : 128

PortDesignatedRoot : 0001.00d0.f823.ef82

PortDesignatedCost : 0

PortDesignatedBridge :1001.001a.a909.8fe0

PortDesignatedPort : 8002

PortForwardTransitions : 2

PortAdminPathCost : 20000

PortOperPathCost : 20000

PortRole : designatedPort

 

###### MST 2 vlans mapped :20

PortState : forwarding

PortPriority : 128

PortDesignatedRoot : 0002.001a.a909.8fe0

PortDesignatedCost : 0

PortDesignatedBridge :0002.001a.a909.8fe0

PortDesignatedPort : 8002

PortForwardTransitions : 1

PortAdminPathCost : 20000

PortOperPathCost : 20000

PortRole : designatedPort

s2#

s2#

s2#

s2#

s2#show spanning-tree interface gigabitEthernet 0/24

 

PortAdminPortFast : Disabled

PortOperPortFast : Disabled

PortAdminAutoEdge : Enabled

PortOperAutoEdge : Disabled

PortAdminLinkType : auto

PortOperLinkType : point-to-point

PortBPDUGuard : Disabled

PortBPDUFilter : Disabled

 

###### MST 0 vlans mapped :1-9, 11-19, 21- 4094

PortState : forwarding

PortPriority : 128

PortDesignatedRoot : 8000.001a.a909.8fe0

PortDesignatedCost : 0

PortDesignatedBridge :8000.001a.a909.8fe0

PortDesignatedPort : 8018

PortForwardTransitions : 1

PortAdminPathCost : 20000

PortOperPathCost : 20000

PortRole : designatedPort

 

###### MST 1 vlans mapped :10

PortState : discarding

PortPriority : 128

PortDesignatedRoot : 0001.00d0.f823.ef82

PortDesignatedCost : 0

PortDesignatedBridge :0001.00d0.f836.ed70

PortDesignatedPort : 8018

PortForwardTransitions : 1

PortAdminPathCost : 20000

PortOperPathCost : 20000

PortRole : alternatePort

 

###### MST 2 vlans mapped :20

PortState : forwarding

PortPriority : 128

PortDesignatedRoot : 0002.001a.a909.8fe0

PortDesignatedCost : 0

PortDesignatedBridge :0002.001a.a909.8fe0

PortDesignatedPort : 8018

PortForwardTransitions : 1

PortAdminPathCost : 20000

PortOperPathCost : 20000

PortRole : designatedPort

s2#

 

 

Switch c 信息

 

s3#show spanning-tree interface fastEthernet 0/1

 

PortAdminPortFast : Disabled

PortOperPortFast : Disabled

PortAdminAutoEdge : Enabled

PortOperAutoEdge : Disabled

PortAdminLinkType : auto

PortOperLinkType : point-to-point

PortBPDUGuard : Disabled

PortBPDUFilter : Disabled

 

###### MST 0 vlans mapped :1-9, 11-19, 21- 4094

PortState : discarding

PortPriority : 128

PortDesignatedRoot : 8000.001a.a909.8fe0

PortDesignatedCost : 0

PortDesignatedBridge :8000.00d0.f836.ed70

PortDesignatedPort : 8001

PortForwardTransitions : 1

PortAdminPathCost : 200000

PortOperPathCost : 200000

PortRole : alternatePort

 

###### MST 1 vlans mapped :10

PortState : forwarding

PortPriority : 128

PortDesignatedRoot : 0001.00d0.f823.ef82

PortDesignatedCost : 0

PortDesignatedBridge :0001.00d0.f823.ef82

PortDesignatedPort : 8001

PortForwardTransitions : 1

PortAdminPathCost : 200000

PortOperPathCost : 200000

PortRole : designatedPort

 

###### MST 2 vlans mapped :20

PortState : discarding

PortPriority : 128

PortDesignatedRoot : 0002.001a.a909.8fe0

PortDesignatedCost : 0

PortDesignatedBridge :1002.00d0.f836.ed70

PortDesignatedPort : 8001

PortForwardTransitions : 0

PortAdminPathCost : 200000

PortOperPathCost : 200000

PortRole : alternatePort

s3#

s3#

s3#

s3#

s3#show spanning-tree interface fastEthernet 0/2

 

PortAdminPortFast : Disabled

PortOperPortFast : Disabled

PortAdminAutoEdge : Enabled

PortOperAutoEdge : Disabled

PortAdminLinkType : auto

PortOperLinkType : point-to-point

PortBPDUGuard : Disabled

PortBPDUFilter : Disabled

 

###### MST 0 vlans mapped :1-9, 11-19, 21- 4094

PortState : forwarding

PortPriority : 128

PortDesignatedRoot : 8000.001a.a909.8fe0

PortDesignatedCost : 0

PortDesignatedBridge :8000.001a.a909.8fe0

PortDesignatedPort : 8001

PortForwardTransitions : 1

PortAdminPathCost : 200000

PortOperPathCost : 200000

PortRole : rootPort

 

###### MST 1 vlans mapped :10

PortState : forwarding

PortPriority : 128

PortDesignatedRoot : 0001.00d0.f823.ef82

PortDesignatedCost : 0

PortDesignatedBridge :0001.00d0.f823.ef82

PortDesignatedPort : 8002

PortForwardTransitions : 2

PortAdminPathCost : 200000

PortOperPathCost : 200000

PortRole : designatedPort

 

###### MST 2 vlans mapped :20

PortState : forwarding

PortPriority : 128

PortDesignatedRoot : 0002.001a.a909.8fe0

PortDesignatedCost : 0

PortDesignatedBridge :0002.001a.a909.8fe0

PortDesignatedPort : 8001

PortForwardTransitions : 1

PortAdminPathCost : 200000

PortOperPathCost : 200000

PortRole : rootPort

s3#

 

 

Switch d 信息

 

s4#show spanning-tree interface gigabitEthernet 0/1

 

PortAdminPortFast : Disabled

PortOperPortFast : Disabled

PortAdminAutoEdge : Enabled

PortOperAutoEdge : Disabled

PortAdminLinkType : auto

PortOperLinkType : point-to-point

PortBPDUGuard : Disabled

PortBPDUFilter : Disabled

 

###### MST 0 vlans mapped :1-9, 11-19, 21- 4094

PortState : forwarding

PortPriority : 128

PortDesignatedRoot : 8000.001a.a909.8fe0

PortDesignatedCost : 0

PortDesignatedBridge :8000.001a.a909.8fe0

PortDesignatedPort : 8002

PortForwardTransitions : 1

PortAdminPathCost : 20000

PortOperPathCost : 20000

PortRole : rootPort

 

###### MST 1 vlans mapped :10

PortState : discarding

PortPriority : 128

PortDesignatedRoot : 0001.00d0.f823.ef82

PortDesignatedCost : 0

PortDesignatedBridge :1001.001a.a909.8fe0

PortDesignatedPort : 8002

PortForwardTransitions : 1

PortAdminPathCost : 20000

PortOperPathCost : 20000

PortRole : alternatePort

 

###### MST 2 vlans mapped :20

PortState : forwarding

PortPriority : 128

PortDesignatedRoot : 0002.001a.a909.8fe0

PortDesignatedCost : 0

PortDesignatedBridge :0002.001a.a909.8fe0

PortDesignatedPort : 8002

PortForwardTransitions : 1

PortAdminPathCost : 20000

PortOperPathCost : 20000

PortRole : rootPort

s4#

s4#

s4#

s4#show spanning-tree interface gigabitEthernet 0/2

 

PortAdminPortFast : Disabled

PortOperPortFast : Disabled

PortAdminAutoEdge : Enabled

PortOperAutoEdge : Disabled

PortAdminLinkType : auto

PortOperLinkType : point-to-point

PortBPDUGuard : Disabled

PortBPDUFilter : Disabled

 

###### MST 0 vlans mapped :1-9, 11-19, 21- 4094

PortState : discarding

PortPriority : 128

PortDesignatedRoot : 8000.001a.a909.8fe0

PortDesignatedCost : 0

PortDesignatedBridge :8000.00d0.f836.ed70

PortDesignatedPort : 8002

PortForwardTransitions : 1

PortAdminPathCost : 20000

PortOperPathCost : 20000

PortRole : alternatePort

 

###### MST 1 vlans mapped :10

PortState : forwarding

PortPriority : 128

PortDesignatedRoot : 0001.00d0.f823.ef82

PortDesignatedCost : 0

PortDesignatedBridge :0001.00d0.f836.ed70

PortDesignatedPort : 8002

PortForwardTransitions : 2

PortAdminPathCost : 20000

PortOperPathCost : 20000

PortRole : rootPort

 

###### MST 2 vlans mapped :20

PortState : forwarding

PortPriority : 128

PortDesignatedRoot : 0002.001a.a909.8fe0

PortDesignatedCost : 0

PortDesignatedBridge :0002.00d0.f8d7.ae12

PortDesignatedPort : 8002

PortForwardTransitions : 2

PortAdminPathCost : 20000

PortOperPathCost : 20000

PortRole : designatedPort

s4#

 

FAQ:

1.1         RSTPMSTP配合为什么有问题

1.1.1       原因分析

由于RSTP/MSTP的指定端口快速迁移机制,即接收到下游的agreement报文才能进行快速迁移。引发这样的问题:上游桥运行RSTP,下游运行MSTP,此时,RSTP不向下游发agreement报文,MSTP的根端口没有接收到agreement报文,则表示MSTP没有同步,这就意味着根端口不向上游RSTP指定端口发agreement。所以,MSTP域内的agreement被抑制,上游RSTP指定端口只能在2倍的Forward Delay延时后Forwarding

1.1.2       解决办法

将运行MSTP协议的桥作为上游,运行RSTP的桥做下游。因为RSTP的同步不要求根端口接收到上游的agreement,所以在这种情况下上游MSTP指定端口可以接收到下游RSTP根端口发送的agreement,就可以快速迁移了。

 

1.2         TC报文的来源有哪些

TC报文可能来自于以下几种情况:

1)连接终端的端口使能了STP,但是没有配置边缘端口,当终端发生重启等情况导致该端口发生链路状态变化时,该端口会产生TC报文并向整个二层网络中传播;

2)因更改配置参数,网络中设备或链路出现故障等原因,引发STP重计算时,有可能产生TC报文;

3)来自用户设备的攻击TC报文也可能传入其所接入的二层网络;

1.3         如何抑制TC报文

了解了TC报文的来源,就可以有针对的进行TC的抑止了。主要的措施如下:

1)连接终端的端口使能了STP,配置边缘端口,同时启用BPDU保护;或者连接终端的端口上去使能STP;或者根据具体应用情况,在连接终端的端口上配置BPDU Drop

2)在开局时就做好网络规划。除非征的局方同意,杜绝在现网更改配置参数;

3)在我司设备的网络和其他厂商用户设备的网络交界处,只有单条路径连接的,在该链路所连端口上配置STP Disable或者BPDU Drop;存在多条路径的,对其异常收TC情况进行监控和检查;

而对于网络中设备或链路出现故障等原因,引发STP重计算,产生的TC报文是正常协议运行的TC报文,不是故障;

1.4         TC报文如何产生和进行转发的

TC报文产生的根源是两个:

1)设备主动发送;

2)恶意用户攻击;

设备主动发送TC报文需要满足下面两个条件:

1)非边缘端口角色从DisableAlternateBackupr端口变为RootDesginMaster

2)端口状态从Discarding变为Forwarding

设备转发TC报文有两个步骤:

1)设备从RootDesginMaster端口上收到TC报文

1)向本交换机的所有非边缘的RootDesginMaster端口上发送出去;

 

 

你可能感兴趣的:(技术-switch)