首页 > 代码库 > 双链路的负载分担2——MSTP+VRRP+OSPF

双链路的负载分担2——MSTP+VRRP+OSPF

2024-07-10 02:54:50   223人阅读

网络拓扑：

wKioL1Ovwj3SfW14AAVUXXf0mM0765.jpg

eNSP模拟器实验拓扑：

wKioL1Ovw0rhd-GkAAVt4F6jsBM159.jpg

网络地址规划：vlan2：10.147.140.0/26  Gateway: 10.147.140.62

              vlan3: 10.147.140.64/26 Gateway: 10.147.140.126

              vlan4: 10.147.140.128/26 Gateway: 10.147.140.190

              vlan5: 10.147.140.192/26 Gateway: 10.147.140.254

路由地址规划：

              vlan10: 10.147.141.128/30

              vlan11: 10.147.141.132/30

              vlan12: 10.147.141.136/30

              vlan13: 10.147.141.140/30  

配置思路：

  1. 所有的交换机同属于同一个MSTP域（office_area），创建4个实例，分别为instance 1 vlan 2；instance 2 vlan 3；instance 3 vlan 4；instance 4 vlan 5。

  2. 接入层交换机手工配置开销值阻塞端口，核心层手工指定域根，汇聚层到核心层由stp协议自动阻塞端口。

一、接入层交换机配置

◆ 接入层<接入1>的配置：

  ① 基本配置：关闭消息提示和命名；

  • <Huawei>system-view 

  • Enter system view, return user view with Ctrl+Z.

  • [Huawei]undo info-center enable 

  • Info: Information center is disabled.

  • [Huawei]sysname Access_1

 ② 启用MSTP协议，配置域名和实例，并激活；

  • [Access_1]stp region-configuration 

  • [Access_1-mst-region]region-name office_area

  • [Access_1-mst-region]instance 1 vlan 2

  • [Access_1-mst-region]instance 2 vlan 3

  • [Access_1-mst-region]instance 3 vlan 4

  • [Access_1-mst-region]instance 4 vlan 5

  • [Access_1-mst-region]active region-configuration

  • Info: This operation may take a few seconds. Please wait for a moment...done.

  • [Access_1-mst-region]quit

 ③ 阻塞交换机端口，采用默认的路径计算方法；

  • [Access_1]inter g0/0/2

  • [Access_1-GigabitEthernet0/0/2]stp instance 3 cost 100 （千兆口默认cost值为1）

  • [Access_1-GigabitEthernet0/0/2]quit

  • [Access_1]interface g0/0/1

  • [Access_1-GigabitEthernet0/0/1]stp instance 4 cost 100 （千兆口默认cost值为1）

  • [Access_1-GigabitEthernet0/0/1]quit


◆ 接入层<接入3>的配置：

  ① 基本配置：关闭消息提示和命名；

  • <Huawei>system-view 

  • Enter system view, return user view with Ctrl+Z.

  • [Huawei]undo info-center enable 

  • Info: Information center is disabled.

  • [Huawei]sysname Access_3

 ② 启用MSTP协议，配置域名和实例，并激活；

  • [Access_3]stp region-configuration 

  • [Access_3-mst-region]region-name office_area

  • [Access_3-mst-region]instance 1 vlan 2

  • [Access_3-mst-region]instance 2 vlan 3

  • [Access_3-mst-region]instance 3 vlan 4

  • [Access_3-mst-region]instance 4 vlan 5

  • [Access_3-mst-region]active region-configuration

  • Info: This operation may take a few seconds. Please wait for a moment...done.

  • [Access_1-mst-region]quit

 ③ 阻塞交换机端口，采用默认的路径计算方法；

  • [Access_3]inter g0/0/2

  • [Access_3-GigabitEthernet0/0/2]stp instance 1 cost 100 （千兆口默认cost值为1）

  • [Access_3-GigabitEthernet0/0/2]quit

  • [Access_3]interface g0/0/1

  • [Access_3-GigabitEthernet0/0/1]stp instance 2 cost 100 （千兆口默认cost值为1）

  • [Access_3-GigabitEthernet0/0/1]quit

二、汇聚层交换机的配置

◆ 汇聚层<汇聚A>的配置：

 ① 基本配置：关闭消息提示和命名；

  • <Huawei>system-view 

  • Enter system view, return user view with Ctrl+Z.

  • [Huawei]undo info-center enable 

  • Info: Information center is disabled.

  • [Huawei]sysname Convergence_A

 ② 启用MSTP协议，配置域名和实例，并激活；

  • [Convergence_A]stp region-configuration 

  • [Convergence_A-mst-region]region-name office_area

  • [Convergence_A-mst-region]instance 1 vlan 2

  • [Convergence_A-mst-region]instance 2 vlan 3

  • [Convergence_A-mst-region]instance 3 vlan 4

  • [Convergence_A-mst-region]instance 4 vlan 5

  • [Convergence_A-mst-region]active region-configuration

  • Info: This operation may take a few seconds. Please wait for a moment...done.

  • [Convergence_A-mst-region]quit

其他3个汇聚交换机的MSTP配置和<汇聚1>一样。

三、核心层交换机的配置

◆ 核心层<核心1>的MSTP配置：

 ① 基本配置：关闭消息提示和命名；

  • <Huawei>system-view 

  • Enter system view, return user view with Ctrl+Z.

  • [Huawei]undo info-center enable 

  • Info: Information center is disabled.

  • [Huawei]sysname Core_1

 ② 启用MSTP协议，配置域名和实例，并激活；

  • [Core_1]stp region-configuration 

  • [Core_1-mst-region]region-name office_area

  • [Core_1-mst-region]instance 1 vlan 2

  • [Core_1-mst-region]instance 2 vlan 3

  • [Core_1-mst-region]instance 3 vlan 4

  • [Core_1-mst-region]instance 4 vlan 5

  • [Core_1-mst-region]active region-configuration

  • Info: This operation may take a few seconds. Please wait for a moment...done.

  • [Core_1-mst-region]quit

 ③ 配置核心1为instance 2和instance 4的主域根，instance 1和instance 3的第二域根；

  • [Core_1]stp instance 2 root primary 

  • [Core_1]stp instance 4 root primary 

  • [Core_1]stp instance 1 root secondary 

  • [Core_1]stp instance 3 root secondary

◆ 核心层<核心2>的MSTP配置：

 ① 基本配置：关闭消息提示和命名；

  • <Huawei>system-view 

  • Enter system view, return user view with Ctrl+Z.

  • [Huawei]undo info-center enable 

  • Info: Information center is disabled.

  • [Huawei]sysname Core_2

 ② 启用MSTP协议，配置域名和实例，并激活；

  • [Core_2]stp region-configuration 

  • [Core_2-mst-region]region-name office_area

  • [Core_2-mst-region]instance 1 vlan 2

  • [Core_2-mst-region]instance 2 vlan 3

  • [Core_2-mst-region]instance 3 vlan 4

  • [Core_2-mst-region]instance 4 vlan 5

  • [Core_2-mst-region]active region-configuration

  • Info: This operation may take a few seconds. Please wait for a moment...done.

  • [Core_1-mst-region]quit

 ③ 配置核心1为instance 2和instance 4的主域根，instance 1和instance 3的第二域根；

  • [Core_2]stp instance 1 root primary 

  • [Core_2]stp instance 3 root primary 

  • [Core_2]stp instance 2 root secondary 

  • [Core_2]stp instance 4 root secondary

四、接入层、汇聚层的vlan和接口类型配置

◆ 在接入层交换机<接入1、接入2>上配置vlan 4和vlan 5，设置上联接口类型为trunk口，允许vlan 4和vlan 5的报文通过，为避免环路，尽量只允许实例所包含的vlan通过，并启用STP，其他与PC端相连的端口禁用STP；以<接入1>为例：

  • [Access_1]Stp enable

  • [Access_1]vlan batch 4 5

  • [Access_1]interface g0/0/1

  • [Access_1-GigabitEthernet0/0/1]port link-type trunk

  • [Access_1-GigabitEthernet0/0/1]Port trunk allow vlan 4 5

  • [Access_1-GigabitEthernet0/0/1]stp enable

  • [Access_1-GigabitEthernet0/0/1]quit

  • [Access_1]interface g0/0/2

  • [Access_1-GigabitEthernet0/0/2]port link-type trunk

  • [Access_1-GigabitEthernet0/0/2]Port trunk allow vlan 4 5

  • [Access_1-GigabitEthernet0/0/2]stp enable

  • [Access_1-GigabitEthernet0/0/2]quit

  • [Access_1]port-group 1

  • [Access_1-port-group-1]group-member g0/0/3 to g0/0/24

  • [Access_1-port-group-1]port link-type access 

  • .........

  • [Access_1-port-group-1]stp disable 

  • .........

  • [Access_1-port-group-1]return

  • <Access_1>save

◆ 汇聚层<汇聚A、汇聚B>上配置相同的vlan，与各交换机相连的接口设置为trunk，允许vlan 4和vlan 5通过，并启用STP，以<汇聚A>为例：

  • [Convergence_A]stp enable

  • [Convergence_A]vlan batch 4 5

  • [Convergence_A]port-group 1

  • [Convergence_A-port-group-1]group-member g0/0/1 to g0/0/4 

  • [Convergence_A-port-group-1]port link-type trunk 

  • .........

  • [Convergence_A-port-group-1]port trunk allow-pass vlan 4 5

  • .........

  • [Convergence_A-port-group-1]return

  • <Convergence_A>save

◆ 其他接入层设备<接入3、接入4>的vlan和接口的配置与<接入1、接入2>配置类似；汇聚层设备<汇聚C、汇聚D>和<汇聚A、汇聚B>配置类似。仅创建vlan 2和vlan 3，接口仅允许vlan 2和vlan 3通过。

五、核心层交换机VRRP和OSPF配置

◆ 核心层<核心1>的配置：

 ① 基本配置：关闭消息提示和命名；

  • <Huawei>system-view 

  • Enter system view, return user view with Ctrl+Z.

  • [Huawei]undo info-center enable 

  • Info: Information center is disabled.

  • [Huawei]sysname Core_1

 ② 配置vlan和VRRP：

  • [Core_1]vlan batch 2 to 5 10 13

  • Info: This operation may take a few seconds. Please wait for a moment...done.

  • [Core_1]inter vlan 2

  • [Core_1-Vlanif2] ip address 10.147.140.60 26

  • [Core_1-Vlanif2]vrrp vrid 2 virtual-ip 10.147.140.62

  • [Core_1-Vlanif2]quit

  • [Core_1]inter vlan 3

  • [Core_1-Vlanif3] ip address 10.147.140.125 255.255.255.192 

  • [Core_1-Vlanif3]vrrp vrid 3 virtual-ip 10.147.140.126

  • [Core_1-Vlanif2]vrrp vrid 3 priority 110

  • [Core_1-Vlanif2]vrrp vrid 3 preempt-mode timer delay 10

  • [Core_1-Vlanif3]quit

  • [Core_1]inter vlanif 4

  • [Core_1-Vlanif4]ip address 10.147.140.189 255.255.255.192 

  • [Core_1-Vlanif4]vrrp vrid 4 virtual-ip 10.147.140.190

  • [Core_1-Vlanif4]quit

  • [Core_1]inter vlanif 5

  • [Core_1-Vlanif5]ip address 10.147.140.252 255.255.255.192 

  • [Core_1-Vlanif5]vrrp vrid 5 virtual-ip 10.147.140.254

  • [Core_1-Vlanif3]vrrp vrid 5 priority 110

  • [Core_1-Vlanif3]vrrp vrid 5 preempt-mode timer delay 10

  • [Core_1-Vlanif5]quit

  • [Core_1]inter vlanif 10

  • [Core_1-Vlanif10]ip address 10.147.141.129 255.255.255.252 

  • [Core_1-Vlanif10]quit

  • [Core_1]inter vlanif 13

  • [Core_1-Vlanif13]ip address 10.147.141.141 255.255.255.252 

  • [Core_1-Vlanif13]quit

 ③ 配置端口聚合；

  • [Core_1]interface Eth-Trunk 1

  • [Core_1-Eth-Trunk1]port link-type trunk 

  • [Core_1-Eth-Trunk1]port trunk allow-pass vlan 2 to 5

  • [Core_1-Eth-Trunk1]quit

  • [Core_1]inter g0/0/23

  • [Core_1-GigabitEthernet0/0/23]eth-trunk 1

  • Info: This operation may take a few seconds. Please wait for a moment...done.

  • [Core_1-GigabitEthernet0/0/24]eth-trunk 1

  • Info: This operation may take a few seconds. Please wait for a moment...done.

④ 配置接口类型和允许通过的vlan报文；

  • [Core_1]inter g0/0/3

  • [Core_1-GigabitEthernet0/0/3]port link-type trunk

  • [Core_1-GigabitEthernet0/0/3]port trunk allow-pass vlan 4 5

  • [Core_1-GigabitEthernet0/0/3]quit

  • [Core_1]interface g0/0/4

  • [Core_1-GigabitEthernet0/0/4]port link-type trunk

  • [Core_1-GigabitEthernet0/0/4]port trunk allow-pass vlan 4 5

  • [Core_1-GigabitEthernet0/0/4]quit

  • [Core_1]inter g0/0/1

  • [Core_1-GigabitEthernet0/0/1]port link-type trunk

  • [Core_1-GigabitEthernet0/0/1]port trunk allow-pass vlan 2 3

  • [Core_1-GigabitEthernet0/0/1]quit

  • [Core_1]inter g0/0/2

  • [Core_1-GigabitEthernet0/0/2]port link-type trunk

  • [Core_1-GigabitEthernet0/0/2]port trunk allow-pass vlan 2 3

  • [Core_1-GigabitEthernet0/0/2]quit

  • [Core_1]inter g0/0/5

  • [Core_1-GigabitEthernet0/0/5]port link-type access

  • [Core_1-GigabitEthernet0/0/5]port default vlan 10

  • [Core_1-GigabitEthernet0/0/5]quit

  • [Core_1]inter g0/0/6

  • [Core_1-GigabitEthernet0/0/6]port link-type access

  • [Core_1-GigabitEthernet0/0/6]port default vlan 13

  • [Core_1-GigabitEthernet0/0/6]quit

⑤ 配置loopback和OSPF；

  • [Core_1]inter LoopBack 0

  • [Core_1-LoopBack0]ip address 3.3.3.3 32

  • [Core_1-LoopBack0]quit

  • [Core_1]ospf 1 router-id 3.3.3.3

  • [Core_1-ospf-1]area 0

  • [Core_1-ospf-1-area-0.0.0.0]network 3.3.3.3 0.0.0.0

  • [Core_1-ospf-1-area-0.0.0.0]network 10.147.141.128 0.0.0.3

  • [Core_1-ospf-1-area-0.0.0.0]network 10.147.141.140 0.0.0.3

  • [Core_1-ospf-1-area-0.0.0.0]network 10.147.140.0 0.0.0.255

  • [Core_1-ospf-1-area-0.0.0.0]return

  • <Core_1>save

◆ 核心层<核心2>的配置：

① 基本配置：关闭消息提示和命名；

  • <Huawei>system-view 

  • Enter system view, return user view with Ctrl+Z.

  • [Huawei]undo info-center enable 

  • Info: Information center is disabled.

  • [Huawei]sysname Core_2

② 配置vlan和VRRP：

  • [Core_2]vlan batch 2 to 5 10 13

  • Info: This operation may take a few seconds. Please wait for a moment...done.

  • [Core_2]inter vlan 2

  • [Core_2-Vlanif2] ip address 10.147.140.61 26

  • [Core_2-Vlanif2]vrrp vrid 2 virtual-ip 10.147.140.62

  • [Core_2-Vlanif2]vrrp vrid 2 priority 110

  • [Core_2-Vlanif2]vrrp vrid 2 preempt-mode timer delay 10

  • [Core_2-Vlanif2]quit

  • [Core_2]inter vlan 3

  • [Core_2-Vlanif3] ip address 10.147.140.124 255.255.255.192 

  • [Core_2-Vlanif3]vrrp vrid 3 virtual-ip 10.147.140.126

  • [Core_2-Vlanif3]quit

  • [Core_2]inter vlanif 4

  • [Core_2-Vlanif4]ip address 10.147.140.188 255.255.255.192 

  • [Core_2-Vlanif4]vrrp vrid 4 virtual-ip 10.147.140.190

  • [Core_2-Vlanif3]vrrp vrid 4 priority 110

  • [Core_2-Vlanif3]vrrp vrid 4 preempt-mode timer delay 10

  • [Core_2-Vlanif4]quit

  • [Core_2]inter vlanif 5

  • [Core_2-Vlanif5]ip address 10.147.140.253 255.255.255.192 

  • [Core_2-Vlanif5]vrrp vrid 5 virtual-ip 10.147.140.254

  • [Core_2-Vlanif5]quit

  • [Core_2]inter vlanif 11

  • [Core_2-Vlanif10]ip address 10.147.141.133 255.255.255.252 

  • [Core_2-Vlanif10]quit

  • [Core_2]inter vlanif 12

  • [Core_2-Vlanif13]ip address 10.147.141.137 255.255.255.252 

  • [Core_2-Vlanif13]quit

③ 配置端口聚合；

  • [Core_2]interface Eth-Trunk 1

  • [Core_2-Eth-Trunk1]port link-type trunk 

  • [Core_2-Eth-Trunk1]port trunk allow-pass vlan 2 to 5

  • [Core_2-Eth-Trunk1]quit

  • [Core_2]inter g0/0/23

  • [Core_2-GigabitEthernet0/0/23]eth-trunk 1

  • Info: This operation may take a few seconds. Please wait for a moment...done.

  • [Core_2-GigabitEthernet0/0/24]eth-trunk 1

  • Info: This operation may take a few seconds. Please wait for a moment...done.

④ 配置接口类型和允许通过的vlan报文；

  • [Core_2]inter g0/0/3

  • [Core_2-GigabitEthernet0/0/3]port link-type trunk

  • [Core_2-GigabitEthernet0/0/3]port trunk allow-pass vlan 4 5

  • [Core_2-GigabitEthernet0/0/3]quit

  • [Core_2]interface g0/0/4

  • [Core_2-GigabitEthernet0/0/4]port link-type trunk

  • [Core_2-GigabitEthernet0/0/4]port trunk allow-pass vlan 4 5

  • [Core_2-GigabitEthernet0/0/4]quit

  • [Core_2]inter g0/0/1

  • [Core_2-GigabitEthernet0/0/1]port link-type trunk

  • [Core_2-GigabitEthernet0/0/1]port trunk allow-pass vlan 2 3

  • [Core_2-GigabitEthernet0/0/1]quit

  • [Core_2]inter g0/0/2

  • [Core_2-GigabitEthernet0/0/2]port link-type trunk

  • [Core_2-GigabitEthernet0/0/2]port trunk allow-pass vlan 2 3

  • [Core_2-GigabitEthernet0/0/2]quit

  • [Core_2]inter g0/0/5

  • [Core_2-GigabitEthernet0/0/5]port link-type access

  • [Core_2-GigabitEthernet0/0/5]port default vlan 11

  • [Core_2-GigabitEthernet0/0/5]quit

  • [Core_2]inter g0/0/6

  • [Core_2-GigabitEthernet0/0/6]port link-type access

  • [Core_2-GigabitEthernet0/0/6]port default vlan 12

  • [Core_2-GigabitEthernet0/0/6]quit

⑤ 配置loopback和OSPF；

  • [Core_2]inter LoopBack 0

  • [Core_2-LoopBack0]ip address 4.4.4.4 32

  • [Core_2-LoopBack0]quit

  • [Core_2]ospf 1 router-id 4.4.4.4

  • [Core_2-ospf-1]area 0

  • [Core_2-ospf-1-area-0.0.0.0]network 4.4.4.4 0.0.0.0

  • [Core_2-ospf-1-area-0.0.0.0]network 10.147.141.132 0.0.0.3

  • [Core_2-ospf-1-area-0.0.0.0]network 10.147.141.136 0.0.0.3

  • [Core_2-ospf-1-area-0.0.0.0]network 10.147.140.0 0.0.0.255

  • [Core_2-ospf-1-area-0.0.0.0]return

  • <Core_2>save

六、路由器的配置

◆ 路由器1的配置过程

 ① 基本配置：关闭消息提示和命名；

  • <Huawei>system-view 

  • Enter system view, return user view with Ctrl+Z.

  • [Huawei]undo info-center enable 

  • Info: Information center is disabled.

  • [Huawei]sysname R1

② 配置接口地址：

  • [R1]inter LoopBack 0

  • [R1-LoopBack0]ip address 1.1.1.1 32

  • [R1-LoopBack0]quit

  • [R1]inter g0/0/0

  • [R1-GigabitEthernet0/0/0]ip address 10.147.141.130 30

  • [R1-GigabitEthernet0/0/0]quit

  • [R1]inter g0/0/1

  • [R1-GigabitEthernet0/0/1]ip address 10.147.141.134 30

  • [R1-GigabitEthernet0/0/1]quit

③ 启用OSPF，配置路由：

  • [R1]ospf 1 router-id 1.1.1.1

  • [R1-ospf-1]area 0

  • [R1-ospf-1-area-0.0.0.0]network 1.1.1.1 0.0.0.0

  • [R1-ospf-1-area-0.0.0.0]network 10.147.141.128 0.0.0.3

  • [R1-ospf-1-area-0.0.0.0]network 10.147.141.132 0.0.0.3

  • [R1-ospf-1-area-0.0.0.0]return

  • <R1>save

◆ 路由器R2的配置过程和R1类似

① 基本配置：关闭消息提示和命名；

  • <Huawei>system-view 

  • Enter system view, return user view with Ctrl+Z.

  • [Huawei]undo info-center enable 

  • Info: Information center is disabled.

  • [Huawei]sysname R2

② 配置接口地址：

  • [R2]inter LoopBack 0

  • [R2-LoopBack0]ip address 2.2.2.2 32

  • [R2-LoopBack0]quit

  • [R2]inter g0/0/0

  • [R2-GigabitEthernet0/0/0]ip address 10.147.141.142 30

  • [R2-GigabitEthernet0/0/0]quit

  • [R2]inter g0/0/1

  • [R2-GigabitEthernet0/0/1]ip address 10.147.141.138 30

  • [R2-GigabitEthernet0/0/1]quit

③ 启用OSPF，配置路由：

  • [R2]ospf 1 router-id 2.2.2.2

  • [R2-ospf-1]area 0

  • [R2-ospf-1-area-0.0.0.0]network 2.2.2.2 0.0.0.0

  • [R2-ospf-1-area-0.0.0.0]network 10.147.141.140 0.0.0.3

  • [R2-ospf-1-area-0.0.0.0]network 10.147.141.136 0.0.0.3

  • [R2-ospf-1-area-0.0.0.0]return

  • <R2>save

七、抓包检验数据流向

◆ 接入层<接入1>配置属于vlan4的PC，向路由器R1发包：

  1. PC端ping

    PC>ping 1.1.1.1 

    Ping 1.1.1.1: 32 data bytes, Press Ctrl_C to break

    From 1.1.1.1: bytes=32 seq=1 ttl=254 time=78 ms

    From 1.1.1.1: bytes=32 seq=2 ttl=254 time=63 ms

    From 1.1.1.1: bytes=32 seq=3 ttl=254 time=78 ms

    From 1.1.1.1: bytes=32 seq=4 ttl=254 time=78 ms

    From 1.1.1.1: bytes=32 seq=5 ttl=254 time=93 ms

    --- 1.1.1.1 ping statistics ---

      5 packet(s) transmitted

      5 packet(s) received

      0.00% packet loss

      round-trip min/avg/max = 63/78/93 ms

  2. 交换机<接入1>接口G0/0/1和G0/0/2的数据包：

    wKiom1Ov2nDwbgv4AAYZa-atv5Y372.jpg    wKiom1Ov2wCjgXwjAAZjWsfkOSI824.jpg

  3. 汇聚层交换机<汇聚A>接口G0/0/3和G0/0/4的数据包：

    wKiom1Ov3CKQhjVyAAaPkLV1d-0954.jpg    wKioL1Ov3A6z7QDBAAYYXh8t_Dw403.jpg

4.核心层交换<核心1>的接口G0/0/5和<核心2>的接口G0/0/6数据包：

      wKioL1Ov3RKxK_0EAAY_GzHthZw348.jpg    wKiom1Ov3V6TXeh-AAYl5UjNY6E995.jpg

    数据流向的抓包不够全面，可能存在其他vlan并不能按照设定的链路流出，总体没有形成环路，设备可以实现负载分担。

本文出自 “每天进步一点点” 博客，请务必保留此出处http://pthahnil.blog.51cto.com/814988/1432120


联系
我们