VRRP + MSTP实验

网络拓扑图：

需求：通过在核心交换机上部署VRRP + MSTP技术，实现网关冗余，核心SW1作为vlan 10的主网关，SW 2作为vlan 20的网关

一、交换机配置VLNA和Trunk接口：

SW3配置：

<SW3>system-view
[SW3]undo info-center enable 
[SW3]sysname SW3
[SW3]vlan batch 10 20
[SW3]interface gig0/0/3
[SW3-GigabitEthernet0/0/3]port link-type access 
[SW3-GigabitEthernet0/0/3]port default vlan 10
[SW3-GigabitEthernet0/0/3]inter gig0/0/4
[SW3-GigabitEthernet0/0/4]port link-type access
[SW3-GigabitEthernet0/0/4]port default vlan 20
[SW3-GigabitEthernet0/0/4]quit

[SW3]port-group group-member gig0/0/1 to gig0/0/2        #加入端口组
[SW3-port-group]port link-type trunk     #端口类型为trunk
[SW3-port-group]port trunk allow-pass vlan all        #允许所有vlan通过

SW1：

<SW1>system-view 
[SW1]undo info-center enable
[SW1]sysname SW1
[SW1]vlan batch 10 20 30
[SW1]port-group group-member gig0/0/1 to gig0/0/2        #加入端口组
[SW1-port-group]port link-type trunk        #更改端口类型为trunk
[SW1-port-group]port trunk allow-pass vlan all        #允许所有vlan通过
[SW1-port-group]quit

[SW1]interface GigabitEthernet 0/0/3        #进入G0/0/3接口
[SW1-GigabitEthernet0/0/3]port link-type access         #端口类型access
[SW1-GigabitEthernet0/0/3]port default vlan 30    #划分至vlan 30
[SW1-GigabitEthernet0/0/3]quit        #退出

SW2：

<SW2>system-view 
[SW2]undo info-center enable
[SW2]sysname SW1
[SW2]vlan batch 10 20 30
[SW2]port-group group-member gig0/0/1 to gig0/0/2        #加入端口组
[SW2-port-group]port link-type trunk        #更改端口类型为trunk
[SW2-port-group]port trunk allow-pass vlan all        #允许所有vlan通过
[SW2-port-group]quit

[SW2]interface GigabitEthernet 0/0/3        #进入G0/0/3接口
[SW2-GigabitEthernet0/0/3]port link-type access         #端口类型access
[SW2-GigabitEthernet0/0/3]port default vlan 30    #划分至vlan 30
[SW2-GigabitEthernet0/0/3]quit        #退出

---

二、配置VRRP：

SW1：

[SW1]interface Vlanif 10        #进入vlanif10接口
[SW1-Vlanif10]ip address 192.168.10.254 24        #配置vlan 10接口地址
[SW1-Vlanif10]vrrp vrid 1 virtual-ip 192.168.10.1        #配置vlan 10的网关ip
[SW1-Vlanif10]vrrp vrid 1 priority 105         #将vlan 10网关的优先级设置为105，使SW 1成为vlan 10的主网关，优先级默认是100

[SW1-Vlanif10]vrrp vrid 1 track interface GigabitEthernet0/0/1 reduced 80        # #追踪G0/0/1接口，如果端口发生故障，将VRRP优先级减80
[SW1-Vlanif10]vrrp vrid 1 track interface GigabitEthernet0/0/2 reduced 80
[SW1-Vlanif10]vrrp vrid 1 track interface GigabitEthernet0/0/3 reduced 80
[SW1-Vlanif10]quit 


[SW1]interface vlanif 20        #进入vlanif 20接口
[SW1-Vlanif20]ip address 192.168.20.254 24        #配置vlan 20接口地址
[SW1-Vlanif20]vrrp vrid 2 virtual-ip 192.168.20.1        #配置vlan 20的网关ip

[SW1-Vlanif20]vrrp vrid 2 track interface GigabitEthernet 0/0/1 reduced 90        #追踪G0/0/1接口，如果端口发生故障，将VRRP优先级减90
[SW1-Vlanif20]vrrp vrid 2 track interface GigabitEthernet 0/0/2 reduced 90
[SW1-Vlanif20]vrrp vrid 2 track interface GigabitEthernet 0/0/3 reduced 90    

SW2：

[SW2]interface Vlanif 10        #进入vlanif10接口
[SW2-Vlanif10]ip address 192.168.10.253 24        #配置vlan 10接口地址
[SW2-Vlanif10]vrrp vrid 1 virtual-ip 192.168.10.1        #配置vlan 10的网关ip

[SW2-Vlanif10]vrrp vrid 1 track interface GigabitEthernet0/0/1 reduced 80        #追踪G0/0/1接口，如果发生故障，将VRRP优先级减80
[SW2-Vlanif10]vrrp vrid 1 track interface GigabitEthernet0/0/2 reduced 80
[SW2-Vlanif10]vrrp vrid 1 track interface GigabitEthernet0/0/3 reduced 80
[SW2-Vlanif10]quit 


[SW2]interface vlanif 20        #进入vlanif 20接口
[SW2-Vlanif20]ip address 192.168.20.253 24        #配置vlan 20接口地址
[SW2-Vlanif20]vrrp vrid 2 virtual-ip 192.168.20.1        #配置vlan 20的网关ip
[SW2-Vlanif20]vrrp vrid 2 priority 108        #将vlan 20网关优先级设置为108，使SW 2成为vlan 20的主网关

[SW2-Vlanif20]vrrp vrid 2 track interface GigabitEthernet0/0/1 reduced 90        #追踪G0/0/1接口，如果发生故障，将VRRP优先级减90
[SW2-Vlanif20]vrrp vrid 2 track interface GigabitEthernet0/0/2 reduced 90
[SW2-Vlanif20]vrrp vrid 2 track interface GigabitEthernet0/0/3 reduced 90
[SW2-Vlanif20]quit        #退出

配置完VRRP后，我们再分别使用PC去ping各自的网关地址，如下：

---

三、配置MSTP：

SW1、SW2、SW3都需配置：

[SW1]stp region-configuration         #STP区域设置
[SW1-mst-region]region-name kang        #创建区域名kang
[SW1-mst-region]instance 1 vlan 10        #创建实例1并绑定vlan 10
[SW1-mst-region]instance 2 vlan 20        #创建实例2并绑定vlan 20
[SW1-mst-region]active region-configuration        #激活配置

上面配置完成后，默认所有vlan都在MSTP的实例0中，还需要更改MSTP实例的优先级：

SW1：

[SW1]stp instance 1 root primary         #针对实例1将SW 1设置为根桥
[SW1]stp instance 2 root secondary        #针对实例2将SW 1设置为备份根桥

针对实例1将堵塞SW3的G0/0/2端口

SW2：

[SW2]stp instance 2 root primary         #针对实例2将SW 2设置为根桥
[SW2]stp instance 1 root secondary        #针对实例1将SW 2设置为备份根桥

针对实例2将堵塞SW3的G0/0/1端口