本文介绍了MSTP和VRRP技术在解决网络二层环路问题和提供网关冗余备份中的应用。通过配置MSTP不同VLAN可以走不同的路径实现带宽的充分利用和链路负载均衡。VRRP则用于防止网关单点故障确保网络稳定性。实验部分详细展示了在SW、CORE1和CORE2设备上的配置步骤包括VLAN、MSTP域、VRRP组的设置以及跟踪模块的配置以验证系统在链路故障时能自动切换保证网络服务连续性。一、MSTPVRRP技术简介MSTP(Multiple Instances Spanning Trees Protocol)是多实例生成树的简称可以用于解决网络二层环路问题并在构建生成树时引入了实例的概念每个实例与若干VLAN相连网络中可以为每个实例单独构建一颗独立的生成树这样不同VLAN用户通过时可以走不同的路径从而充分利用带宽。使用MSTP可以实现链路冗余和不同VLAN之间的负载均衡但网络中还存在一个单点故障就是每个VLAN只有一个网关一旦网关发生故障用户将无法访问外部网络。为解决这一故障我们可以使用VRRP技术VRRP技术实现网关的冗余备份防止单点故障的发生。二、实验部分1.实验拓扑2.配置步骤(1).基础配置SW[SW]vlan 10 20 //创建vlan 10vlan 20[SW]int range g1/0/1 g1/0/2 //进入接口组[SW-if-range]port link-type trunk //配置接口类型为trunk[SW-if-range]port trunk permit vlan 10 20 //允许vlan 10vlan 20通过[SW-if-range]int g1/0/3 //进入接口[SW-GigabitEthernet1/0/3]port link-type access //配置接口类型为access[SW-GigabitEthernet1/0/3]port access vlan 10 //把端口加入vlan 10[SW-GigabitEthernet1/0/3]int g1/0/4 //进入接口[SW-GigabitEthernet1/0/4]port link-type access //配置接口类型为access[SW-GigabitEthernet1/0/4]port access vlan 20 //把端口划入vlan 20[SW-GigabitEthernet1/0/4]quit //返回系统视图CORE1[CORE1]vlan 10 20 //创建vlan10vlan20[CORE1]int vlan 10 //进入vlanif 10[CORE1-Vlan-interface10]ip add 192.168.10.1 24 //配置ip[CORE1-Vlan-interface10]int vlan 20 //进入vlanif 20[CORE1-Vlan-interface20]ip add 192.168.20.1 24 //配置ip[CORE1-Vlan-interface20]int g1/0/3 //进入接口[CORE1-GigabitEthernet1/0/3]port link-type trunk //配置接口类型为trunk[CORE1-GigabitEthernet1/0/3]port trunk permit vlan 10 20 //允许vlan 10vlan20通过[CORE1-GigabitEthernet1/0/3]quit //返回系统视图CORE2[CORE2]vlan 10 20 //创建vlan 10vlan 20[CORE2]int vlan 10 //进入vlanif 10[CORE2-Vlan-interface10]ip add 192.168.10.2 24 //配置ip[CORE2-Vlan-interface10]int vlan 20 //进入vlanif 20[CORE2-Vlan-interface20]ip add 192.168.20.2 24 //配置ip[CORE2-Vlan-interface20]int g1/0/3 //进入接口[CORE2-GigabitEthernet1/0/3]port link-type trunk //配置接口类型为trunk[CORE2-GigabitEthernet1/0/3]port trunk permit vlan 10 20 //允许vlan 10vlan 20通过[CORE2-GigabitEthernet1/0/3]quit //返回系统视图PC1PC2(2).配置MSTPSW[SW]stp region-configuration //进入MST域视图[SW-mst-region]region-name test //配置MST域的域名为test缺省为设备MAC地址[SW-mst-region]revision-level 15 //配置MSTP的修订级别缺省为0[SW-mst-region]instance 1 vlan 10 //配置vlan映射表把vlan 10映射到实例1[SW-mst-region]instance 2 vlan 20 //配置vlan映射表把vlan 20映射到实例2[SW-mst-region]active region-configuration //激活MST域的配置[SW-mst-region]quit //返回系统视图CORE1[CORE1]stp region-configuration //进入MST域视图[CORE1-mst-region]region-name test //配置MST域的域名为test缺省为设备MAC地址[CORE1-mst-region]revision-level 15 //配置MSTP的修订级别缺省为0[CORE1-mst-region]instance 1 vlan 10 //配置vlan映射表把vlan 10映射到实例1[CORE1-mst-region]instance 2 vlan 20 //配置vlan映射表把vlan 20映射到实例2[CORE1-mst-region]active region-configuration //激活MST域的配置[CORE1-mst-region]quit //返回系统视图[CORE1]stp instance 1 root primary //配置为实例1的根桥[CORE1]stp instance 2 root secondary //配置为实例2的备份根桥CORE2:[CORE2]stp region-configuration //进入MST域视图[CORE2-mst-region]region-name test //配置MST域的域名为test缺省为设备MAC地址[CORE2-mst-region]revision-level 15 //配置MSTP的修订级别缺省为0[CORE2-mst-region]instance 1 vlan 10 //配置vlan映射表把vlan 10映射到实例1[CORE2-mst-region]instance 2 vlan 20 //配置vlan映射表把vlan 20映射到实例2[CORE2-mst-region]active region-configuration //激活MST域的配置[CORE2-mst-region]quit //返回系统视图[CORE2]stp instance 1 root secondary //配置为实例1的备份根桥[CORE2]stp instance 2 root primary //配置为实例2的根桥(3).配置VRRP心跳线链路聚合CORE1[CORE1]int Bridge-Aggregation 1 //创建聚合组1[CORE1-Bridge-Aggregation1]port link-type trunk //配置链路类型为trunk[CORE1-Bridge-Aggregation1]port trunk permit vlan 10 20 //允许vlan 10vlan 20通过[CORE1-Bridge-Aggregation1]quit //返回系统视图[CORE1]int range g1/0/2 g1/0/4 //进入接口组[CORE1-if-range]port link-type trunk //配置链路类型为trunK[CORE1-if-range]port trunk permit vlan 10 20 //允许vlan 10vlan 20通过[CORE1-if-range]port link-aggregation group 1 //加入聚合组1CORE2[CORE2]int Bridge-Aggregation 1 //创建聚合组1[CORE2-Bridge-Aggregation1]port link-type trunk //配置链路类型为trunk[CORE2-Bridge-Aggregation1]port trunk permit vlan 10 20 //允许vlan 10vlan 20通过[CORE2-Bridge-Aggregation1]quit //返回系统视图[CORE2]int range g1/0/2 g1/0/4 //进入接口组[CORE2-if-range]port link-type trunk //配置链路类型为trunk[CORE2-if-range]port trunk permit vlan 10 20 //允许vlan 10vlan 20通过[CORE2-if-range]port link-aggregation group 1 //加入聚合组1[CORE2-if-range]quit //返回系统视图(4).配置VRRPCORE1[CORE1]int vlan 10 //进入vlanif 10[CORE1-Vlan-interface10]vrrp vrid 10 virtual-ip 192.168.10.254 //创建vrid为10的vrrp组配置虚拟ip为192.168.10.254[CORE1-Vlan-interface10]vrrp vrid 10 priority 120 //配置该接口vrrp优先级为120保证被选举为主[CORE1-Vlan-interface10]int vlan 20 //进入vlanif 20[CORE1-Vlan-interface20]vrrp vrid 20 virtual-ip 192.168.20.254 //创建vrid为20的vrrp组配置虚拟ip为192.168.20.254[CORE1-Vlan-interface20]quit //返回系统视图CORE2[CORE2]int vlan 10 //创建vlan 10[CORE2-Vlan-interface10]vrrp vrid 10 virtual-ip 192.168.10.254 //创建vrid为10的vrrp组配置虚拟ip为192.168.10.254[CORE2-Vlan-interface10]int vlan 20 //进入vlanif 20[CORE2-Vlan-interface20]vrrp vrid 20 virtual-ip 192.168.20.254 //创建vrid为20的vrrp组配置虚拟ip为192.168.20.254[CORE2-Vlan-interface20]vrrp vrid 20 priority 120 //配置该接口vrrp优先级为120保证被选举为主[CORE2-Vlan-interface20]quit //返回系统视图(4).配置Track模块 CORE1[CORE1]track 1 int g1/0/1 //配置track1监视g1/0/1接口[CORE1-track-1]int vlan 10 //进入vlanif 10[CORE1-Vlan-interface10]vrrp vrid 10 track 1 priority reduced 30 //调用track1设置优先级减少30[CORE1-Vlan-interface10]quit //返回系统视图[CORE1]track 2 int g1/0/1 //配置track2监视g1/0/1接口[CORE1-track-1]int vlan 20 //进入vlanif 20[CORE1-Vlan-interface20]vrrp vrid 20 track 2 priority reduced 30 //调用track2设置优先级减少30[CORE1-Vlan-interface20]quit //返回系统视图AI写代码CORE2[CORE2]track 1 int g1/0/1 //配置track1监视g1/0/1接口[CORE2-track-1]int vlan 10 //进入vlanif 10[CORE2-Vlan-interface10]vrrp vrid 10 track 1 priority reduced 30 //调用track1设置优先级减少30[CORE2-Vlan-interface10]quit //返回系统视图[CORE2]track 2 int g1/0/1 //配置track2监视g1/0/1接口[CORE2-track-1]int vlan 20 //进入vlanif 20[CORE2-Vlan-interface20]vrrp vrid 20 track 2 priority reduced 30 //调用track2设置优先级减少30[CORE2-Vlan-interface20]quit //返回系统视图AI写代码三、结果检验1.在SW上使用display stp brief查看stp状态2.使用display vrrp查看VRRP状态3.断开CORE1的上行链路再查看VRRP可以看到CORE1由vlan10的Master变为了Backup且优先级都减少了30。