Switch0作为VLAN10、20、30、40的主根网桥;做为VLAN50、60、70备份根网桥。
Switch1作为VLAN50、60、70的主根网桥;做为VLAN 10、20、30、40备份根网桥。 a. switch0配置
Switch(config)#host hexinjiaohuan0
hexinjiaohuan0(config)#spanning-tree vlan 10 root primary hexinjiaohuan0(config)#spanning-tree vlan 20 root primary hexinjiaohuan0(config)#spanning-tree vlan 30 root primary hexinjiaohuan0(config)#spanning-tree vlan 40 root primary hexinjiaohuan0(config)#spanning-tree vlan 50 root secondary hexinjiaohuan0(config)#spanning-tree vlan 60 root secondary hexinjiaohuan0(config)#spanning-tree vlan 70 root secondary hexinjiaohuan0(config)#spanning-tree vlan 1 root secondary
b. hexinjiaohuan1配置
Switch(config)#host hexinjiaohuan1
hexinjiaohuan1(config)#spanning-tree vlan 50 root primary hexinjiaohuan1(config)#spanning-tree vlan 60 root primary hexinjiaohuan1(config)#spanning-tree vlan 70 root primary hexinjiaohuan1(config)#spanning-tree vlan 1 root primary hexinjiaohuan1(config)#spanning-tree vlan 10 root secondary hexinjiaohuan1(config)#spanning-tree vlan 20 root secondary hexinjiaohuan1(config)#spanning-tree vlan 30 root secondary hexinjiaohuan1(config)#spanning-tree vlan 40 root secondary
c. 接入层交换机配置
sushe1qu(config)#int range f0/1 - 2
sushe1qu(config-if-range)#switchport mode trunk
2).在核心交换机Multilayer Switch1上创建VTP server端,创建与Switch0一样的VLAN,配置一样的domain、password,当作VTP相互备份,为当前每个VLAN的SVI接口配置地址,如下表:
Vlan ID Vlan name Switch0上IP Switch1上IP 备注 1 guanli 172.16.0.1 172.16.0.2 管理VLAN
26
10 20 30 40 50 60 70 xingzheng jiaoxue tushuguan caiwu jiashuqu xuesheng Server-vlan 172.16.4.1 172.16.8.1 172.16.12.1 172.16.16.1 172.16.20.1 172.16.24.1 172.16.28.1 172.16.4.2 172.16.8.2 172.16.12.2 172.16.16.2 172.16.20.2 172.16.24.2 172.16.28.2 行政办公 教学教师 图书中心 财务中心 家属区 学生宿舍 服务器群 a.设置VTP,启动VTP SERVER Switch#conf t
Switch(config)#hostn hexinjiaohuan1 hexinjiaohuan0(config)#vtp mode server hexinjiaohuan0(config)#vtp domain ahip
b.设置VLAN地址
hexinjiaohuan1(config)#int vlan 1
hexinjiaohuan1(config-if)#ip address 172.16.1.2 255.255.255.0 hexinjiaohuan1(config-if)#no shutdown hexinjiaohuan1(config-if)#exit hexinjiaohuan1(config)#int vlan 10
hexinjiaohuan1(config-if)#ip address 172.16.4.2 255.255.252.0 hexinjiaohuan1(config-if)#no shut hexinjiaohuan1(config-if)#exit hexinjiaohuan1(config)#int vlan 20
hexinjiaohuan1(config-if)#ip address 172.16.8.2 255.255.252.0 hexinjiaohuan1(config-if)#no shut hexinjiaohuan1(config-if)#exit hexinjiaohuan1(config)#int vlan 30
hexinjiaohuan1(config-if)#ip address 172.16.12.2 255.255.252.0 hexinjiaohuan1(config-if)#no shut hexinjiaohuan1(config-if)#exit hexinjiaohuan1(config)#int vlan 40
hexinjiaohuan1(config-if)#ip address 172.16.16.2 255.255.252.0 hexinjiaohuan1(config-if)#no shut hexinjiaohuan1(config-if)#exit hexinjiaohuan1(config)#int vlan 50
27
hexinjiaohuan1(config-if)#ip address 172.16.20.2 255.255.252.0 hexinjiaohuan1(config-if)#no shut hexinjiaohuan1(config-if)#exit hexinjiaohuan1(config)#int vlan 60
hexinjiaohuan1(config-if)#ip address 172.16.24.2 255.255.252.0 hexinjiaohuan1(config-if)#no shut hexinjiaohuan1(config-if)#exit hexinjiaohuan1(config)#int vlan 70
hexinjiaohuan1(config-if)#ip address 172.16.28.2 255.255.252.0 hexinjiaohuan1(config-if)#no shut
c.设置链路聚合(EtherChannel)
hexinjiaohuan0(config)#int g0/1 hexinjiaohuan0(config-if)#switchport
hexinjiaohuan0(config-if)#channel-group 1 mode desirable hexinjiaohuan0(config-if)#exit hexinjiaohuan0(config)#int g0/2 hexinjiaohuan0(config-if)#switchport
hexinjiaohuan0(config-if)#channel-group 1 mode desirable hexinjiaohuan0(config-if)#exit
hexinjiaohuan0(config)#int port-channel 1 hexinjiaohuan0(config-if)switch mode trunk
hexinjiaohuan0(config-if)#switchport trunk allowed vlan all
d.其他TRUNK端口设置(核心交换机的下行口配置为TRUNK)
hexinjiaohuan0(config)#int f0/1
hexinjiaohuan0(config-if)#switchport mode trunk
hexinjiaohuan0(config-if)#switchport trunk allowed vlan all hexinjiaohuan0(config-if)#int f0/2
hexinjiaohuan0(config-if)#switchport mode trunk
hexinjiaohuan0(config-if)#switchport trunk allowed vlan all hexinjiaohuan0(config-if)#int f0/3
hexinjiaohuan0(config-if)#switchport mode trunk
hexinjiaohuan0(config-if)#switchport trunk allowed vlan all hexinjiaohuan0(config-if)#int f0/4
hexinjiaohuan0(config-if)#switchport mode trunk
28
hexinjiaohuan0(config-if)#switchport trunk allowed vlan all hexinjiaohuan0(config)#int f0/5
hexinjiaohuan0(config-if)#switchport mode trunk
hexinjiaohuan0(config-if)#switchport trunk allowed vlan all hexinjiaohuan0(config-if)#int f0/6
hexinjiaohuan0(config-if)#switchport mode trunk
hexinjiaohuan0(config-if)#switchport trunk allowed vlan all hexinjiaohuan0(config-if)#int f0/7
hexinjiaohuan0(config-if)#switchport mode trunk
hexinjiaohuan0(config-if)#switchport trunk allowed vlan all hexinjiaohuan0(config-if)#int f0/8
hexinjiaohuan0(config-if)#switchport mode trunk
hexinjiaohuan0(config-if)#switchport trunk allowed vlan all
注:hexinjiaohuan1配置类似
3).网关冗余
HSRP协议或VRRP协议或GLBP协议实现,此处不详细介绍,后续课程会有深入分析。
4).接入层交换机基于端口的VLAN划分,如第一个桌面层交换机的配置如下:
Switch>en
Switch#conf t
Switch(config)#int f0/1
Switch(config-if)#switchport mode trunk
Switch(config-if)#switchport trunk allowed vlan all Switch(config-if)#exit Switch(config)#int f0/24
Switch(config-if)#switchport mode access Switch(config-if)#switchport access vlan 60
注:如果此接入层交换机连接的所有终端都是属于一个VLAN,如第一个交换机位于学生宿舍一区连接的所有终端都属于VLAN60,此交换机可以不用设置,直接在分布层的三层交换上把连接到此交换机的接口设置属于VLAN60就可以了。 此接入交换机工作状态如同普通的傻瓜式交换机。
我们上面介绍的方法是多样的,关键是在各种场合下灵活运用。 其他接入层的交换机配置在这就省略了。
任务二:三层冗余相关设置
1.在核心交换机Multilayer Switch0和Multilayer Switch1上分别
29
通过三层接口连接到benbu校区路由器上,同样也分别连接到出口路由器上,全部使用三层路由实现冗余和负载。 假设全网使用路由器协议OSPF
网段规划,如下图:
30