實驗拓撲：

實驗目的：1.熟練地應用stp、vrrp的應用及配置

2.了解環路以及解決方案

3.使全網互通

實驗思路：首先把拓撲圖分為三個部分

1.配置相同vlan相通，相同網段看交換，先配置交換機，左右兩邊各有三個交換機，所有會有環路，就要用到stp ，把sw2，3配置為根網橋，所有交換流量都要通過他倆： 配置命令：stp root primary

其他兩個交換機配置stp，實現負載均衡，以及備份鏈路

[sw]stp region-configuration

[sw-mst-region]region-name haha

[sw-mst-region]instance 1 vlan 10

[sw-mst-region]instance 2 vlan 20

[sw-mst-region]active region-configuration

[sw]stp instance 1 priority 4096

[sw]stp instance 2 priority 8192

交換機與交換機之間用trunk鏈接

2. 在配置第二部分，不同網段用路由。

三個路由器都要使用的情況下，要實現冗余，就用vrrp協議配置優先級

配置命令：

R1

vrrp vrid 10 virtual-ip 192.168.10.250 創建虛擬網關

vrrp vrid 10 priority 150 配置優先級為150，默認100

vrrp vrid10 interface gi 0/0/2 reduce 100

配置鏈路跟蹤，當interface gi0/0/2 端口為down時，優先級減100

R2

vrrp vrid 10 virtual-ip 192.168.10.250

vrrp vrid 10 priority 100

R3

vrrp vrid 10 virtual-ip 192.168.10.250

vrrp vrid 10 priority 80

3.配置第三部分

交換機端口開啟

R4

配置ip interface gi0/0/0 0/0/1

配置步驟：

第一部分

sw4

interface gi0/0/1 ：port link-tyde access

port default vlan 10

interface gi0/0/2 ：port link-tyde trunk

port trunk allow-pass vlan all

interface gi0/0/3 ：port link-tyde trunk

port trunk allow-pass vlan all

[sw4]stp region-configuration

[sw4-mst-region]region-name haha

[sw4-mst-region]instance 1 vlan 10

[sw4-mst-region]instance 2 vlan 20

[sw4-mst-region]active region-configuration

[sw4]stp instance 1 priority 4096

[sw4]stp instance 2 priority 8192

sw5

interface gi0/0/1 ：port link-tyde access

port default vlan 20

interface gi0/0/2 ：port link-tyde trunk

port trunk allow-pass vlan all

interface gi0/0/3 ：port link-tyde trunk

port trunk allow-pass vlan all

[sw5]stp region-configuration

[sw5-mst-region]region-name haha

[sw5-mst-region]instance 1 vlan 10

[sw5-mst-region]instance 2 vlan 20

[sw5-mst-region]active region-configuration

[sw5]stp instance 1 priority 8192

[sw5]stp instance 2 priority 4096

sw2

interface gi0/0/1 ：port link-tyde trunk

port trunk allow-pass vlan all

interface gi0/0/2 ：port link-tyde trunk

port trunk allow-pass vlan all

interface gi0/0/3 ：port link-tyde access

port default vlan 10

interface gi0/0/4 ：port link-tyde access

port default vlan 10

interface gi0/0/5 ：port link-tyde access

port default vlan 10

interface gi0/0/6 ：port link-tyde trunk

port trunk allow-pass vlan all

sw2:stp root primary

sw6

interface gi0/0/1 ：port link-tyde access

port default vlan 10

interface gi0/0/2 ：port link-tyde trunk

port trunk allow-pass vlan all

interface gi0/0/3 ：port link-tyde trunk

port trunk allow-pass vlan all

[sw6]stp region-configuration

[sw6-mst-region]region-name haha

[sw6-mst-region]instance 1 vlan 10

[sw6-mst-region]instance 2 vlan 20

[sw6-mst-region]active region-configuration

[sw6]stp instance 1 priority 4096

[sw6]stp instance 2 priority 8192

sw7

interface gi0/0/1 ：port link-tyde access

port default vlan 20

interface gi0/0/2 ：port link-tyde trunk

port trunk allow-pass vlan all

interface gi0/0/3 ：port link-tyde trunk

port trunk allow-pass vlan all

[sw7]stp region-configuration

[sw7-mst-region]region-name haha

[sw7-mst-region]instance 1 vlan 10

[sw7-mst-region]instance 2 vlan 20

[sw7-mst-region]active region-configuration

[sw7]stp instance 1 priority 8192

[sw7]stp instance 2 priority 4096

sw3

interface gi0/0/1 ：port link-tyde trunk

port trunk allow-pass vlan all

interface gi0/0/2 ：port link-tyde trunk

port trunk allow-pass vlan all

interface gi0/0/3 ：port link-tyde access

port default vlan 20

interface gi0/0/4 ：port link-tyde access

port default vlan 20

interface gi0/0/5 ：port link-tyde access

port default vlan 10

interface gi0/0/6 ：port link-tyde trunk

port trunk allow-pass vlan all

sw3:stp root primary

驗證：

pc1 ping pc3

pc2 ping pc4

第二部分

R1

interface gi 0/0/0 :ip addess 192.168.10.254 255.255.255.0

vrrp vrid 10 virtual-ip 192.168.10.250

vrrp vrid 10 priority 150

vrrp vrid 10 track interface GigabitEthernet0/0/2 reduced 100

interface gi 0/0/1 :ip addess 192.168.20.252 255.255.255.0

vrrp vrid 20 virtual-ip 192.168.20.250

vrrp vrid 10 priority 80

interface gi 0/0/2 :ip addess 192.168.100.1 255.255.255.0

ospf 1 router-id 1.1.1.1

area 0.0.0.0

network 192.168.10.0 0.0.0.255

network 192.168.20.0 0.0.0.255

area 0.0.0.30

network 192.168.100.0 0.0.0.255

R2

interface gi 0/0/0 :ip addess 192.168.10.253 255.255.255.0

vrrp vrid 10 virtual-ip 192.168.10.250

vrrp vrid 10 priority 100

vrrp vrid 10 track interface GigabitEthernet0/0/2 reduced 50

interface gi 0/0/1 :ip addess 192.168.20.253 255.255.255.0

vrrp vrid 20 virtual-ip 192.168.20.250

vrrp vrid 10 priority 100

vrrp vrid 20 track interface GigabitEthernet0/0/2 reduced 50

interface gi 0/0/2 :ip addess 192.168.100.1 255.255.255.0

ospf 1 router-id 2.2.2.2

area 0.0.0.0

network 192.168.10.0 0.0.0.255

network 192.168.20.0 0.0.0.255

area 0.0.0.30

network 192.168.100.0 0.0.0.255

R3

interface gi 0/0/0 :ip addess 192.168.10.252 255.255.255.0

vrrp vrid 10 virtual-ip 192.168.10.250

vrrp vrid 10 priority 80

interface gi 0/0/1 :ip addess 192.168.20.252 255.255.255.0

vrrp vrid 20 virtual-ip 192.168.20.250

vrrp vrid 20 priority 150

vrrp vrid 20 track interface GigabitEthernet0/0/2 reduced 100

interface gi 0/0/2 :ip addess 192.168.100.1 255.255.255.0

ospf 1 router-id 3.3.3.3

area 0.0.0.0

network 192.168.10.0 0.0.0.255

network 192.168.20.0 0.0.0.255

area 0.0.0.30

network 192.168.100.0 0.0.0.255

驗證vlan與vlan之間

pc1 ping pc2、pc4

第三部分

sw1不用配置，端口默認開啟

R4

interface gi0/0/0 ：ip addess 192.168.100.2 255.255.255.0

interface gi0/0/1 ：ip addess 192.168.30.254 255.255.255.0

ospf 1 router-id 4.4.4.4

area 0.0.0.30

network 192.168.30.0 0.0.0.255

network 192.168.100.0 0.0.0.255

驗證全網通

pc1 ping 服務器

華為設備stp 、vrrp的實力應用