Vrrp+mstp configuration details [Huawei ENSP experiment]

One . Preface

We configured MSTP, Completed a basic requirement , Now let's continue to improve , Use VRRP+MSTP Configuration requirements are as follows ：

Existing demand of a company 500 This device can be connected to the external network , The company has 5 Departments , Namely A\B\C\D\E, Every department needs 100 device , And the second floor is required to be isolated .1. Make a reasonable plan IP（ Use private IP） With subnets .2. It is proposed to adopt DHCP Distribution address （ expand ）3. Divide VLAN, Ensure the control of layer 2 link traffic .5. The company network needs to be configured on two convergence layer switches and a core router ospf Routing protocol realizes internal network communication .6、 Link aggregation is needed between two convergence layer switches to increase bandwidth , Considering the security of the two-layer network and the occupation of network resources, it is necessary to realize the two-layer isolation between different departments .7. Current use 5 Two layer switches simulate 5 Access layer equipment of departments .8. To improve the reliability of the network , Each layer-2 access device needs to be interconnected with the convergence layer device ,  So you need to configure STP The protocol prevents the occurrence of loops on the basis of ensuring reliability .（ expand ）9、 To facilitate later management and maintenance, it is necessary to enable the remote login function on the core and convergence layer devices . The authentication method is user name + Password authentication （ User name and password customization ）.10.MSTP、VRRP These technologies can be considered and implemented by students according to the situation .（ expand ）11. Think about how to realize when intranet users need to access the Internet ？

1.1 MSTP

MSTP Not just multiple MST（ Spanning tree instance ）, And it can be divided into multiple MST Area （MST Area , Also known as MST Area ）. Usually ,MSTP The network can contain one or more MST Domain , Every MST A domain can contain one or more MST. Every MSTI Run by stp/rstp/mstp The switching equipment consists of , These switching devices pass mstp After the protocol is calculated, a tree network is formed .

1.2 VRRP

Virtual routing redundancy protocol VRRP（Virtual Router Redundancy Protocol） It is a fault-tolerant protocol for improving network reliability . adopt VRRP, When the next hop equipment of the host fails , Switch business to backup device in time , So as to ensure the continuity and reliability of network communication .

Look at the topology ：

3、 ... and . Experimental process

We have successfully configured MSTP, Then we need to pay attention to one thing ： Because of our MSTP Of

instance 1 root primary
instance 2 root secondary


vlan10 20  At the taproot SW6, Spare root in SW7.vlan30 40 50  The taproot is SW7, Spare root in SW6. Allocate as follows .

instance 1 vlan 10 20
instance 2 vlan 30 40 50


Then we need to pay attention to one thing after configuration VRRP in vlan 10 20 go SW6, Corresponding to the above, the following , Let's get in first interface Vlanif10, To configure ip Address

interface Vlanif10ip address 192.168.10.124 25

Use VRRP Configure virtual routing , Change the priority to 150.

vrrp vrid 1 virtual-ip 192.168.10.126 vrrp vrid 1 priority 150 vrrp

At the same time, set the upper link detection , testing GigabitEthernet0/0/9 Interface , If the interface fails or loses packets, the priority will be reduced 60. In this case , go SW7 Route for communication .

vrid 1 track interface GigabitEthernet0/0/9 reduced 60 dhcp selectglobal

The same goes for the rest ：

Be careful. , stay sw6 and sw7 Of ip Cannot configure the same , Otherwise, it is easy to conflict . Screenshot of stepping on the pit ：

Step on the pit 2：

End of configuration VRRP, All are Lord . reason ,Eth-Trunk1 No release vlan vrrp：

interface Eth-Trunk1port link-type trunkport trunk allow-pass vlan 2 to 4094 solve ：

3.1  Convenient command

SW6 For example ：

interface Vlanif10
ip address 192.168.10.124 25
vrrp vrid 1 virtual-ip 192.168.10.126
vrrp vrid 1 priority 150
vrrp vrid 1 track interface GigabitEthernet0/0/9 reduced 60
dhcp select global

interface Vlanif20
ip address 192.112.20.252 25
vrrp vrid 2 virtual-ip 192.112.20.254
vrrp vrid 2 priority 150
vrrp vrid 2 track interface GigabitEthernet0/0/9 reduced 60

interface Vlanif40
 ip address 192.168.20.252 25
 vrrp vrid 4 virtual-ip 192.168.20.254

interface Vlanif30
 ip address 192.168.20.124 25
 vrrp vrid 3 virtual-ip 192.168.20.126

interface Vlanif50
 ip address 192.168.30.124 25
 vrrp vrid 5 virtual-ip 192.168.30.126