實(shí)驗(yàn)1.1交換機(jī)的基本配置批注[yeslab2]:設(shè)批注[yeslab2]:設(shè) 為[yeslab3]:進(jìn)入配置從交換機(jī)的為ciscologin默認(rèn)時(shí)，交換機(jī)的以太網(wǎng)接口是開啟的，對(duì)于交換機(jī)的以太網(wǎng)接口可以配置器雙工模式和速率等。配置舉例： SW(config)#interfaceSW(config-if)#duplex{full|half|auto}SW(config-if)#speed{10|100|1000|auto}SW(config)#intvlan1SW(config-if)#ipadd0[A6]:配置默認(rèn)網(wǎng)關(guān)目的是讓其他網(wǎng)段上的主機(jī)也能夠[A6]:配置默認(rèn)網(wǎng)關(guān)目的是讓其他網(wǎng)段上的主機(jī)也能夠net該交換SW(config)#ipdefault-gatewaySW1#copySW1#copyrunning-cionfigstartup-configDestinationfilename[startup-config]?Building理解交換機(jī)的CAM表；]:]:[yeslab10]:配置接口在接入了MACdown[yeslab11進(jìn)入配置接口vlan1]:R1能夠與vlan1[yeslab13配置R1的f0/0j接口vlan1的管理地址是直連網(wǎng)段，使vlan1中能和交換機(jī)的f0/9FastEthernet0/0isup,lineprotocolis]:MACMTU1500bytes,BW100000Kbit,DLY100usec,reliability255/255,txload1/255,rxload1/255EncapsulationARPA,loopbacknotsetKeepaliveset(10sec)Full-duplex,100Mb/s,100BaseTX/FXARPtype:ARPA,ARPTimeout04:00:00SW1#showmacaddress-MacAddress MacAddress R1(config)#intR1(config-if)#mac-addressSW1#_SECURITY-2-PSECURE_VIOLATION:Securityviolationoccurred,causedbyMACaddress0012.0012.0012onportFastEthernet0/9.*MarR1(config)#intR1(config-if)#mac-addressSW1#_SECURITY-2-PSECURE_VIOLATION:Securityviolationoccurred,causedbyMACaddress0012.0012.0012onportFastEthernet0/9.*Mar100:21:40.275:%PM-4-ERR_DISABLE:psecure-violationerrordetectedonFa0/9,puttingFa0/9inerr-disablestate*Mar100:21:41.279:%LINEPROTO-5-UPDOWN:LineprotocolonInterfacechangedstateto[yeslab16更改接口的MAC地[yeslab15]:輸出表明SW1f0/9R1f0/0MAC[yeslab17SW1上的輸出顯示，因是端口安全機(jī)制檢測(cè)到該端口上接入了除R1以外的設(shè)備（被認(rèn)為是f0/9shutdown，防止設(shè)備[yeslab17SW1上的輸出顯示，因是端口安全機(jī)制檢測(cè)到該端口上接入了除R1以外的設(shè)備（被認(rèn)為是f0/9shutdown，防止設(shè)備SW1#shintFastEthernet0/9isSW1#shintFastEthernet0/9isdown,lineprotocolisdown(err-HardwareisFastEthernet,addressis000b.5f85.1389(bia000b.5f85.1389)MTU1500bytes,BW100000Kbit,DLY100usec,批注[yeslab18]:批注[yeslab18]:當(dāng)交換機(jī)上有新的MAC地址條數(shù)超過(guò)最大數(shù)量則接批注[yeslab19]:當(dāng)有新的計(jì)算機(jī)從MAC地址條數(shù)超過(guò)最大數(shù)量則批注[yeslab20]:當(dāng)有新的計(jì)算機(jī)從noshutdownSW1(config-if)#switchport-securityviolationSecurityviolationprotectSecurityviolationrestrictSecurityviolationshutdown實(shí)驗(yàn)1.3交換機(jī)的恢Cisco交換機(jī)的恢復(fù)步驟和路由器的恢復(fù)有很大差別，并且不同型號(hào)的交換機(jī)恢復(fù)的方法也不盡相同。以下是：CiscoCatalyst3560（Catalyst2950也類似）交換碼恢復(fù)步驟：MACAddress:00:18:ba:11:f5:00XmodemfilesystemisThepassword-recoverymechanismisThesystemhasbeeninterruptedpriortoinitializingtheFlashfilesystem.ThefollowingcommandswillinitializeTheflashfilesystem,andfinishloadingtheoperatingSystemsoftware:]:flash]:批注[yeslab24]:交換機(jī)會(huì)提問(wèn)是否 批注[yeslab25]:將當(dāng)前的啟動(dòng)配置批注yelb26]:使交換機(jī)下次啟動(dòng)時(shí)候從內(nèi)存中加載當(dāng)前保存到內(nèi)存（修改了的配置文批注[yeslab27]:將修改完 置文件保存到NVRAM中。以后啟動(dòng) 掌握交換機(jī)的IOS如果交換機(jī)能夠正常開啟后IOSIOSTFTPIOS復(fù)步驟。然而如果交換機(jī)無(wú)法正常開啟，IOSXmodem通過(guò)Console口從計(jì)算機(jī)IOS，速度為9600bps，一次速度會(huì)比較慢。步驟如下：Console]:ipdefault-SwitchmodeSwitchport-Switchport-securitiyum該端口下最多允許MAC 作Switchport-securitiymac-addressShowmac-address-Mac-addressRenameflash:config.text 通過(guò)Xmodem協(xié)議將文件2.1sw1#confsw1#confsw1(config)#intsw1(config-if)#switchmodeaccesssw1(config-if)#switchaccessvlansw1(config-if)#intf0/2sw1(config-if)#switchmodeaccesssw1(config-if)#switchaccessvlan

]:vlan2r1(config-if)#intr1(config-if)#intr1(config-if)#ipaddr1(config-if)#noshur2(config-if)#intr2(config-if)#intr2(config-if)#ipaddr2(config-if)#noshu查看vlan信息。sw1#shvlan-switch VLAN12Fa0/0,Fa0/3,Fa0/4,Fa0/5Fa0/6,Fa0/7,Fa0/8,Fa0/9Fa0/10,Fa0/11,Fa0/12,Fa0/13Fa0/14,31002fddi-1003token-ring-1004fddinet-default

于活躍狀態(tài)，且f0/1、f09/2已經(jīng)非1）測(cè)試r1和r2間的連通性。因?yàn)榕渲昧薎P地址，相當(dāng)于直連網(wǎng)段應(yīng)該能夠 souTypeescapesequencetoSending5,100-byteICMPEchosto,timeoutis2seconds:PacketsentwithasourceaddressofSuccessrateis100percent(5/5),round-tripmin/avg/max=32/50/722.2理解DTP的協(xié)商規(guī)律。 ]:]:]:vlan]:trunk。SW2的配置命令和SW1的一SW2(config)#SW2(config)#switchportmodeSW2#vlandataSW2(vlan)#vlanVLAN2modified:SW2(config)#intf0/1SW2(config-if)#switchmodeacceSW2(config-if)#switchaccessvlanSW2(config)#int[yeslab43]:配置接口IP本實(shí)驗(yàn)中為了驗(yàn)證R1和R2sousouTypeescapesequencetoSending5,100-byteICMPEchosto,timeoutis2seconds:PacketsentwithasourceaddressofSuccessrateis80percent(4/5),round-tripmin/avg/max=16/33/60ms批注[yeslab44]:此處測(cè)試加上了源IP地址，是為了更加精確的驗(yàn)證R1R2R1的非f0/0口作為源發(fā)包到R2f0/0口來(lái)準(zhǔn)確的驗(yàn)證R1、R2sw1#shintf0/5

NativeNative

EncapsulationEncapsulation

]:[yeslab52端口的trunk

VlansallowedontrunkVlansallowedandactiveinmanagementVlansinspanningtreeforwardingstateandnotpruned

]:批注[yeslab55]:中文翻譯是“本征有vlan都打 在通過(guò)trunk鏈路時(shí)候；但是如果封裝為802.1q則除了本證vlan不 器其他vlan都 sw2#shintf0/5

vlan是vlan1較 情況下是不支持nativevlan和其他

Encapsulation Native

n-

Vlansallowedontrunk

Vlansallowedandactiveinmanagement

VlansinspanningtreeforwardingstateandnotprunedSwitchportmode{trunk|dynamicdesirable|dynamicDynamicDynamic批注[yeslab56]:將接口 trunk模式。封裝類型有DynamicDynamic掌握VTP配置。

2.3VTP

[yeslab58]:協(xié)商，如果另一類型會(huì)是802.1q。[yeslab60配置交換機(jī)的vtp的server。 namealreadysettoSW2(config)#vtppasswordSettingdeviceVLANdatabasepasswordtocciesSW2(config)#vtpmodeSettingdeviceto SW2#shVLANSW2#shVLAN ]:1 002 003 00 00 001004fdnet ieee001005trnet ibm00RemoteSPAN2.4EhernetChannel掌握etherchannel的配置。SW2(config)#hostnameSW2(config)#port-channelload-balancedst-macSW2(config)#interfacePort-channel1SW2(config-if)#switchporttrunkencapsulationdot1qSW2(config-if)#switchportmodetrunkSW2(config-if)#speed100SW2(config-if)#duplexfullSW2(config-if)#interfaceFastEthernet0/5SW2(config-if)#switchporttrunkencapsulationdot1qSW2(config-if)#switchportmodetrunkSW2(config-if)#speed100SW2(config-if)#duplexfullSW2(config-if)#channel-group1modeSW2(config)#interfaceSW2(config-if)#switchporttrunkencapsulationSW2(config-if)#switchportmodeSW2(config-if)#speedSW2(config-if)#duplexSW2(config-if)#channel-groupSW2(config-if)#channel-group1mode[yeslab74查看etherchannel的[yeslab75etherchannel已經(jīng)正“SDetherchannel關(guān)掉重[yeslab76channel-group[yeslab78]:默認(rèn)情況下交換機(jī)[yeslab78]:默認(rèn)情況下交換機(jī)工輸入，且不會(huì)在show[yeslab79]:配置etherchannelswitch(config)#hostnameSW2SW2(config)#interfaceFastEthernet0/5SW2(config-if)#switchportmodedynamicSW2(config-if)#channel-group1modeSW2(config)#interfaceFastEthernet0/6SW2(config-if)#switchportmodedynamicdesirableSW2(config-if)#channel-group1modeactive[yeslab80配置etherchannel的模式為L(zhǎng)ACPactive。批注yelb77]:都配置使用相同的協(xié)議才可成功協(xié)商建立hrChannl（不關(guān)心接口的annl的形式，否則會(huì)在tecanl中體現(xiàn)是終止?fàn)顟B(tài)。一etherchannel；PAgP；[yeslab84f0/6端口上協(xié)商SW1#shetherchannelFlags:D-down P-bundledinport-channelI-stand-alones-suspendedH-Hot-standby(LACPonly)R-Layer3 S-Layer2U-in f-failedtoallocateM-notinuse,minimumlinksnotmetu-unsuitableforbundlingw-waitingtobeaggregatedd-defaultportNumberofchannel-groupsinuse:1Numberofaggregators: GroupPort-channel SW2#SW2#showetherchannelFlags:D-down P-bundledinport-channelI-stand-alones-suspendedH-Hot-standby(LACPonly)R-Layer3 S-Layer2U-in f-failedtoallocateM-notinuse,minimumlinksnotmetu-unsuitableforbundlingw-waitingtobed-defaultNumberofchannel-groupsinuse:Numberof GroupPort-channel + 配置不同的接口形式進(jìn)行協(xié)商建立[yeslab85配置etherchannel的模式為PAgP的auto。SW2(config)#hostnamesw3550SW2(config)#interfaceSW2(config)#hostnamesw3550SW2(config)#interfaceFastEthernet0/5SW2(config-if)#switchportmodedynamicSW2(config-if)#channel-group1modeSW2(config)#interfaceFastEthernet0/6SW2(config-if)#switchportmodedynamicdesirableSW2(config-if)#channel-group1modedesirable[yeslab86配置etherchannel的模式為PAgP的desirable。SW1#shetherchannelSW1#shetherchannelFlags:D-down P-bundledinport-channelI-stand-alones-suspendedH-Hot-standby(LACPonly)R-Layer3 S-Layer2U-in f-failedtoallocateM-notinuse,minimumlinksnotmetu-unsuitableforbundlingw-waitingtobeaggregatedd-defaultportNumberofchannel-groupsinuse:NumberofGroupPort-channel1 +SW2#shetherchannelSW2#shetherchannelFlags:D-down P-bundledinport-channelI-stand-alones-suspended[yeslab87]:表明etherchannel已商成trunk，只要配置了相同的協(xié)議HH-Hot-standby(LACPR- S-U-in f-failedtoallocateM-notinuse,minimumlinksnotmetu-unsuitableforbundlingw-waitingtobed-defaultNumberofchannel-groupsinuse:Numberof GroupPort-channel + VlanVlan2namevlanSwitchaccessvlanInterfacerangeF0/2–ShowSwitchporttrunkSwitchportmode間端口配置為trunk形式ShowinterfaceF0/3SwitchportVtpmode配置交換機(jī)為vtpserverVtpVtpVtpmodeVtpmodeShowvtpVtpVtpversion1nterfaceport-channelChannel-groupmodePort-channelload-balancedst-Showetherchannel Showetherchannelport-3.1STPciscodesirabletrunk（3550）是“n-isltrunk。2950trunk802.1q。sw3560(vlan)#vlansw3560(vlan)#vlanVLAN2Name:APPLYcompleted.APPLYcompleted.sw3560(config)#vtpChangingVTPnamefromNULLtoyeslabsw3560(config)#vtppasswordccies[yeslab88]:高版本的IOS可以不創(chuàng)建VLAN。注意：[yeslab89交換機(jī)VTP默認(rèn)就server的模式因此可不必要進(jìn)行3276832769是[yeslab91跟橋的MAC]:該設(shè)備在該vlan1DesgFWDDesgFWD[yeslab93]:通過(guò)查看表明vlan1vlan2DesgFWDDesgFWDsw3560#shintsw3560#shintFastEthernet0/1isup,lineprotocolisupHardwareisFastEthernet,addressis(bia[yeslab94f0/1MAC地址，spanning-treevlan1priorityspanning-treevlanspanning-treevlan1priorityspanning-treevlan2priorityspanning-treevlan1rootprimaryspanning-treevlan2root]: 4096使之成為vlan1[yeslab96SW3550vlan1的優(yōu)先級(jí)改4096使之成為vlan2[yeslab97]:通過(guò)命令將sw3550分別該成vlan1、vlan2的]:vlan1DesgFWDDesgFWDDesgFWDDesgFWDRootFWDsw3550#showsw3550#showspanning-SpanningtreeenabledprotocolieeeRootID 5o 2secMaxAge20secForwardDelay15BridgeID 32769(priority32768sys-id-ext oTime 2secMaxAge20secForwardDelay15secAgingTime300 RoleSts Prio.Nbr DesgFWD RootFWD SpanningtreeenabledprotocolieeeRootID Thisbridgeistheo 2secMaxAge20secForwardDelay15BridgeID (priority4096sys-id-ext oTime 2secMaxAge20secForwardDelay15secAgingTime300 RoleSts Prio.Nbr[yeslab100此處表明在vlan2中SW3550是跟橋。DesgFWDDesgFWDRootFWDAltnBLK RootFWD F0/2處于轉(zhuǎn)發(fā)狀態(tài)轉(zhuǎn)發(fā)數(shù)據(jù)幀。這樣起到了負(fù)載均衡的作用。3.21）理解Portfast的工作原理；2）理解Uplinkfast的工作原理；3）PC1(config)#interfacePC1(config)#noipPC1(config)#interfacePC1(config)#noipSW3560(config)#hostnameSW3560(config)#spanning-treevlan1priority批注yelb101]:以上配置是將路由器的路由功能關(guān)掉，設(shè)置接口的IPPC1(config)#hostname[yeslab102]:默認(rèn)情況下所有端vlan1中，所以在配置文件中批注yelb103]:以上配置是將路由器的路由功能關(guān)掉，設(shè)置接口的IP作為一臺(tái)主機(jī)使用，同時(shí)在實(shí)驗(yàn)3.1的基礎(chǔ)上對(duì)W3560A交換機(jī)的配置做了添加，使模擬的C主機(jī)能夠和W3560交換機(jī)進(jìn)行通信shspvlanSpanningtreeenabledprotocolieeeRootID Thisbridgeistherooto 2secMaxAge20secForwardDelay15BridgeID (priority4096sys-id-ext oTime 2secMaxAge20secForwardDelay15secAgingTime300 RoleSts Prio.Nbr DesgFWD DesgFWD F0/9vlan1PC1f0/0noPC1(config)#intf0/0PC1(config-if)#nosw3560#debugspanning-tree*Mar103:13:42.163:setportid:PC1(config)#intf0/0PC1(config-if)#nosw3560#debugspanning-tree*Mar103:13:42.163:setportid:VLAN0001Fa0/9:newportid*Mar103:13:42.163:STP:VLAN0001Fa0/9->listening*Mar103:13:44.159:%LINK-3-UPDOWN:InterfaceFastEthernet0/9,changedstateto 103:13:45.159:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceFastEthernet0/9,changedstatetoup*Mar*Mar103:13:57.163:STP:VLAN0001Fa0/9->learning*Mar103:14:12.163:STP:VLAN0001Fa0/9->批注[yeslab106]:以上表明配置了portfastf0/9接口在接入了計(jì)算機(jī)后立即由原來(lái)的bloking進(jìn)入了即切換到備份鏈，而不需要等30s或50s。本例中假設(shè)SW3（2950）是接入層交換機(jī)。SW2950(config)#spanning-treeSW2950(config)#spanning-treeSW2950#debugspanning-treesw3560(config)#int03:44:48:STP:VLAN0001newrootportFa0/2,cost]:批注[yeslab107]:以上表明sw3560(config)#spanning-treesw3560(config)#spanning-treesw3550(config)#spanning-treebackbonefastsw2950(config)#spanning-tree:STP:VLAN0001Fa0/2->:STP:VLAN0001Fa0/2->批注批注[yeslab114]:通過(guò)查看可看到默PVST模式。]:3.3[yel[yelb10]:將交換機(jī)端口配置為rk后就能夠查看到P得狀態(tài)，交換上默認(rèn)是有SP存在的。因此在本實(shí)驗(yàn)中可以使用默認(rèn)的SP封裝類型為dot1q]:Sw2(config-if)#intSw2(config-if)#intragef0/5–Sw2(config-if)#switchportencapsulationdot1qSw2(config-if)#switchportmodetrunk[yeslab113]:CISCO交換機(jī)的默spannning-tree模式是PVST[yeslab113]:CISCO交換機(jī)的默spannning-tree模式是PVST，本命SpanningtreeenabledprotocolieeeRootID ThisbridgeistherootoTime 2secMaxAge20secForwardDelay15secBridgeIDPriority 32769(priority32768sys-id-ext1)]:]:DesgFWDDesgFWDRootFWDAltnBLK步驟：1）在SW1上關(guān)閉interfacef0/5SW1(config)#intf0/5*Mar101:27:14.115:STP:VLAN0001newrootportFa0/6,cost*Mar101:27:14.115:STP:VLAN0001Fa0/6-> 101:27:15.107:%LINEPROTO-5-UPDOWN:LineprotocolonInterfacechangedstateto*Mar101:27:16.115:STP:VLAN0001sentTopologyChangeNoticeon*Mar101:27:16.123:%LINK-3-UPDOWN:InterfaceFastEthernet0/5,changedstateto1.115:STP:VLAN0001Fa0/6->1.115:STP:VLAN0001Fa0/6->SW1(config)#spanning-treemoderapid-SW2(config)#spanning-treemodeSW1(config)#spanning-treemoderapid-SW2(config)#spanning-treemoderapid-]:rstpRoleStsDesgFWDDesgFWDSW2#shRootFWDAltnBLK[yeslab119此輸出表明：在F0/5down掉后，立即有F0/63.4批注批注[yeslab120]:注意：用vlandatabase創(chuàng)建vlan后要退出后配置才]:[yeslab122mst的配置模[yeslab123mst的。[yeslab124mst的修訂版本號(hào)。只有相同的和版本號(hào)才能出在同一個(gè)mst域中。[yeslab125vlan1、vlan2映射到實(shí)例1中。[yeslab126vlan3、vlan4映射到實(shí)例2中。[yeslab127配置SW1在mst實(shí)為mst的實(shí)例一的跟橋。trunk（SW1、SW2dot1qSW3550SW2950的trunk鏈路可自動(dòng)進(jìn)行協(xié)商建立，因?yàn)槟J(rèn)情況下接口都是desirable）SW1(vlan)#vlanVLAN1SW1(vlan)#vlanVLAN2Name:SW1(vlan)#vlanVLAN3Name:SW1(vlan)#vlanVLAN4Name:SW1(config)#hostnameSW1SW1(config)#spanning-treemodemstSW1(config-mst)#instance1vlan1-SW1(config-mst)#instance2vlan3-SW1(config)#spanning-treemst1priority4096SW1(config)#intf0/5SW1(config-if)#switchporttrunkencapsulationSW1(config-if)#switchportmodeSW1(config-if)#switchportmodeSwitch(config)#hostnameSW2SW2(config)#spanning-treemodemstSW2(config)#spanning-treemstconfigurationSW2(config-mst)#nameSW2(config-mst)#revision1SW2(config-mst)#instance1vlan1-SW2(config-mst)#instance2vlan3-SW2(config)#spanning-treemst2prioritySW2(config)#interfaceSW2(config-if)#switchporttrunkencapsulationdot1qSW2(config-if)#switchportmodetrunk[yeslab128配置SW2在mst實(shí)28192，即：配置mst實(shí)例一中SW2為跟橋。SW3(config)#hostnameSW1是實(shí)例1的跟橋，SW2是實(shí)例2的跟橋。SW1#showVLANSW1#showVLAN Fa0/2,Fa0/3,Fa0/4,Fa0/7,Fa0/8,Fa0/9,Fa0/11,Fa0/12,Fa0/13,Fa0/15,Fa0/16,Fa0/17,Fa0/19,Fa0/20,Fa0/21,Fa0/23,Fa0/24,Fa0/25,Fa0/27,Fa0/28,Fa0/29,Fa0/31,Fa0/32,Fa0/33,Fa0/35,Fa0/36,Fa0/37,Fa0/39,Fa0/40,Fa0/41,Fa0/43,Fa0/44,Fa0/45,Fa0/47,Fa0/48,Gi0/1, 1002fddi-1003token-ring-1004fddinet-1005trnet-]:SW2#showVLAN SW2#showVLAN Fa0/1,Fa0/3,Fa0/4,Fa0/7,Fa0/8,Fa0/9,Fa0/10Fa0/11,Fa0/12,Fa0/13,Fa0/14Fa0/15,Fa0/16,Fa0/17,Fa0/18Fa0/19,Fa0/20,Fa0/21,Fa0/22Fa0/23,Fa0/24,Fa0/25,Fa0/26Fa0/27,Fa0/28,Fa0/29,Fa0/30Fa0/31,Fa0/32,Fa0/33,Fa0/34Fa0/35,Fa0/36,Fa0/37,Fa0/38Fa0/39,Fa0/40,Fa0/41,Fa0/42Fa0/43,Fa0/44,Fa0/45,Fa0/47,Fa0/48,Gi0/1, 1002fddi- 1003token-ring- 1004fddinet- 1005trnet- VLANType ParentRingNoBridgeNoStpBrdgModeTrans11 002 003 004 00 00 001004fdnet ieee001005trnet ibm00RemoteSPAN1 1 002 003 004 00 00 001004fdnet -001005trnet -00RemoteSPAN1 002 003 004 00 00 00 ieee0010051005trnet1500--ibm00RemoteSPANPrimarySecondaryDesgFWDP2pDesgFWD[yeslab131MST1SW1是跟DesgFWDP2pDesgFWD[yeslab132MST2SW2是跟DesgFWDP2pRootFWDDesgFWDP2pRootFWDDesgFWDP2pRootFWDDesgFWDP2pDesgFWDSW3#shspanning-SpanningSW3#shspanning-SpanningtreeenabledprotocolieeeRootID 1o 2secMaxAge20secForwardDelay15BridgeIDPriority 32769(priority32768sys-id-ext1) RoleSts00:55:12:Prio.NbrRoleSts00:55:12:Prio.NbrRootLISAltnBLKRootLISAltnBLKRootLISAltnBLKSpanningtreeenabledprotocolieeeRootID 1o 2secMaxAge20secForwardDelay15BridgeID 32772(priority32768sys-id-ext oTime 2secMaxAge20secForwardDelay15secAgingTime15 RoleSts Prio.NbrRootLISAltnBLK[yeslab133配置SW2在vlan1時(shí)要通過(guò)MST0來(lái)控制。[yeslab134SW2 Desg DesgFWD SpanningtreeenabledprotocolmstpRootID 5o 2secMaxAge20secForwardDelay15BridgeID 32769(priority32768sys-id-ext o 2secMaxAge20secForwardDelay15 RoleSts Prio.Nbr DesgFWD P2p RootFWD SpanningtreeenabledprotocolmstpRootID ThisistheBridgeo2secMaxAge20secForwardDelay15 (priority8192sys-id-ext2)2secMaxAge20secForwardDelay15secStsCost Prio.NbrTypeFWD P2pFWD [yeslab135MST0實(shí)例SW3#showSW3#showspanning-SpanningtreeenabledprotocolieeeRootID AltnBLKAltnBLKRootFWDAltnBLKRootFWDAltnBLKRootFWDAltnBLKRootFWDSW3(config)#intSW3(config-if)#spanning-treevlan3 Changeaninterface'sperVLANspanningtreepathport-priorityChangeaninterface'sspanningtreeportSW3(config-if)#spanning-treevlan3costSW3(config-if)#spanning-treevlan4costSW3#shspanning-SW3#shspanning-SpanningtreeenabledprotocolRoot2o2secMaxAge20secForwardDelay15BridgeID 32769(priority32768sys-id-ext oTime 2secMaxAge20secForwardDelay15secAgingTime300RoleStsPrio.NbrAltnBLKRootFWDSpanningtreeenabledprotocolRoot2o2secMaxAge20secForwardDelay15BridgeID 32770(priority32768sys-id-ext oTime 2secMaxAge20secForwardDelay15secAgingTime300RoleRoleStsPrio.NbrAltnBLK RootFWD 仍然是f0/2為根端口轉(zhuǎn)發(fā)數(shù)據(jù)。SpanningtreeenabledprotocolRoot1RootFWDAltnBLKRootFWDRootFWD AltnBLK ]:]:f0/1BPDUGUARDCISCO35502900trunk列交換機(jī)的端口默認(rèn)是模式都是desirable模式，所以如不進(jìn)行配置可自動(dòng)協(xié)商為trunk，封裝形式將是[yeslab139配置接口的trunkdot1q]:]:說(shuō)明：完成本配置步驟后可用“showinterface+{接口名字及編號(hào)}+trunktrunkSW1#shintf0/5

EncapsulationStatusVlansallowedontrunk[yeslab142[yeslab142通過(guò)查看可觀察到f0/5802.1q(即：配置的dot1q).trunk的工作模式是VlansVlansallowedandactivein1Vlansinspanningtreeforwardingstateandnot1SW2#shintf0/5 Encapsulation Native n- Vlansallowedon 1- Vlansallowedandactiveinmanagement Vlansinspanningtreeforwardingstateandnotpruned 批注[yeslab143]:可觀察到SW2的f0/5接口的封裝是動(dòng)態(tài)協(xié)商起來(lái)的，所以通過(guò)以上配置可見SW1/SW2之trunk是自動(dòng)協(xié)商起來(lái)的。SW1#showspanning-SW1#showspanning-SpanningtreeenabledprotocolieeeRootID 5 2secMaxAge20secForwardDelay15BridgeID 32769(priority32768sys-id-ext 2secMaxAge20secForwardDelay15secAgingTime300RoleStsPrio.NbrRootFWD SW2#showspanning-[yeslab144通過(guò)查看SW2是跟DesgDesgFWDDesgFWDSW1(config)#spanning-treevlan1prioritySW1(config)#spanning-treevlan1priority4096SW2(config-if)#spanning-treeguardroot 101:07:54.439:%SPANTREE-2-ROOTGUARD_CONFIG_CHANGE:Rootguardenabledonport*Mar101:07:54.443:%SPANTREE-2-ROOTGUARD_BLOCK:RootguardblockingportonSW1#shSW1#shspanning-SpanningtreeenabledprotocolieeeRootID Thisbridgeistherooto 2secMaxAge20secForwardDelay15BridgeIDo(priority4096sys-id-ext2secMaxAge20secForwardDelay15AgingTimeRoleStsPrio.NbrDesgFWD DesgFWD RootFWD SW3(config)#spanning-treevlan1SW3(config)#spanning-treevlan1prioritySW2#shspanning-SpanningtreeenabledprotocolieeeRootID ThisbridgeistherootBridgeIDPriority 32769(priority32768sys-id-ext1) AgingTime RoleSts Prio.Nbr Desg P2p DesgFWD BPDUSW2(config-if)#spanning-treeportfastSW2(config-if)#spanning-treebpduguardenableSW2(config-if)#noshutdown*Mar100:21:55.859:%SPANTREE-2-BLOCK_BPDUGUARD:ReceivedBPDUonportFa0/1withBPDUGuardenabled.Disablingport.*Mar100:21:55.859:%PM-4-ERR_DISABLE:bpduguarderrordetectedonFa0/1,puttingFa0/1inerr-disablestate[yeslab147]:輸出已經(jīng)表明f0/1jinterfacef0/1”命令查看。statetodownFastEthernet0/1isdown,lineprotocolisdown(err-]:FastEthernet0/1isdown,lineprotocolisdown(err-]:HardwareisFastEthernet,addressis000b.5f85.1381(biaShowSpanning- Spanning-treevlan1prioritySpanning-tree配置接口為Spanning-treeSpanning-treeSpanning-treemoderapod-Spanning-treemodespanning-treemstNameRevisionInstance1vlan1-Spanning-treeguard在接口上配置RootSpanning-treebpduguard link-[yeslab149]:物理接口不需要配置ip地址[yeslab150Ethernet0/0默認(rèn)是f0/0.2批注[yeslab152]:配置子接口封裝為并指明該子接口承載vlan2的流量。[yeslab153IP地IP地址就是PC的默認(rèn)[yeslab154]:進(jìn)入子接口、配置f0/0.3批注[yeslab155]:配置子接口封裝為dot1qtrunk的封裝類型統(tǒng)一。vlan3[yeslab156IP地IP地址就是PC的默認(rèn)（1）配置實(shí)例：router1：router(config)#hostnamerouter1router1(config)#interfaceEthernet0/0router1(config-if)#noshutdownrouter1(config-if)#encapsulationdot1Q2router1(config-if)#encapsulationdot1Q3[yeslab157]:退出后配置生效。較高的交換機(jī)的IOS版本支持在全局模式下創(chuàng)建VLAN.[yeslab158]:默認(rèn)配置，交換機(jī)swith(config)#hostnameSW1SW1#vlandatabaseSW1(vlan)#vlan2VLAN2SW1(vlan)#vlanVLAN3APPLYcompleted.APPLYcompleted.swith(config)#noiproutingswith(config)#intf0/3swith(config-if)#switchmodeaccessswith(config-if)#switchaccessvlan3swith(config-if)#noshutdownswith(config)#intf0/4swith(config-if)#switchmodeaccessswith(config-if)#switchaccessvlan4swith(config-if)#noshutdownswith(config)#intf0/0swith(config-if)#switchtrunkencapsulationdot1qswith(config-if)#switchmodetrunkswith(config-if)#noRouter(config)#hostnamePC1PC(config)#noiproutingPC(config)#interfaceFastEthernet0/3PC(config-if)#noswitchportRouter(config)#hostnamePC1PC(config)#noiproutingPC(config)#interfaceFastEthernet0/3PC(config-if)#noswitchportPC(config-if)#ipaddressPC(config)#ipdefault-gatewayrouter(config)#hostnamePC2PC2(config)#noiproutingPC2(config)#interfaceFastEthernet0/4PC2(config-if)#noswitchportPC2(config-if)#ipaddressPC2(config)#ipdefault-gatewaysousouTypeescapesequencetoSending5,100-byteICMPEchosto,timeoutis2seconds:PacketsentwithasourceaddressofSuccessrateis100percent(5/5),round-tripmin/avg/max=68/91/104PC1是為了精確的驗(yàn)證PC1、PC2間SW1#vlandatabaseSW1(vlan)#vlan2SW1#vlandatabaseSW1(vlan)#vlan2VLAN2SW1(vlan)#vlanVLAN3modified:APPLYcompleted.SW1(config-if)#ipaddressSW1(config-if)#ipaddressinterface]:]:的管理地址，vlan1vlan2的管理地SW1(config-if)#ipaddressrouter(config)hostnamePC1PC1(config)#noiproutingPC1(config)#interfacerouter(config)hostnamePC1PC1(config)#noiproutingPC1(config)#interfaceFastEthernet0/2PC1(config-if)#noswitchportPC1(config-if)#ipaddressPC1(config)#ipdefault-gatewayrouter(config)#hostnamePC2PC2(config)#interfaceFastEthernet0/3PC2(config-if)#noswitchportPC2(config-if)#ipaddressPC2(config)#ipdefault-gateway sou souTypeescapesequencetoSending5,100-byteICMPEchosto,timeoutis2seconds:PacketsentwithasourceaddressofSuccessrateis100percent(5/5),round-tripmin/avg/max=64/87/128InterfaceEncapsulationdot1qvlan 指明了子接口的封裝類型及承載哪個(gè)vlan的流量同時(shí)該vlan是nativeIpNoIprouter(config)#hostnamerouter(config)#hostnamePC1PC1(config)#noiprouting擬IP地址。[yeslab162]:配置在組1中R2是若不配置優(yōu)先級(jí)則缺省時(shí)100。[yeslab163配置允許有更高優(yōu) loopback0批注[yeslab166]:配置路由協(xié)議是為 loopback0用以做測(cè)試rip的正常。但是在做track時(shí)候一定要將其從rip中no掉?；亟涌诘穆酚刹豢蛇_(dá)了，而VRRPO或者HSRP的TRACK選項(xiàng)都將不能識(shí)別到這一變化從而導(dǎo)致track的驗(yàn)證試驗(yàn) PC1(config)#interfacePC1(config)#interfaceFastEthernet0/0PC1(config-if)#noswitchportPC1(config-if)#ipaddressPC1(config)#ipdefault-gatewayrouter(config)#hostnameR2R2(config)#interfaceLoopback0R2(config-if)#ipaddressR2(config)#interfaceFastEthernet0/2R2(config-if)#noswitchportR2(config-if)#ipaddressR2(config-if)#standby1ipR2(config-if)#standby1priorityR2(config-if)#standby1R2(config-if)#standby1authenticationmd5key-stringR2(config-if)#standby1trackLoopback0R2(config)#routerripR2(config-router)#version2R2(config-router)#networkR2(config-router)#noauto-router(config)#hostnameR3R3(config)#interfaceFastEthernet0/3R3(config-if)#noswitchportR3(config-if)#ipaddressR3(config-if)#standby1ipR3(config-if)#standby1R3(config-if)#standby1authenticationmd5key-stringciscoR3(config)#routerripR3(config-router)#versionR3(config-router)#networkR3(config-router)#noauto-summaryR2#shstandbyFastEthernet0/2-Group1Stateis2statechanges,laststatechange00:13:24VirtualIPaddressis54ActiveActivevirtualMACaddressisLocalvirtualMACaddressis0000.0c07.ac01(v1default)otime3sec,holdtime10sec osentin1.304secsAuthenticationMD5,key-string"cisco"PreemptionenabledActiverouterisStandbyrouteris,priority100(expiresin7.316sec)Priority120(configured120)TrackinterfaceLoopback0stateUpdecrement100IPredundancynameis"hsrp-Fa0/2-1"(default)R2#shstandby

Pindicatesconfiguredto|GrpPrioP Virtual 120P R3#shstandby

Pindicatesconfiguredto|GrpPrioP Virtual 100PStandbyR3#show[yeslab168輸出表明R3是備是配置的120、而R3則是默認(rèn)的優(yōu)先級(jí)為100。R2(config)#intR2(config)#intloopback100:29:08.707:%HSRP-5-STATECHANGE:FastEthernet0/2Grp1stateActive->todown*Mar100:29:18.707:%HSRP-5-STATECHANGE:FastEthernet0/2Grp1stateSpeak-> R3#shstandby

Pindicatesconfiguredto|GrpPrioPVirtual 100PR3#shstandbyR3#shstandbyFastEthernet0/3-Group1Stateis5statechanges,laststatechange00:01:32VirtualIPaddressis54ActivevirtualMACaddressisLocalvirtualMACaddressis0000.0c07.ac01(v1default)otime3sec,holdtime10sec osentin0.612secsAuthenticationMD5,key-string"cisco"PreemptionenabledActiverouterisStandbyrouteris,priority20(expiresin8.592sec)Priority100(default100)IPredundancynameis"hsrp-Fa0/3-1"R3R2ActivePC1HSRP用另一臺(tái)路由器進(jìn)不影響網(wǎng)絡(luò)的工作正常，而且要求當(dāng)兩臺(tái)路由器同時(shí)處在正常的情況下時(shí)要能夠分擔(dān)網(wǎng)HSRP的多組來(lái)實(shí)router(config)#hostnamePC1PC1(config)#interfaceFastEthernet0/1PC1(config)#noswitchportPC1(config-if)#ipaddressPC1(config)#ipdefault-gatewayrouter(config)#hostnameR2PC1(config)#interfaceFastEthernet0/0PC1(config-if)#noswitchportPC1(config-if)#ipaddressR2PC1(config-if)#standby1priorityPC1(config-if)#standby1PC1(config-if)#standby1authenticationmd5key-stringciscoPC1(config-if)#standby1trackLoopback0100批注批注[yeslab170]:說(shuō)明：此處可loopback0用以做測(cè)試rip的正常。但是在做track時(shí)候一定要將其從ripno而VRRPO或者HSRPTRACK選項(xiàng)track的驗(yàn)證試驗(yàn)失敗（本實(shí)驗(yàn)環(huán)境 R3PC1(config-if)#standby2ipPC1(config-if)#standby2PC1(config-if)#standby2authenticationmd5key-stringPC1(config-router)#versionPC1(config-router)#networkPC1(config-router)#noauto-summaryrouter(config)#hostnameR3R3(config)#interfaceFastEthernet0/0R3(config-if)#noswitchportR3(config-if)#ipaddressR3(config-if)#standby1ipR3(config-if)#standby1R3(config-if)#standby1authenticationmd5key-stringciscoR3(config-if)#standby2ip1R3(config-if)#standby2priorityR3(config-if)#standby2R3(config-if)#standby2authenticationmd5key-stringciscoR3(config-if)#standby2trackLoopback0100versionnetworknoauto-summaryrouter(config)#hostnamePC2PC2(config)#noiproutingPC2(config)#interfacefastethernet0/2PC2(config-if)#ipaddressPC2(config-if)#noshutdownPC2(config)#ipdefault-gatewayR2#shstandbyFastEthernet0/0R2#shstandbyFastEthernet0/0-Group1Stateis2statechanges,laststatechange00:21:19VirtualIPaddressis0ActivevirtualMACaddressisLocalvirtualMACaddressis0000.0c07.ac01(v1default)otime3sec,holdtime10sec osentin0.412AuthenticationAuthenticationMD5,key-string"cisco"PreemptionenabledActiverouterisStandbyrouteris,priority100(expiresin7.508sec)Priority120(configured120)TrackinterfaceLoopback0stateUpdecrement100IPredundancynameis"hsrp-Fa0/0-1"(default)FastEthernet0/0-Group2StateisStandby4statechanges,laststatechange00:16:09VirtualIPaddressis1ActivevirtualMACaddressisLocalvirtualMACaddressis0000.0c07.ac02(v1default)otim