MSTP实验(华为设备ENSP为例)
拓扑及描述
- SW1、SW2、SW3如图所属两两相连,构成一个三角形的网络拓扑;
- SW3模拟接入层交换机,SW1及SW2模拟汇聚层的交换机。在SW3上可能连接着多个业务VLAN的终端。假设此处存在四个VLAN,分别是10、20、30和40。
实验需求
- 在各交换机上创建VLAN10、20、30、40;将交换机互联接口全部配置为Trunk模式并放行所有VLAN;
- 三台交换机均部署MSTP,处于同一个MSTP域,域名为xiaojuwa;
- 将VLAN10及20映射到MSTP实例1;VLAN30及40映射到MSTP实例2;
- 分别针对实例1及实例2进行优先级的配置,使得最终两棵CIST阻塞的端口如图所示,从而实现内网VLAN流量的负载分担。换句话说就是VLAN10及20的上行流量从SW3的GE0/0/21口送出,而VLAN30及40的上行流量走GE0/0/22接口。
实验步骤:
ensp拓扑绘制
SW1的配置
<Huawei>system-view
Enter system view, return user view with Ctrl+Z.
[Huawei]dis cu
#
sysname Huawei
#
vlan batch 10 20 30 40
#
stp instance 0 priority 0
stp instance 1 priority 0
stp instance 2 priority 4096
#
cluster enable
ntdp enable
ndp enable
#
drop illegal-mac alarm
#
diffserv domain default
#
stp region-configuration
region-name xiaojuwa
instance 1 vlan 10 20
instance 2 vlan 30 40
active region-configuration
#
drop-profile default
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password simple admin
local-user admin service-type http
#
interface Vlanif1
#
interface MEth0/0/1
#
interface GigabitEthernet0/0/1
#
interface GigabitEthernet0/0/2
#
interface GigabitEthernet0/0/3
#
interface GigabitEthernet0/0/4
#
interface GigabitEthernet0/0/5
#
interface GigabitEthernet0/0/6
#
interface GigabitEthernet0/0/7
#
interface GigabitEthernet0/0/8
#
interface GigabitEthernet0/0/9
#
interface GigabitEthernet0/0/10
#
interface GigabitEthernet0/0/11
#
interface GigabitEthernet0/0/12
#
interface GigabitEthernet0/0/13
#
interface GigabitEthernet0/0/14
#
interface GigabitEthernet0/0/15
#
interface GigabitEthernet0/0/16
#
interface GigabitEthernet0/0/17
#
interface GigabitEthernet0/0/18
#
interface GigabitEthernet0/0/19
#
interface GigabitEthernet0/0/20
#
interface GigabitEthernet0/0/21
#
interface GigabitEthernet0/0/22
port link-type trunk
port trunk allow-pass vlan 10 20 30 40
#
interface GigabitEthernet0/0/23
port link-type trunk
port trunk allow-pass vlan 10 20 30 40
#
interface GigabitEthernet0/0/24
port link-type trunk
port trunk allow-pass vlan 10 20 30 40
#
interface NULL0
#
user-interface con 0
user-interface vty 0 4
#
return
[Huawei]
SW2的配置
[Huawei]dis cu
#
sysname Huawei
#
vlan batch 10 20 30 40
#
stp instance 0 priority 4096
stp instance 1 priority 4096
stp instance 2 priority 0
#
cluster enable
ntdp enable
ndp enable
#
drop illegal-mac alarm
#
diffserv domain default
#
stp region-configuration
region-name xiaojuwa
instance 1 vlan 10 20
instance 2 vlan 30 40
active region-configuration
#
drop-profile default
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password simple admin
local-user admin service-type http
#
interface Vlanif1
#
interface MEth0/0/1
#
interface GigabitEthernet0/0/1
#
interface GigabitEthernet0/0/2
#
interface GigabitEthernet0/0/3
#
interface GigabitEthernet0/0/4
#
interface GigabitEthernet0/0/5
#
interface GigabitEthernet0/0/6
#
interface GigabitEthernet0/0/7
#
interface GigabitEthernet0/0/8
#
interface GigabitEthernet0/0/9
#
interface GigabitEthernet0/0/10
#
interface GigabitEthernet0/0/11
#
interface GigabitEthernet0/0/12
#
interface GigabitEthernet0/0/13
#
interface GigabitEthernet0/0/14
#
interface GigabitEthernet0/0/15
#
interface GigabitEthernet0/0/16
#
interface GigabitEthernet0/0/17
#
interface GigabitEthernet0/0/18
#
interface GigabitEthernet0/0/19
#
interface GigabitEthernet0/0/20
#
interface GigabitEthernet0/0/21
#
interface GigabitEthernet0/0/22
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
interface GigabitEthernet0/0/23
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
interface GigabitEthernet0/0/24
#
interface NULL0
#
user-interface con 0
user-interface vty 0 4
#
return
SW3的配置
<Huawei>dis cu
#
sysname Huawei
#
vlan batch 10 20 30 40
#
cluster enable
ntdp enable
ndp enable
#
drop illegal-mac alarm
#
diffserv domain default
#
stp region-configuration
region-name xiaojuwa
instance 1 vlan 10 20
instance 2 vlan 30 40
active region-configuration
#
drop-profile default
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password simple admin
local-user admin service-type http
#
interface Vlanif1
#
interface MEth0/0/1
#
interface GigabitEthernet0/0/1
#
interface GigabitEthernet0/0/2
#
interface GigabitEthernet0/0/3
#
interface GigabitEthernet0/0/4
#
interface GigabitEthernet0/0/5
#
interface GigabitEthernet0/0/6
#
interface GigabitEthernet0/0/7
#
interface GigabitEthernet0/0/8
#
interface GigabitEthernet0/0/9
#
interface GigabitEthernet0/0/10
#
interface GigabitEthernet0/0/11
#
interface GigabitEthernet0/0/12
#
interface GigabitEthernet0/0/13
#
interface GigabitEthernet0/0/14
#
interface GigabitEthernet0/0/15
#
interface GigabitEthernet0/0/16
#
interface GigabitEthernet0/0/17
#
interface GigabitEthernet0/0/18
#
interface GigabitEthernet0/0/19
#
interface GigabitEthernet0/0/20
#
interface GigabitEthernet0/0/21
#
interface GigabitEthernet0/0/22
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
interface GigabitEthernet0/0/23
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
interface GigabitEthernet0/0/24
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
interface NULL0
#
user-interface con 0
user-interface vty 0 4
#
port-group link-type
#
return
查看验证
<Huawei>dis stp brief
MSTID Port Role STP State Protection
0 GigabitEthernet0/0/23 ROOT FORWARDING NONE
0 GigabitEthernet0/0/24 ALTE DISCARDING NONE
1 GigabitEthernet0/0/23 ROOT FORWARDING NONE
1 GigabitEthernet0/0/24 DESI FORWARDING NONE
2 GigabitEthernet0/0/23 ROOT FORWARDING NONE
2 GigabitEthernet0/0/24 DESI FORWARDING NONE
<Huawei>
流量走向
实验总结
通过此次实验,我们成功实现了基于MSTP的多实例生成树负载分担,确保了不同VLAN流量通过不同路径进行上行,达到了预期的内网流量负载均衡效果。
实验关键点:
-
MSTP区域配置:
- 所有交换机都加入了同一个MSTP区域,区域名为
xiaojuwa
,并且将VLAN 10和20映射到实例1,VLAN 30和40映射到实例2。
- 所有交换机都加入了同一个MSTP区域,区域名为
-
优先级的配置:
- 通过设置 SW1 为MST Instance 1的根桥,确保VLAN 10和VLAN 20的流量从SW3的 GigabitEthernet0/0/21 端口上行。
- 通过设置 SW2 为MST Instance 2的根桥,确保VLAN 30和VLAN 40的流量从SW3的 GigabitEthernet0/0/22 端口上行。
- 默认情况下,SW1为MSTP实例0的根桥。
-
Trunk链路的配置:
- 各交换机之间的互联端口均被配置为Trunk模式,允许VLAN 10、20、30、40通过,保证了所有VLAN的正常通信。
最终结果:
通过配置生成树的优先级,我们成功实现了VLAN 10和VLAN 20流量优先通过SW1,VLAN 30和VLAN 40流量优先通过SW2,实现了不同VLAN流量的负载分担。MSTP在三台交换机上均正常工作,且阻塞端口状态与预期一致,验证了生成树协议在多实例环境下的有效性。
在实际网络中,MSTP可以有效地优化网络资源的使用,减少单一路径的流量压力,提高网络的整体冗余性和稳定性。这次实验展示了如何使用MSTP配置负载均衡,具有良好的参考意义。
【推荐】国内首个AI IDE,深度理解中文开发场景,立即下载体验Trae
【推荐】编程新体验,更懂你的AI,立即体验豆包MarsCode编程助手
【推荐】抖音旗下AI助手豆包,你的智能百科全书,全免费不限次数
【推荐】轻量又高性能的 SSH 工具 IShell:AI 加持,快人一步
· 无需6万激活码!GitHub神秘组织3小时极速复刻Manus,手把手教你使用OpenManus搭建本
· Manus爆火,是硬核还是营销?
· 终于写完轮子一部分:tcp代理 了,记录一下
· 别再用vector<bool>了!Google高级工程师:这可能是STL最大的设计失误
· 单元测试从入门到精通