Vrrp+mstp configuration details [Huawei ENSP experiment]

One . Preface

We configured MSTP, Completed a basic requirement , Now let's continue to improve , Use VRRP+MSTP To configure
Requirements are as follows ：

Existing demand of a company 500 This device can be connected to the external network , The company has 5 Departments , Namely A\B\C\D\E,
Every department needs 100 device , And the second floor is required to be isolated .
1. Make a reasonable plan IP（ Use private IP） With subnets .
2. It is proposed to adopt DHCP Distribution address （ expand ）
3. Divide VLAN, Ensure the control of layer 2 link traffic .
5. The company network needs to be configured on two convergence layer switches and a core router ospf Routing protocol realizes internal network communication .
6、 Link aggregation is needed between two convergence layer switches to increase bandwidth , Considering the security of the two-layer network and the occupation of network resources, it is necessary to realize the two-layer isolation between different departments .
7. Current use 5 Two layer switches simulate 5 Access layer equipment of departments .
8. To improve the reliability of the network , Each layer-2 access device needs to be interconnected with the convergence layer device , So you need to configure STP The protocol prevents the occurrence of loops on the basis of ensuring reliability .（ expand ）
9、 To facilitate later management and maintenance, it is necessary to enable the remote login function on the core and convergence layer devices . The authentication method is user name + Password authentication （ User name and password customization ）.
10.MSTP、VRRP These technologies can be considered and implemented by students according to the situation .（ expand ）
11. Think about how to realize when intranet users need to access the Internet ？

1.1 MSTP

MSTP Not just multiple MST（ Spanning tree instance ）, And it can be divided into multiple MST Area （MST Area , Also known as MST Area ）. Usually ,MSTP The network can contain one or more MST Domain , Every MST A domain can contain one or more MST. Every MSTI Run by stp/rstp/mstp The switching equipment consists of , These switching devices pass mstp After the protocol is calculated, a tree network is formed .

1.2 VRRP

Virtual routing redundancy protocol VRRP（Virtual Router Redundancy Protocol） It is a fault-tolerant protocol for improving network reliability . adopt VRRP, When the next hop equipment of the host fails , Switch business to backup device in time , So as to ensure the continuity and reliability of network communication .

Look at the topology ：

3、 ... and . Experimental process

We have successfully configured MSTP, Then we need to pay attention to one thing ：
Because of our MSTP Of

instance 1 root primary
instance 2 root secondary

vlan10 20 At the taproot SW6, Spare root in SW7.
vlan30 40 50 The taproot is SW7, Spare root in SW6.
Allocate as follows .

instance 1 vlan 10 20
instance 2 vlan 30 40 50

Then we need to pay attention to one thing after configuration
VRRP in vlan 10 20 go SW6, Echo with the above
as follows , Let's get in first interface Vlanif10, To configure ip Address

interface Vlanif10
ip address 192.168.10.124 25

Use VRRP Configure virtual routing , Change the priority to 150.

vrrp vrid 1 virtual-ip 192.168.10.126 vrrp vrid 1 priority 150 vrrp

At the same time, set the upper link detection , testing GigabitEthernet0/0/9 Interface , If the interface fails or loses packets, the priority will be reduced 60.
In this case , go SW7 Route for communication .

vrid 1 track interface GigabitEthernet0/0/9 reduced 60 dhcp select
global

The same goes for the rest ：

Be careful. , stay sw6 and sw7 Of ip Cannot configure the same , Otherwise, it is easy to conflict .
Screenshot of stepping on the pit ：

Step on the pit 2：

End of configuration VRRP, All are Lord .
reason ,Eth-Trunk1 No release vlan vrrp：

interface Eth-Trunk1
port link-type trunk
port trunk allow-pass vlan 2 to 4094
solve ：

3.1 Convenient command

SW6 For example ：

interface Vlanif10
ip address 192.168.10.124 25
vrrp vrid 1 virtual-ip 192.168.10.126
vrrp vrid 1 priority 150
vrrp vrid 1 track interface GigabitEthernet0/0/9 reduced 60
dhcp select global

interface Vlanif20
ip address 192.112.20.252 25
vrrp vrid 2 virtual-ip 192.112.20.254
vrrp vrid 2 priority 150
vrrp vrid 2 track interface GigabitEthernet0/0/9 reduced 60

interface Vlanif40
 ip address 192.168.20.252 25
 vrrp vrid 4 virtual-ip 192.168.20.254

interface Vlanif30
 ip address 192.168.20.124 25
 vrrp vrid 3 virtual-ip 192.168.20.126

interface Vlanif50
 ip address 192.168.30.124 25
 vrrp vrid 5 virtual-ip 192.168.30.126