ensp 公司组网拓扑图
一、生产区交换要求
D-1
[d1]vlan batch 21 22 100
[d1]interface Eth-Trunk 0
[d1-Eth-Trunk0]trunkport GigabitEthernet 0/0/1 to 0/0/2
[d1]int g 0/0/23
[d1-GigabitEthernet0/0/23]port link-type trunk //链路类型设为trunk模式
[d1-GigabitEthernet0/0/23]port trunk allow-pass vlan 21 to 22 100 //放通vlan 21 22 100
[d1]int g 0/0/24
[d1-GigabitEthernet0/0/24]port link-type trunk
[d1-GigabitEthernet0/0/24]port trunk allow-pass vlan 21 to 22 100
[d1]interface Eth-Trunk 0
[d1-Eth-Trunk0]port link-type trunk
[d1-GigabitEthernet0/0/22]po t all v 21 22 100
---------配置
实例映射
[d1]stp region-configuration
[d1-mst-region] region-name sc
[d1-mst-region] instance 1 vlan 21 to 22
[d1-mst-region] instance 2 vlan 23 100
[d1-mst-region] active region-configuration
配置主从根
[d1]stp instance 0 root primary
[d1]stp instance 1 root primary
[d1]stp instance 2 root secondary
配置master和backup
[d1]interface vlanif 21
[d1-Vlanif21]ip add 10.1.21.1 24 //真实IP
[d1-Vlanif21]vrrp vrid 21 virtual-ip 10.1.21.254 //虚拟IP
[d1-Vlanif21]vrrp vrid 21 priority 120 //优先级
[d1-Vlanif21]vrrp vrid 21 preempt-mode timer delay 20 //抢占延时
[d1-Vlanif21]vrrp vrid 21 track interface GigabitEthernet 0/0/3 reduced 15
[d1-Vlanif21]vrrp vrid 21 track interface GigabitEthernet 0/0/4 reduced 15
[d1]interface Vlanif 22
[D1-Vlanif22]ip add 10.1.22.1 24
[d1-Vlanif22]vrrp vrid 22 virtual-ip 10.1.22.254
D-2
[d2]vlan batch 21 22 23 100
[d2]interface Eth-Trunk 0
[d2-Eth-Trunk0]trunkport GigabitEthernet 0/0/1 to 0/0/2
[d2]int g0/0/23
[d2-GigabitEthernet0/0/23]po li t
[d2-GigabitEthernet0/0/23]port t all v 21 22 100
[d2]int g0/0/24
[d2-GigabitEthernet0/0/24]port link-type trunk
[d2-GigabitEthernet0/0/24]port trunk allow-pass vlan 21 22 100
[d2]interface Eth-Trunk 0
[d2-Eth-Trunk0]po li tr
[d2-GigabitEthernet0/0/22]po t all v 21 22 100
[D2]int g0/0/22
[D2-GigabitEthernet0/0/22]po li t
[D2-GigabitEthernet0/0/22]po t all v 23 100
-----------配置
实例映射
[d2]stp region-configuration
[d2-mst-region] region-name sc
[d2-mst-region] instance 1 vlan 21 to 22
[d2-mst-region] instance 2 vlan 23 100
[d2-mst-region] active region-configuration
配置主从根
[d2]stp instance 2 root primary
[d2]stp instance 0 root secondary
[d2]stp instance 1 root secondary
配置master和backup
[d2]interface Vlanif 21
[d2-Vlanif21]ip add 10.1.21.2 24
[d2-Vlanif21]vrrp vrid 21 virtual-ip 10.1.21.254
[d2]int Vlanif 22
[d2-Vlanif22]ip add 10.1.22.2 24
[d2-Vlanif22]vrrp vrid 22 virtual-ip 10.1.22.254
[D2-Vlanif22]vrrp vrid 22 priority 120
[d2-Vlanif22]vrrp vrid 22 preempt-mode timer delay 20
[d2-Vlanif22]vrrp vrid 22 track interface GigabitEthernet 0/0/3 reduced 15
[d2-Vlanif22]vrrp vrid 22 track interface GigabitEthernet 0/0/4 reduced 15
[d2]int Vlanif 23
[d2-Vlanif23]ip add 10.1.23.254 24
A-1
[a1]vlan batch 21 22 100
[a1]int g0/0/23
[a1-GigabitEthernet0/0/23]port link-type trunk
[a1-GigabitEthernet0/0/23]port trunk allow-pass vlan 21 22 100
[a1]int g 0/0/24
[a1-GigabitEthernet0/0/24]port link-type trunk
[a1-GigabitEthernet0/0/24]port trunk allow-pass vlan 21 22 100
[a1]port-group group-member GigabitEthernet 0/0/1 to GigabitEthernet 0/0/22
[a1-port-group]port link-type access
[a1-port-group]port default vlan 21
---------配置
[a1]stp region-configuration
[a1-mst-region] region-name sc
[a1-mst-region] instance 1 vlan 21 to 22
[a1-mst-region] instance 2 vlan 23 100
[a1-mst-region] active region-configuration
配置边缘接口
[a1]port-group group-member g 0/0/1 to g 0/0/22
[a1-port-group]stp edged-port enable
BPDU保护
[a1]stp bpdu-protectionA-2
[a2]vlan batch 21 22 100
[a2]int g 0/0/23
[a2-GigabitEthernet0/0/23]port link-type trunk
[a2-GigabitEthernet0/0/23]port trunk allow-pass vlan 21 22 100
[a2]int g 0/0/24
[a2-GigabitEthernet0/0/24]port link-type trunk
[a2-GigabitEthernet0/0/24]port trunk allow-pass vlan 21 22 100
[a2]port-group group-member GigabitEthernet 0/0/1 to GigabitEthernet 0/0/22
[a2-port-group]port link-type access
[a2-port-group]port default vlan 22
---------配置
[a2]stp region-configuration
[a2-mst-region] region-name sc
[a2-mst-region] instance 1 vlan 21 to 22
[a2-mst-region] instance 2 vlan 23 100
[a2-mst-region] active region-configuration
边缘接口配置
[a2]port-group group-member g 0/0/1 to g 0/0/22
[a2-port-group]stp edged-port enable
BPDU保护
[a2]stp bpdu-protectionD-3
[a3]vlan batch 23 100
[D3]int g0/0/24
[a3-GigabitEthernet0/0/24]port link-type trunk
[a3-GigabitEthernet0/0/24]port trunk allow-pass vlan 23 100
[a3]port-group group-member GigabitEthernet 0/0/1 to GigabitEthernet 0/0/23
[a3-port-group]port link-type access
[a3-port-group]port default vlan 23D-3配置
[a3]stp enable
[a3]stp region-configuration
[a3-mst-region]region-name sc
[a3-mst-region]instance 1 vlan 21 22
[a3-mst-region]instance 2 vlan 23 100
[a3-mst-region]active region-configuration //激活
边缘接口配置
[a3]port-group group-member g0/0/1 to g 0/0/23
[a3-port-group]stp edged-port enable
BPDU保护
[a3]stp bpdu-protection
二、办公区配置要求
D-5
[D5]vlan batch 11 to 16 100
[D5]int e 0
[D5-Eth-Trunk0]trunkport GigabitEthernet 0/0/1 to 0/0/2
[D5]port-group group-member GigabitEthernet 0/0/23 to GigabitEthernet 0/0/24 Eth
-Trunk 0
[D5-port-group]port link-type trunk
[D5-GigabitEthernet0/0/23]port link-type trunk
[D5-GigabitEthernet0/0/24]port link-type trunk
[D5-Eth-Trunk0]port link-type trunk
[D5-port-group]port trunk allow-pass vlan 11 to 16 100
[D5-GigabitEthernet0/0/23]port trunk allow-pass vlan 11 to 16 100
[D5-GigabitEthernet0/0/24]port trunk allow-pass vlan 11 to 16 100
[D5-Eth-Trunk0]port trunk allow-pass vlan 11 to 16 100
-----实例映射
[D5]stp region-configuration
[D5-mst-region]region-name bg
[D5-mst-region]instance 2 vlan 14 15 16 100
[D5-mst-region]active region-configuration
-----主从根
[D5]stp instance 1 root primary
[D5]stp instance 0 root primary
[D5]stp instance 2 root secondary
-----配置vrrp
[D5]interface Vlanif 11
[D5-Vlanif11]ip add 10.1.11.1 24
[D5-Vlanif11]vrrp vrid 11 virtual-ip 10.1.11.254
[D5-Vlanif11]vrrp vrid 11 priority 120
[D5-Vlanif11]vrrp vrid 11 preempt-mode timer delay 20
[D5-Vlanif11]vrrp vrid 11 track interface GigabitEthernet 0/0/3 reduced 15
[D5-Vlanif11]vrrp vrid 11 track interface GigabitEthernet 0/0/4 reduced 15
[D5]interface Vlanif 12
[D5-Vlanif12]ip add 10.1.12.1 24
[D5-Vlanif12]vrrp vrid 12 virtual-ip 10.1.12.254
[D5-Vlanif12]vrrp vrid 12 priority 120
[D5-Vlanif12]vrrp vrid 12 preempt-mode timer delay 20
[D5-Vlanif12]vrrp vrid 12 track interface GigabitEthernet 0/0/3 reduced 15
[D5-Vlanif12]vrrp vrid 12 track interface GigabitEthernet 0/0/4 reduced 15
[D5]interface Vlanif 13
[D5-Vlanif13]ip add 10.1.13.1 24
[D5-Vlanif13]vrrp vrid 13 virtual-ip 10.1.13.254
[D5-Vlanif13]vrrp vrid 13 priority 120
[D5-Vlanif13]vrrp vrid 13 preempt-mode timer delay 20
[D5-Vlanif13]vrrp vrid 13 track interface GigabitEthernet 0/0/3 reduced 15
[D5-Vlanif13]vrrp vrid 13 track interface GigabitEthernet 0/0/4 reduced 15
[D5]interface Vlanif 14
[D5-Vlanif14]ip add 10.1.14.1 24
[D5-Vlanif14]vrrp vrid 14 virtual-ip 10.1.14.254
[D5]interface Vlanif 15
[D5-Vlanif15]ip add 10.1.15.1 24
[D5-Vlanif15]vrrp vrid 15 virtual-ip 10.1.15.254
[D5]interface Vlanif 16
[D5-Vlanif16]ip add 10.1.16.1 24
[D5-Vlanif16]vrrp vrid 16 virtual-ip 10.1.16.254
D-6
[D6]vlan batch 11 to 16 100
[D6]int e 0
[D6-Eth-Trunk0]trunkport GigabitEthernet 0/0/1 to 0/0/2
[D6]port-group group-member GigabitEthernet 0/0/23 to GigabitEthernet 0/0/24 Eth
-Trunk 0
[D6-port-group]port link-type trunk
[D6-GigabitEthernet0/0/23]port link-type trunk
[D6-GigabitEthernet0/0/24]port link-type trunk
[D6-Eth-Trunk0]port link-type trunk
[D6-port-group]port trunk allow-pass vlan 11 to 16 100
[D6-GigabitEthernet0/0/23]port trunk allow-pass vlan 11 to 16 100
[D6-GigabitEthernet0/0/24]port trunk allow-pass vlan 11 to 16 100
[D6-Eth-Trunk0]port trunk allow-pass vlan 11 to 16 100
-----实例映射
[D6]stp region-configuration
[D6-mst-region]region-name bg
[D6-mst-region]instance 2 vlan 14 15 16 100
[D6-mst-region]active region-configuration
-----主从根
[D6]stp instance 2 root primary
[D6]stp instance 1 root secondary
[D6]stp instance 0 root secondary
-----配置vrrp
[D6]interface Vlanif 11
[D6-Vlanif11]ip add 10.1.11.2 24
[D6-Vlanif11]vrrp vrid 11 virtual-ip 10.1.11.254
[D6]interface Vlanif 12
[D6-Vlanif12]ip add 10.1.12.2 24
[D6-Vlanif12]vrrp vrid 11 virtual-ip 10.1.12.254
[D6]interface Vlanif 13
[D6-Vlanif13]ip add 10.1.13.2 24
[D6-Vlanif13]vrrp vrid 11 virtual-ip 10.1.13.254
[D6]interface Vlanif 14
[D6-Vlanif14]ip add 10.1.14.2 24
[D6-Vlanif14]vrrp vrid 14 virtual-ip 10.1.14.254
[D6-Vlanif14]vrrp vrid 14 priority 120
[D6-Vlanif14]vrrp vrid 14 preempt-mode timer delay 20
[D6-Vlanif14]vrrp vrid 14 track interface GigabitEthernet 0/0/3 reduced 15
[D6-Vlanif14]vrrp vrid 14 track interface GigabitEthernet 0/0/4 reduced 15
[D6]interface Vlanif 15
[D6-Vlanif15]ip add 10.1.15.2 24
[D6-Vlanif15]vrrp vrid 15 virtual-ip 10.1.15.254
[D6-Vlanif15]vrrp vrid 15 priority 120
[D6-Vlanif15]vrrp vrid 15 preempt-mode timer delay 20
[D6-Vlanif15]vrrp vrid 15 track interface GigabitEthernet 0/0/3 reduced 15
[D6-Vlanif15]vrrp vrid 15 track interface GigabitEthernet 0/0/4 reduced 15
[D6]interface Vlanif 16
[D6-Vlanif16]ip add 10.1.16.2 24
[D6-Vlanif16]vrrp vrid 16 virtual-ip 10.1.16.254
[D6-Vlanif16]vrrp vrid 16 priority 120
[D6-Vlanif16]vrrp vrid 16 preempt-mode timer delay 20
[D6-Vlanif16]vrrp vrid 16 track interface GigabitEthernet 0/0/3 reduced 15
[D6-Vlanif16]vrrp vrid 16 track interface GigabitEthernet 0/0/4 reduced 15A-4
[A4]vlan batch 11 to 16 100
[A4-GigabitEthernet0/0/23]port link-type trunk
[A4-GigabitEthernet0/0/23]port trunk allow-pass vlan 11 to 16 100
[A4-GigabitEthernet0/0/24]port link-type trunk
[A4-GigabitEthernet0/0/24]port trunk allow-pass vlan 11 to 16 100
[A4]port-group group-member g0/0/3 to g0/0/5
[A4-port-group]port link-type access
[A4-port-group]port default vlan 11 //财务部
[A4]port-group group-member g0/0/6 to g0/0/10
[A4-port-group]port link-type access
[A4-port-group]port default vlan 12 //销售部
[A4]port-group group-member g0/0/11 to g0/0/15
[A4-port-group]port link-type access
[A4-port-group]port default vlan 13 //后勤部
-----实例映射
[A4]stp region-configuration
[A4-mst-region]region-name bg
[A4-mst-region]instance 2 vlan 14 15 16 100
[A4-mst-region]active region-configuration
-----配置边缘接口
[A4]port-group group-member g0/0/3 to g0/0/15
[A4-port-group]stp edged-port enable
bpdu保护
[A4]stp bpdu-protection
A-5
[A5]vlan batch 11 to 16 100
[A5-GigabitEthernet0/0/23]port link-type trunk
[A5-GigabitEthernet0/0/23]port trunk allow-pass vlan 11 to 16 100
[A5-GigabitEthernet0/0/24]port link-type trunk
[A5-GigabitEthernet0/0/24]port trunk allow-pass vlan 11 to 16 100
-----vlan规划
[A5]port-group group-member GigabitEthernet 0/0/3 to GigabitEthernet 0/0/5
[A5-port-group]port link-type access
[A5-port-group]port default vlan 14 //业务部
[A5]port-group group-member GigabitEthernet 0/0/6 to GigabitEthernet 0/0/10
[A5-port-group]port link-type access
[A5-port-group]port default vlan 15 //运维部
[A5]port-group group-member GigabitEthernet 0/0/11 to GigabitEthernet 0/0/15
[A5-port-group]port link-type access
[A5-port-group]port default vlan 16 //研发部
-----实例映射
[A5]stp region-configuration
[A5-mst-region]region-name bg
[A5-mst-region]instance 2 vlan 14 15 16 100
[A5-mst-region]active region-configuration
-----配置边缘接口
[A5]port-group group-member g 0/0/3 to g0/0/15
[A5-port-group]stp edged-port enable
-----bpdu保护
[A5]stp bpdu-protection
三、服务器配置要求
C-1
[C1]vlan batch 31 to 35 100
[C1]interface Eth-Trunk 0
[C1-Eth-Trunk0]trunkport GigabitEthernet 0/0/1 to 0/0/2
[C1]port-group group-member GigabitEthernet 0/0/22 to GigabitEthernet 0/0/23 Eth
-Trunk 0
[C1-port-group]port link-type trunk
[C1-port-group]port trunk allow-pass vlan 31 to 35 100
-----实例映射
[C1]stp region-configuration
[C1-mst-region]region-name fwq
[C1-mst-region]instance 1 vlan 31 33 100
[C1-mst-region]instance 2 vlan 32 34 35
[C1-mst-region]active region-configuration
-----主从根
[C1]stp instance 0 root primary
[C1]stp instance 1 root primary
[C1]stp instance 2 root secondary
-----配置vrrp
[C1]interface Vlanif 31
[C1-Vlanif31]ip add 10.1.31.1 24
[C1-Vlanif31]vrrp vrid 31 virtual-ip 10.1.31.254
[C1-Vlanif31]vrrp vrid 31 priority 120
[C1-Vlanif31]vrrp vrid 31 preempt-mode timer delay 20
[C1-Vlanif31]vrrp vrid 31 track interface GigabitEthernet 0/0/24 reduced 30
[C1-Vlanif31]int vl 32
[C1-Vlanif32]ip add 10.1.32.1 24
[C1-Vlanif32]vrrp vrid 32 virtual-ip 10.1.32.254C-2
[C2]vlan batch 31 to 35 100
[C2]interface Eth-Trunk 0
[C2-Eth-Trunk0]trunkport GigabitEthernet 0/0/1 to 0/0/2
[C2]port-group group-member GigabitEthernet 0/0/22 to GigabitEthernet 0/0/23 Eth
-Trunk 0
[C2-port-group]port link-type trunk
[C2-port-group]port trunk allow-pass vlan 31 to 35 100
-----实例映射
[C2]stp region-configuration
[C2-mst-region]region-name fwq
[C2-mst-region]instance 1 vlan 31 33 100
[C2-mst-region]instance 2 vlan 32 34 35
[C2-mst-region]active region-configuration
-----主从根
[C2]stp instance 2 root primary
[C2]stp instance 1 root secondary
[C2]stp instance 0 root secondaryD-3
[D3]vlan batch 31 to 35 100
[D3]interface Eth-Trunk 0
[D3-Eth-Trunk0]trunkport GigabitEthernet 0/0/1 to 0/0/2
[D3]port-group group-member GigabitEthernet 0/0/23 to GigabitEthernet 0/0/24 Eth
-Trunk 0
[D3-port-group]port link-type trunk
[D3-port-group]port trunk allow-pass vlan 31 to 35 100
[D3]port-group group-member GigabitEthernet 0/0/3 to g0/0/5
[D3-port-group]port link-type access
[D3-port-group]port default vlan 31
[D3]port-group group-member GigabitEthernet 0/0/6 to g0/0/10
[D3-port-group]port link-type access
[D3-port-group]port default vlan 33
-----实例映射
[D3]stp region-configuration
[D3-mst-region]region-name fwq
[D3-mst-region]instance 1 vlan 31 33 100
[D3-mst-region]instance 2 vlan 32 34 35
[D3-mst-region]active region-configuration
-----配置边缘接口
[D3]port-group group-member GigabitEthernet 0/0/3 to g0/0/10
[D3-port-group]stp edged-port enable
-----bpdu保护
[D3]stp bpdu-protectionD-4
[D4]vlan batch 31 to 35 100
[D4]interface Eth-Trunk 0
[D4-Eth-Trunk0]trunkport GigabitEthernet 0/0/1 to 0/0/2
[D4]port-group group-member GigabitEthernet 0/0/23 to GigabitEthernet 0/0/24 Eth
-Trunk 0
[D4-port-group]port link-type trunk
[D4-port-group]port trunk allow-pass vlan 31 to 35 100
[D4]port-group group-member GigabitEthernet 0/0/3 to g0/0/5
[D4-port-group]port link-type access
[D4-port-group]port default vlan 32
[D4]port-group group-member GigabitEthernet 0/0/6 to g0/0/10
[D4-port-group]port link-type access
[D4-port-group]port default vlan 34
[D4]port-group group-member GigabitEthernet 0/0/11 to g0/0/20
[D4-port-group]port link-type access
[D4-port-group]port default vlan 35
-----实例映射
[D4]stp region-configuration
[D4-mst-region]region-name fwq
[D4-mst-region]instance 1 vlan 31 33 100
[D4-mst-region]instance 2 vlan 32 34 35
[D4-mst-region]active region-configuration
-----配置边缘接口
[D4-port-group]port-group group-member GigabitEthernet 0/0/3 to g0/0/20
[D4-port-group]stp edged-port enable
-----bpdu保护
[D4]stp bpdu-protection