【文章內(nèi)容簡(jiǎn)介】 讓學(xué)員學(xué)會(huì)如何遠(yuǎn)程配置交換機(jī)以及如何保護(hù)交換機(jī)不受非法登錄。 讓學(xué)員學(xué)會(huì)交換機(jī)的其他配置，例如：端口聚合、 ACL、端口監(jiān)控。 讓學(xué)員具備在三層交換機(jī)和路由器上 配置 OSPF 動(dòng)態(tài)路由協(xié)議的能力，使得交換網(wǎng)中的 PC 機(jī)能訪問外部廣域網(wǎng)或 Inter。 實(shí)驗(yàn)環(huán)境 Quidway S3026 以太網(wǎng)交換機(jī) 4 臺(tái)， Quidway S3526 以太網(wǎng)交換機(jī) 1 臺(tái) Quidway 2501 路由器 1 臺(tái)， PC 機(jī) 4 臺(tái)，標(biāo)準(zhǔn)網(wǎng)線 13 根 Quidway S3026 軟件版本： V100R002B01D011； Bootrom 版本： Quidway S3526 軟件版本： V100R001B02D006； Bootrom 版本： Quidway 2501 路由器 VRP 版本 : VRP 以上 作者： admin 發(fā)布時(shí)間： 2020418 9:49:23 實(shí)驗(yàn)步驟 如上圖所示將設(shè)備互連起來(lái)，并給每臺(tái) PC機(jī)配置好 IP 地址。 分配給 PC 機(jī)的 IP 地址如下： PCA： PCB： PCC： PCD： 掩碼： 如上圖所示配置四臺(tái) PC 機(jī)屬于相關(guān)的 VLAN。配置端口聚合使得 SwitchA 和 SwitchB、 SwitchA 和 SwitchC 之間的帶寬為 200Mbps。配置某些端口為 trunk 端口并允許以上的所有 VLAN 通過。在所有交換機(jī)的 trunk 端口上配置 GVRP，使得 VLAN 信息能被動(dòng)態(tài)注冊(cè)。在所有交換機(jī)上配置 STP 以避免由于交換機(jī)之間的路徑回環(huán)而產(chǎn)生 “ 廣播風(fēng)暴 ” 。然后測(cè)試同一 VLAN 間的 PC 機(jī)能否正常 Ping 通。 用 “show spanning tree” 命令觀察生成樹的狀態(tài)。 以下是 SwitchA（ S3526）的生成樹狀態(tài)： SwitchAshow spanningtree statistics e0/1 The bridge is executing the IEEE Rapid Spanning Tree protocol The bridge has priority 32768, MAC address: Configured Hello Time 2, Max Age 20, Forward Delay 15 Root Bridge has priority 32768, MAC address Path cost to root bridge is 0 Port 1 (Ether0/1) of bridge is Forwarding Spanning tree protocol is enabled The port is a DesignatedPort Port path cost 180 Port priority 128 Designated bridge has priority 32768, MAC address Configured as a nonedge port Connected to a pointtopoint LAN segment Maximum transmission limit is 3 BPDUs per hello time Times: Hello Time 2, Max Age 20 Forward Delay 15, Message Age 0 sent BPDU: 8584 TCN: 0, RST: 8584, Config BPDU: 0 received BPDU: 7657 TCN: 0, RST: 7657, Config BPDU: 0 SwitchA show spanningtree statistics e0/9 The bridge is executing the IEEE Rapid Spanning Tree protocol The bridge has priority 32768, MAC address: Configured Hello Time 2, Max Age 20, Forward Delay 15 Root Bridge has priority 32768, MAC address Path cost to root bridge is 0 Port 9 (Ether0/9) of bridge is Forwarding Spanning tree protocol is enabled The port is a DesignatedPort Port path cost 180 Port priority 128 Designated bridge has priority 32768, MAC address Configured as a nonedge port Connected to a pointtopoint LAN segment Maximum transmission limit is 3 BPDUs per hello time Times: Hello Time 2, Max Age 20 Forward Delay 15, Message Age 0 sent BPDU: 6563 TCN: 0, RST: 6563, Config BPDU: 0 received BPDU: 5377361 TCN: 0, RST: 5377361, Config BPDU: 0 作者： admin 發(fā)布時(shí)間： 2020418 9:51:05 以下是 SwitchB（ S3026）的生成樹狀態(tài)： SwitchBenable SwitchB show spanningtree interface e0/1 The bridge is executing the IEEE Rapid Spanning Tree protocol The bridge has priority 32768, MAC address: Configured Hello Time 2, Max Age 20, Forward Delay 15 Root Bridge has priority 32768, MAC address Path cost to root bridge is 180 Port 1 (Ether0/1) of bridge is Forwarding Spanning tree protocol is enabled The port is a RootPort Port path cost 180 Port priority 128 Designated bridge has priority 32768, MAC address Configured as a nonedge port Connected to a pointtopoint LAN segment Maximum transmission limit is 3 BPDUs per hello time Times: Hello Time 2, Max Age 20 Forward Delay 15, Message Age 0 sent BPDU: 9 TCN: 0, RST: 9, Config BPDU: 0 received BPDU: 3903 TCN: 0, RST: 3903, Config BPDU: 0 你可以通過觀察所有這些端口的信息來(lái)描述這棵生成樹。 還可以用 “debug stp packet” 命令來(lái)進(jìn)一步觀察 STP 生成的 BPDU 信息： 以下是 debug 信息： SwitchAdebug stp packet SwitchAterminal debug *: Port0: Sent Packet *: Protocol Identifier: 0000 Protocol Version ID: 02 BPDU Type: 02 Flags: 2c Root Identifier: Root Path Cost: 0000 Bridge Identifier: Port Identifier: Message Age: 0000 Max Age: 1400 Hello Time: 0200 Forward Delay: 0f00 Version 1 Length: 00 改變交換機(jī)的一些配置參數(shù)，例如 priority、 path cost、 hello time、 max age、 forward delay、 bridge diameter。然后用上面的命令觀察生成樹的變化。 用 “show interface” 命令觀察每臺(tái)交換機(jī)上 trunk 端口的 VLAN 注冊(cè)狀態(tài)。下面是 GVRP 注冊(cè)狀態(tài)的結(jié)果： SwitchC(config)show interface e0/10 Ether0/10 is up Hardware is Fast Ether, Hardware address is Autoduplex(Full), Autospeed(100M), 100_BASE_TX Flow control is disabled Broadcast maxratio is 100 PVID is 1 Mdi type: auto It is a vlan trunking port, vlan(s) passing this port: 1(default vlan), 23 vlan(s) allowed to pass this port: 1(default vlan), 24000 It is not a monitor port It doesn\39。t belong to a portaggregation 28287 packets output