网络结构说明
Yz-sw1、Yz-sw2 为三层配置,Yz-sw3、 Yz-sw4为二层配置,两台防火墙主备模式配置,两台负载均衡器为主备模式配置,如果yz-sw1—yz-sw4和yz-sw2—yz-sw3交叉线不连接,网络配置测试没有问题,一连接就有问题,用户要求必须连接。让解决这个问题。
问题提出
1、 yz-sw1—yz-sw4和yz-sw2—yz-sw3交叉线一连接就有问题,STP我已启用,不知如何解决。
2、 如果yz-sw3—yz-sw4我在连根线,如何配置。
Yz-sw1配置
dis cu
#
sysname YZ-SW1
#
info-center loghost 172.16.1.26
#
vlan batch 1 to 3
#
stp instance 0 priority 4096
stp instance 1 root primary
stp instance 2 root primary
stp pathcost-standard legacy
stp enable
#
cluster enable
ntdp enable
ntdp hop 16
ndp enable
#
undo http server enable
#
vlan 1
description app-server
vlan 2
description DBA
vlan 3
description FW-FZ
#
stp region-configuration
region-name RG1
instance 1 vlan 1 to 2
instance 2 vlan 3
active region-configuration
#
interface Vlanif1
description app-server
ip address 172.16.1.252 255.255.255.0
vrrp vrid 1 virtual-ip 172.16.1.254
vrrp vrid 1 priority 150
vrrp vrid 1 accept-mode enable
#
interface Vlanif2
description dba
ip address 172.16.2.252 255.255.255.0
vrrp vrid 2 virtual-ip 172.16.2.254
vrrp vrid 2 priority 150
vrrp vrid 2 accept-mode enable
#
interface Vlanif3
description manager
ip address 172.16.3.252 255.255.255.0
vrrp vrid 3 virtual-ip 172.16.3.254
vrrp vrid 3 priority 150
vrrp vrid 3 accept-mode enable
#
interface MEth0/0/1
#
interface Eth-Trunk1
port link-type trunk
port trunk allow-pass vlan 1 to 3
stp root-protection
#
interface GigabitEthernet0/0/1
port default vlan 1
stp disable
bpdu enable
ntdp enable
ndp enable
#
。。。。。。
#
interface GigabitEthernet0/0/12
port default vlan 1
stp disable
bpdu enable
ntdp enable
ndp enable
#
interface GigabitEthernet0/0/13
port default vlan 2
stp disable
bpdu enable
ntdp enable
ndp enable
。。。
interface GigabitEthernet0/0/20
port default vlan 2
stp disable
bpdu enable
ntdp enable
ndp enable
#
interface GigabitEthernet0/0/21
port link-type trunk
port trunk allow-pass vlan 1 to 3
stp root-protection
bpdu enable
ntdp enable
ndp enable
#
interface GigabitEthernet0/0/22
port link-type trunk
port trunk allow-pass vlan 1 to 3
stp root-protection
bpdu enable
ntdp enable
ndp enable
#
interface GigabitEthernet0/0/23
eth-trunk 1
#
interface GigabitEthernet0/0/24
eth-trunk 1
#
interface NULL0
#
ip route-static 0.0.0.0 0.0.0.0 172.16.3.200
#
user-interface con 0
user-interface vty 0 4
user privilege level 3
set authentication password simple 123456
Yz-sw2配置
dis cu
#
sysname yz-sw2
#
info-center loghost 172.16.1.26
#
vlan batch 1 to 3
#
stp instance 0 priority 8192
stp instance 1 root secondary
stp instance 2 root secondary
stp pathcost-standard legacy
stp enable
#
cluster enable
ntdp enable
ntdp hop 16
ndp enable
#
undo http server enable
#
vlan 2
description app-server
#
stp region-configuration
region-name RG1
instance 1 vlan 1 to 2
instance 2 vlan 3
active region-configuration
#
interface Vlanif1
description app-server
ip address 172.16.1.253 255.255.255.0
vrrp vrid 1 virtual-ip 172.16.1.254
vrrp vrid 1 accept-mode enable
#
interface Vlanif2
description dba
ip address 172.16.2.253 255.255.255.0
vrrp vrid 2 virtual-ip 172.16.2.254
vrrp vrid 2 accept-mode enable
#
interface Vlanif3
description manager
ip address 172.16.3.253 255.255.255.0
vrrp vrid 3 virtual-ip 172.16.3.254
vrrp vrid 3 accept-mode enable
#
interface MEth0/0/1
#
interface Eth-Trunk1
port link-type trunk
port trunk allow-pass vlan 1 to 10
#
interface GigabitEthernet0/0/1
port default vlan 1
stp disable
bpdu enable
ntdp enable
ndp enable
#
。。。。。。。。
#
interface GigabitEthernet0/0/12
port default vlan 1
stp disable
bpdu enable
ntdp enable
ndp enable
#
interface GigabitEthernet0/0/13
port default vlan 2
stp disable
bpdu enable
ntdp enable
ndp enable
.。。。。。。。。。。。。。
interface GigabitEthernet0/0/20
port default vlan 2
stp disable
bpdu enable
ntdp enable
ndp enable
#
interface GigabitEthernet0/0/21
port trunk allow-pass vlan 1 to 3
bpdu enable
ntdp enable
ndp enable
#
interface GigabitEthernet0/0/22
port trunk allow-pass vlan 1 to 3
bpdu enable
ntdp enable
ndp enable
#
interface GigabitEthernet0/0/23
eth-trunk 1
#
interface GigabitEthernet0/0/24
eth-trunk 1
#
interface NULL0
#
ip route-static 0.0.0.0 0.0.0.0 172.16.3.200
#
#
user-interface con 0
user-interface vty 0 4
user privilege level 3
set authentication password simple 123456
#
return
Yz-sw3配置
dis cu
#
sysname yz-sw3
#
info-center loghost 172.16.1.26
undo info-center enable
#
vlan batch 1 to 3
#
stp instance 0 priority 12288
stp instance 2 priority 20480
stp pathcost-standard legacy
stp enable
#
cluster enable
ntdp enable
ntdp hop 16
ndp enable
#
stp region-configuration
region-name RG1
instance 1 vlan 1 to 2
instance 2 vlan 3
active region-configuration
#
interface Vlanif1
#
interface Vlanif3
ip address 172.16.3.250 255.255.255.0
#
interface MEth0/0/1
#
interface GigabitEthernet0/0/1
port default vlan 1
stp disable
bpdu enable
ntdp enable
ndp enable
#
.。。。。。。。。。。。。。。。。。。。。。。。。。
interface GigabitEthernet0/0/17
port default vlan 1
stp disable
bpdu enable
ntdp enable
ndp enable
#
interface GigabitEthernet0/0/18
port link-type access
port default vlan 3
bpdu enable
ntdp enable
ndp enable
#
#
interface GigabitEthernet0/0/19
port link-type access
port default vlan 3
bpdu enable
ntdp enable
ndp enable
#
#
interface GigabitEthernet0/0/20
port link-type access
port default vlan 3
bpdu enable
ntdp enable
ndp enable
#
interface GigabitEthernet0/0/21
port link-type trunk
port trunk allow-pass vlan 1 to 3
stp root-protection
bpdu enable
ntdp enable
ndp enable
#
interface GigabitEthernet0/0/22
port link-type trunk
port trunk allow-pass vlan 1 to 3
bpdu enable
ntdp enable
ndp enable
#
interface GigabitEthernet0/0/23
port link-type access
port default vlan 3
stp disable
bpdu enable
ntdp enable
ndp enable
#
interface GigabitEthernet0/0/24
port default vlan 3
stp disable
bpdu enable
ntdp enable
ndp enable
#
interface NULL0
#
qos map-table dscp-dscp
#
qos map-table dscp-dot1p
#
qos map-table dscp-dp
#
ip route-static 0.0.0.0 0.0.0.0 172.16.3.254
#
snmp-agent
#
user-interface con 0
user-interface vty 0 4
user privilege level 3
set authentication password simple 123456
#
Yz-sw4配置
dis cu
#
sysname yz-sw4
#
info-center loghost 172.16.1.26
undo info-center enable
#
vlan batch 1 to 3
#
stp instance 0 priority 16384
stp instance 2 priority 40960
stp pathcost-standard legacy
stp enable
#
cluster enable
ntdp enable
ntdp hop 16
ndp enable
#
undo http server enable
#
stp region-configuration
region-name RG1
instance 1 vlan 1 to 2
instance 2 vlan 3
active region-configuration
#
interface Vlanif1
ip address dhcp-alloc
#
interface Vlanif3
ip address 172.16.3.251 255.255.255.0
#
interface MEth0/0/1
#
interface GigabitEthernet0/0/1
port default vlan 1
stp disable
bpdu enable
ntdp enable
ndp enable
#
。。。。。。。。。。。。。。。。
#
interface GigabitEthernet0/0/17
port default vlan 1
stp disable
bpdu enable
ntdp enable
ndp enable
#
interface GigabitEthernet0/0/18
port link-type access
port default vlan 3
bpdu enable
ntdp enable
ndp enable
#
interface GigabitEthernet0/0/19
port link-type access
port default vlan 3
stp instance 2 cost 1000
bpdu enable
ntdp enable
ndp enable
#
interface GigabitEthernet0/0/20
port link-type access
port default vlan 3
bpdu enable
ntdp enable
ndp enable
#
interface GigabitEthernet0/0/21
port link-type trunk
port trunk allow-pass vlan 1 to 3
stp instance 2 cost 1
bpdu enable
ntdp enable
ndp enable
#
interface GigabitEthernet0/0/22
port link-type trunk
port trunk allow-pass vlan 1 to 3
stp disable
bpdu enable
ntdp enable
ndp enable
#
interface GigabitEthernet0/0/23
port link-type access
port default vlan 3
stp disable
bpdu enable
ntdp enable
ndp enable
#
interface GigabitEthernet0/0/24
port default vlan 3
stp disable
bpdu enable
ntdp enable
ndp enable
#
interface NULL0
#
ip route-static 0.0.0.0 0.0.0.0 172.16.3.254
#
snmp-agent
snmp-agent local-engineid 000007DB7F00000100007096
snmp-agent community read public
#
user-interface con 0
user-interface vty 0 4
user privilege level 3
set authentication password simple 123456
阅读(3590) | 评论(0) | 转发(0) |