![](/static/img/组播实验--IGMP、IGMP_Snooping及PIM-DM协议/9148187bdc5548cbab7762ca3f955472.png)

​        4台路由器之间运行OSPF路由协议，均创建Loopback0，IP地址为10.0.x.x/32。4台路由器之间构成一个组播网络，AR1作为第一跳路由器连接组播源239.0.0.12，AR4作为最后一跳路由器连接组播组239.0.0.12的接收者，为了能够让组播源的流量顺利被AR4上的组播组成员接收，在每台路由器上部署PIM-DM，并在AR4的GE0/0/1接收上激活IGMPv2

​        同时为了优化交换机LSW2上的组播流量转发行为，在S2上部署IGMP Snooping并手动指定其路由器接收、成员接口

# 实验任务

1. 设备IP地址配置
2. 配置AR1、AR2、AR3、AR4之间的OSPF，在互联接口、Loopback接口上激活OSPF
3. 开启路由器的组播路由功能，部署PIM-DM，在相应接口上开启PIM-DM
4. 在AR1上模拟组播源发送组播数据，观察各个路由器的PIM路由表
5. 修改AR3的GE0/0/0接口OSPF Cost值，影响断言机制选举结果，之后再次查看AR2、AR3的PIM路由表
6. 在S2上配置IGMP Snooping，手动配置路由器端口、成员端口

# 实验步骤

## 1、设备IP地址配置

```
# AR1配置
[AR1]interface GigabitEthernet 0/0/0
[AR1-GigabitEthernet0/0/0]ip address 10.0.13.1 24
[AR1-GigabitEthernet0/0/0]q
[AR1]interface GigabitEthernet 0/0/1
[AR1-GigabitEthernet0/0/1]ip address 10.0.12.1 24
[AR1-GigabitEthernet0/0/1]q
[AR1]interface LoopBack 0
[AR1-LoopBack0]ip address 10.0.1.1 32
[AR1-LoopBack0]q
[AR1]

# AR2配置
[AR2]interface GigabitEthernet 0/0/0
[AR2-GigabitEthernet0/0/0]ip address 10.0.12.2 24
[AR2-GigabitEthernet0/0/0]q
[AR2]interface GigabitEthernet 0/0/1
[AR2-GigabitEthernet0/0/1]ip address 10.0.234.2 24
[AR2-GigabitEthernet0/0/1]q
[AR2]interface LoopBack 0
[AR2-LoopBack0]ip address 10.0.2.2 32
[AR2-LoopBack0]q
[AR2]

# AR3配置
[AR3]interface GigabitEthernet 0/0/0
[AR3-GigabitEthernet0/0/0]ip address 10.0.13.3 24
[AR3-GigabitEthernet0/0/0]q
[AR3]interface GigabitEthernet 0/0/1
[AR3-GigabitEthernet0/0/1]ip address 10.0.234.3 24
[AR3-GigabitEthernet0/0/1]q
[AR3]interface LoopBack 0
[AR3-LoopBack0]ip address 10.0.3.3 32
[AR3-LoopBack0]q
[AR3]

# AR4配置
[AR4]interface GigabitEthernet 0/0/0
[AR4-GigabitEthernet0/0/0]ip address 10.0.234.4 24
[AR4-GigabitEthernet0/0/0]q
[AR4]interface GigabitEthernet 0/0/1
[AR4-GigabitEthernet0/0/1]ip address 192.168.1.1 24
[AR4-GigabitEthernet0/0/1]q
[AR4]interface LoopBack 0
[AR4-LoopBack0]ip address 10.0.4.4 32
[AR4-LoopBack0]q
[AR4]
```

在AR1、AR4上检测连通性（以AR1为例）

![](/static/img/组播实验--IGMP、IGMP_Snooping及PIM-DM协议/23091adecb1b4e8599c5a3cf191d6dfd.png)

## 2、配置OSPF

​        使用各自的Loopback 0 接口地址作为Router ID，在互联接口、Loopback 0接口上激活OSPF

```
# AR1配置
[AR1]ospf 1 router-id 10.0.1.1
[AR1-ospf-1]area 0
[AR1-ospf-1-area-0.0.0.0]network 10.0.12.1 0.0.0.0
[AR1-ospf-1-area-0.0.0.0]network 10.0.13.1 0.0.0.0
[AR1-ospf-1-area-0.0.0.0]network 10.0.1.1 0.0.0.0
[AR1-ospf-1-area-0.0.0.0]q
[AR1-ospf-1]q
[AR1]

# AR2配置
[AR2]ospf 1 router-id 10.0.2.2
[AR2-ospf-1]area 0
[AR2-ospf-1-area-0.0.0.0]network 10.0.12.2 0.0.0.0
[AR2-ospf-1-area-0.0.0.0]network 10.0.234.2 0.0.0.0
[AR2-ospf-1-area-0.0.0.0]network 10.0.2.2 0.0.0.0
[AR2-ospf-1-area-0.0.0.0]q
[AR2-ospf-1]q
[AR2]

# AR3配置
[AR3]ospf 1 router-id 10.0.3.3
[AR3-ospf-1]area 0
[AR3-ospf-1-area-0.0.0.0]network 10.0.13.3 0.0.0.0
[AR3-ospf-1-area-0.0.0.0]network 10.0.234.3 0.0.0.0
[AR3-ospf-1-area-0.0.0.0]network 10.0.3.3 0.0.0.0
[AR3-ospf-1-area-0.0.0.0]q
[AR3-ospf-1]q
[AR3]

# AR4配置
[AR4]ospf 1 router-id 10.0.4.4
[AR4-ospf-1]area 0
[AR4-ospf-1-area-0.0.0.0]network 10.0.234.4 0.0.0.0
[AR4-ospf-1-area-0.0.0.0]network 192.168.1.1 0.0.0.0
[AR4-ospf-1-area-0.0.0.0]network 10.0.4.4 0.0.0.0
[AR4-ospf-1-area-0.0.0.0]q
[AR4-ospf-1]q
[AR4]
```

​        查看AR4的OSPF邻居关系、OSPF路由表

```
<AR4>display ospf peer brief
```


![](/static/img/组播实验--IGMP、IGMP_Snooping及PIM-DM协议/0ae9c1412f2644bd809099a849371865.png)


```
<AR4>display ospf routing
```


![](/static/img/组播实验--IGMP、IGMP_Snooping及PIM-DM协议/3df166791d454ab9b7b4719d1d0d930b.png)


## 3、部署PIM-DM

​        所有路由器开启组播路由功能，在需要运行PIM-DM的接口上开启组播路由协议

```
# AR1配置
[AR1]multicast routing-enable    # 开启组播路由功能
[AR1]interface GigabitEthernet 0/0/0
[AR1-GigabitEthernet0/0/0]pim dm
[AR1-GigabitEthernet0/0/0]q
[AR1]interface GigabitEthernet 0/0/1
[AR1-GigabitEthernet0/0/1]pim dm
[AR1-GigabitEthernet0/0/1]q
[AR1]

# AR2配置
[AR2]multicast routing-enable
[AR2]interface GigabitEthernet 0/0/0
[AR2-GigabitEthernet0/0/0]pim dm
[AR2-GigabitEthernet0/0/0]q
[AR2]interface GigabitEthernet 0/0/1
[AR2-GigabitEthernet0/0/1]pim dm
[AR2-GigabitEthernet0/0/1]q
[AR2]

# AR3配置
[AR3]multicast routing-enable
[AR3]interface GigabitEthernet 0/0/0
[AR3-GigabitEthernet0/0/0]pim dm
[AR3-GigabitEthernet0/0/0]q
[AR3]interface GigabitEthernet 0/0/1
[AR3-GigabitEthernet0/0/1]pim dm
[AR3-GigabitEthernet0/0/1]q
[AR3]

# AR4配置
[AR4]multicast routing-enable
[AR4]interface GigabitEthernet 0/0/0
[AR4-GigabitEthernet0/0/0]pim dm
[AR4-GigabitEthernet0/0/0]q
[AR4]interface GigabitEthernet 0/0/1
[AR4-GigabitEthernet0/0/1]pim dm
[AR4-GigabitEthernet0/0/1]q
[AR4]
```

​        在AR1、AR4上检查PIM邻居关系

```
<AR1>display pim neighbor 
```

![](/static/img/组播实验--IGMP、IGMP_Snooping及PIM-DM协议/45defee787544991acbf909d372f29a4.png)

![](/static/img/组播实验--IGMP、IGMP_Snooping及PIM-DM协议/c16f6349c4f74aff985044289ed4a946.png)

这时候，AR1与AR2、AR1与AR3、AR4与AR2、AR4与AR3之间都已经成功形成PIM关系

​        在AR4的GE0/0/1接口上开启IGMP，并配置静态组播组模拟组播接收者

```
[AR4]interface GigabitEthernet 0/0/1
[AR4-GigabitEthernet0/0/1]igmp enable
[AR4-GigabitEthernet0/0/1]igmp static-group 239.0.0.12
[AR4-GigabitEthernet0/0/1]q
[AR4]
```

​        在AR4上查看IGMP接口信息

```
<AR4>display igmp interface GigabitEthernet 0/0/1
```

![](/static/img/组播实验--IGMP、IGMP_Snooping及PIM-DM协议/236fa7d69b6743e5bbd8ea8048b5545d.png)

默认IGMP的版本为V2，AR4为IGMP的查询者

## 4、观察PIM路由表

​        在AR1上以Loopback 0接口为源地址，向239.0.0.12发送ICMP数据包，模拟组播源，之后再4台路由器上查看PIM路由表

```
# AR1上模拟组播源，发送组播流量
<AR1>ping -a 10.0.1.1 -c 10 239.0.0.12
```

PIM Start-Refresh报文内容

![](/static/img/组播实验--IGMP、IGMP_Snooping及PIM-DM协议/edf87d85803947f48dc1f089191b8608.png)

State-Refresh 报文中会携带组播源地址（10.0.1.1），组播组地址（239.0.0.12），下游设备 收到后会创建（S,G）表项，并继续向下游发送State-Refresh报文

在设备上查看Start-Refresh报文发送情况

```
<AR1>display pim control-message counters message-type state-refresh interface GigabitEthernet 0/0/1
```

![](/static/img/组播实验--IGMP、IGMP_Snooping及PIM-DM协议/fcb724836f6b412791416d10dc67a4e1.png)


当已发送（sent）个数不为0时，再去查看下游的（S,G）表项，否则将无法看到内容。 PIM-SM 并无State-Refresh 报文，因此无法使用该方式触发生成组播路由表

​        查看4台路由器的PIM路由表

```
<AR1>display pim routing-table
```

![](/static/img/组播实验--IGMP、IGMP_Snooping及PIM-DM协议/e2069ba238e04136a960d8de732108c2.png)

AR1上(S, G)表项的入接口为Loopback0，因为组播源为设备直连，所以PRF邻居为NULL。 下游接口为GE0/0/1、GE0/0/0，AR1将组播流量转发给AR3、AR2

![](/static/img/组播实验--IGMP、IGMP_Snooping及PIM-DM协议/611cdf6d4ee24110b8969093c34886c1.png)

AR2上并没有下游接口

![](/static/img/组播实验--IGMP、IGMP_Snooping及PIM-DM协议/8a148d84b3164e99b28d6dbcf03aa389.png)

AR3的下游接口为GE0/0/1

​        R2、R3的下游接口与R4的上游接口在同一个网段，此时触发断言机制，R2、R3通过各自的 GE0/0/1接口发送断言报文进行选举，R2、R3到达组播源的单播路由拥有相同的路由优先级、单播路由开销值，但是R3的GE0/0/1接口**拥有更大的IP地址**（10.0.234.3大于10.0.234.2），因此R3在断言选举中胜出，继续向R4转发组播流量，而R2不再从自己的 GE0/0/1接口转发组播流量，这是R2的PIM路由表中没有下游接口的原因

![](/static/img/组播实验--IGMP、IGMP_Snooping及PIM-DM协议/09989402b6c14bcaa7f1409b12a24e68.png)


## 5、修改OSPF cost值，影响断言选举结果

​        再AR３上修改GE0/0/0接口的OSPF Cost值，使得AR3到达组播源地址的单播路由拥有更大的开销值，从而在断言选举中失败，让AR2变为断言选举胜出者

​        在AR2、AR3上查看前往组播地址10.0.1.1的路由开销值

```
<AR2>display ip routing-table 10.0.1.1
```

![](/static/img/组播实验--IGMP、IGMP_Snooping及PIM-DM协议/7120cb8eb13d436bb0ae430309189b14.png)

![](/static/img/组播实验--IGMP、IGMP_Snooping及PIM-DM协议/11e048905727447b907703d914957ad7.png)


AR2、AR3到达10.0.1.1的路由开销值都为1

​        修改AR3上的GE0/0/1接口的OSPF Cost值

```
[AR3]interface GigabitEthernet 0/0/0
[AR3-GigabitEthernet0/0/0]ospf cost 2
[AR3-GigabitEthernet0/0/0]q
[AR3]
```

​        在AR3上查看前往组播源地址10.0.1.1的路由开销值

```
<AR3>display ip routing-table 10.0.1.1
```

![](/static/img/组播实验--IGMP、IGMP_Snooping及PIM-DM协议/b69a7613e4704ead94f01b3d060415d0.png)


现在AR3到达10.0.1.1的路由开销值为2

​        为了更好的观察现象，修改AR2、AR3的GE0/0/1接口Assert状态的超过时间为10s

```
[AR2]interface GigabitEthernet 0/0/1
[AR2-GigabitEthernet0/0/1]pim holdtime assert 10
[AR2-GigabitEthernet0/0/1]q
[AR2]

[AR3]interface GigabitEthernet 0/0/1
[AR3-GigabitEthernet0/0/1]pim holdtime assert 10
[AR3-GigabitEthernet0/0/1]q
[AR3]
```

​        在AR1上开启debugging pim join-prune receive，观察剪枝过程

```
<AR1>terminal debugging 
Info: Current terminal debugging is on.
<AR1>terminal monitor 
Info: Current terminal monitor is on.
<AR1>debugging pim join-prune receive 
<AR1>
```

​        在AR1上重新触发组播流量

```
<AR1>ping -a 10.0.1.1 -c 10 239.0.0.12
```


​        重新查看AR2、AR3的PIM的路由表

```
<AR2>display pim routing-table
```

![](/static/img/组播实验--IGMP、IGMP_Snooping及PIM-DM协议/1c4409f37cc546cf9b876b7af0b38158.png)


![](/static/img/组播实验--IGMP、IGMP_Snooping及PIM-DM协议/cb4e83e04cf04359bc6ae03d8349cb59.png)


现在AR3上没有下游接口，AR2为断言选举胜出者

## 6、配置IGMP Snooping

​        为了优化交换机LSW2对组播流量的转发行为，在LSW2上开启IGMP　Snooping，并手动配置路由器端口、成员端口

```
# 在全局、VLAN1开启IGMP Snooping
[LSW2]igmp-snooping enable
[LSW2]vlan 1
[LSW2-vlan1]igmp-snooping enable
[LSW2-vlan1]q

# 手动配置路由器端口
[LSW2]interface GigabitEthernet 0/0/1
[LSW2-GigabitEthernet0/0/1]igmp-snooping static-router-port vlan 1
[LSW2-GigabitEthernet0/0/1]q
[LSW2]

# 手动配置GE0/0/10为组播组239.0.0.12的成员端口
[LSW2]interface GigabitEthernet 0/0/10
[LSW2-GigabitEthernet0/0/10]l2-multicast static-group group-address 239.0.0.12 vlan 1
[LSW2-GigabitEthernet0/0/10]q
[LSW2]
```

组播实验--IGMP、IGMP_Snooping及PIM-DM协议

 

![](/static/img/组播实验--PIM_SM、BSR、PIM_SSM/c854ea628a02423691d4b73e17ffb6ed.png)


​        4台路由器均运行OSPF路由协议、创建Loopback 0，IP地址为10.0.x.x/32。AR1模拟组播组239.0.0.12的源，AR4上使用GE0/0/2接口模拟组播组239.0.0.12的接收者

​        AR3被规划为该组网的RP，采用BSR的方式选举AR3为RP

# 实验任务

1. 设备IP地址配置
2. 配置AR1、AR2、AR3、AR4的之间的OSPF，在互联接口、Loopback 0接口上激活OSPF
3. 开启路由器的组播路由功能，部署PIM-SM，在相应接口上开启PIM-SM
4. 部署BSR，将AR2的Loopback 0接口配置为BSR，AR3的 Loopback 0接口配置为RP
5. 观察各个设备的PIM-SM路由表，使用ping multicast触发RPT向SPT切换，之后再次查看PIM－SM路由表
6. 将AR4的GE0/0/2接口IGMP模式切换为Version 3，静态加入组播组232.0.0.12，查看形成的PIM-SM SSM路由表

# 实验步骤

## 1、配置各设备IP地址

```
# AR1配置
[AR1]interface GigabitEthernet 0/0/0
[AR1-GigabitEthernet0/0/0]ip address 10.0.12.1 24
[AR1-GigabitEthernet0/0/0]q
[AR1]interface LoopBack 0
[AR1-LoopBack0]ip address 10.0.1.1 32
[AR1-LoopBack0]q

# AR2配置
[AR2]interface GigabitEthernet 0/0/0
[AR2-GigabitEthernet0/0/0]ip address 10.0.12.2 24
[AR2-GigabitEthernet0/0/0]q
[AR2]interface GigabitEthernet 0/0/1
[AR2-GigabitEthernet0/0/1]ip address 10.0.23.2 24
[AR2-GigabitEthernet0/0/1]q
[AR2]interface GigabitEthernet 0/0/2
[AR2-GigabitEthernet0/0/2]ip address 10.0.24.2 24
[AR2-GigabitEthernet0/0/2]q
[AR2]interface LoopBack 0
[AR2-LoopBack0]ip address 10.0.2.2 32
[AR2-LoopBack0]q
[AR2]

# AR3配置
[AR3]interface GigabitEthernet 0/0/1
[AR3-GigabitEthernet0/0/1]ip address 10.0.23.3 24
[AR3-GigabitEthernet0/0/1]q
[AR3]interface GigabitEthernet 0/0/2
[AR3-GigabitEthernet0/0/2]ip address 10.0.34.3 24
[AR3-GigabitEthernet0/0/2]q
[AR3]interface LoopBack 0
[AR3-LoopBack0]ip address 10.0.3.3 32
[AR3-LoopBack0]q
[AR3]

# AR4配置
[AR4]interface GigabitEthernet 0/0/0
[AR4-GigabitEthernet0/0/0]ip address 10.0.24.4 24
[AR4-GigabitEthernet0/0/0]q
[AR4]interface GigabitEthernet 0/0/1
[AR4-GigabitEthernet0/0/1]ip address 10.0.34.4 24
[AR4]interface LoopBack 0
[AR4-LoopBack0]ip address 10.0.4.4 32
[AR4-LoopBack0]q
[AR4]
```


在AR2、AR3上检测互联地址连通性

![](/static/img/组播实验--PIM_SM、BSR、PIM_SSM/54bc23184751401dbaad12ac89b00493.png)


## 2、配置四台路由器之间的OSPF

​        AR1、AR2、AR3、AR4使用Loopback 0接口地址作为OSPF的router-id，在各个设备的接口上激活OSPF

```
# AR1配置
[AR1]ospf 1 router-id 10.0.1.1
[AR1-ospf-1]area 0
[AR1-ospf-1-area-0.0.0.0]network 10.0.1.1 0.0.0.0
[AR1-ospf-1-area-0.0.0.0]network 10.0.12.1 0.0.0.0
[AR1-ospf-1-area-0.0.0.0]q
[AR1-ospf-1]q
[AR1]

# AR2配置
[AR2]ospf 1 router-id 10.0.2.2 
[AR2-ospf-1]area 0
[AR2-ospf-1-area-0.0.0.0]network 10.0.2.2 0.0.0.0
[AR2-ospf-1-area-0.0.0.0]network 10.0.12.2 0.0.0.0
[AR2-ospf-1-area-0.0.0.0]network 10.0.23.2 0.0.0.0
[AR2-ospf-1-area-0.0.0.0]network 10.0.24.2 0.0.0.0
[AR2-ospf-1-area-0.0.0.0]q
[AR2-ospf-1]q
[AR2]

# AR3配置
[AR3]ospf 1 router-id 10.0.3.3
[AR3-ospf-1]area 0
[AR3-ospf-1-area-0.0.0.0]network 10.0.3.3 0.0.0.0
[AR3-ospf-1-area-0.0.0.0]network 10.0.23.3 0.0.0.0
[AR3-ospf-1-area-0.0.0.0]network 10.0.34.3 0.0.0.0
[AR3-ospf-1-area-0.0.0.0]q
[AR3-ospf-1]q
[AR3]

# AR4配置
[AR4]ospf 1 router-id 10.0.4.4
[AR4-ospf-1]area 0
[AR4-ospf-1-area-0.0.0.0]network 10.0.4.4 0.0.0.0
[AR4-ospf-1-area-0.0.0.0]network 10.0.24.4 0.0.0.0
[AR4-ospf-1-area-0.0.0.0]network 10.0.34.4 0.0.0.0
[AR4-ospf-1-area-0.0.0.0]q
[AR4-ospf-1]q
[AR4]
```


在AR2、AR3上查看OSPF邻居状态的概要信息

```
<AR2>display ospf peer brief
```

![](/static/img/组播实验--PIM_SM、BSR、PIM_SSM/72934736aa174ce29c7b2801ac8d7f2a.png)

![](/static/img/组播实验--PIM_SM、BSR、PIM_SSM/b1ec04413d1546de946b3777a364c27b.png)

OSPF邻居已全部正常建立

在AR4上查看OSPF路由表

```
<AR4>display ospf routing
```

![](/static/img/组播实验--PIM_SM、BSR、PIM_SSM/6a8e781b6721432982e6eb03ea71531d.png)

AR4已经学习到全网的路由

## 3、部署PIM-SM

​        在所有路由器上开启组播路由功能，在需要运行PIM-SM的接口下开启组播路由协议功能

```
# AR1配置
[AR1]multicast routing-enable     # 开启组播路由功能
[AR1]interface LoopBack 0
[AR1-LoopBack0]pim sm
[AR1-LoopBack0]q
[AR1]interface GigabitEthernet 0/0/0
[AR1-GigabitEthernet0/0/0]pim sm
[AR1-GigabitEthernet0/0/0]q
[AR1]

# AR2配置
[AR2]multicast routing-enable 
[AR2]interface GigabitEthernet 0/0/0
[AR2-GigabitEthernet0/0/0]pim sm
[AR2-GigabitEthernet0/0/0]q
[AR2]interface GigabitEthernet 0/0/1
[AR2-GigabitEthernet0/0/1]pim sm
[AR2-GigabitEthernet0/0/1]q
[AR2]interface GigabitEthernet 0/0/2
[AR2-GigabitEthernet0/0/2]pim sm
[AR2-GigabitEthernet0/0/2]q
[AR2]

# AR3配置
[AR3]multicast routing-enable 
[AR3]interface GigabitEthernet 0/0/1
[AR3-GigabitEthernet0/0/1]pim sm
[AR3-GigabitEthernet0/0/1]q
[AR3]interface GigabitEthernet 0/0/2
[AR3-GigabitEthernet0/0/2]pim sm
[AR3-GigabitEthernet0/0/2]q
[AR3]

# AR4配置
[AR4]multicast routing-enable 
[AR4]interface GigabitEthernet 0/0/0
[AR4-GigabitEthernet0/0/0]pim sm
[AR4-GigabitEthernet0/0/0]q
[AR4]interface GigabitEthernet 0/0/1
[AR4-GigabitEthernet0/0/1]pim sm
[AR4-GigabitEthernet0/0/1]q
[AR4]interface GigabitEthernet 0/0/2
[AR4-GigabitEthernet0/0/2]pim sm
[AR4-GigabitEthernet0/0/2]q
[AR4]
```


在AR2、AR3上检查PIM的邻居关系

```
<AR2>display pim neighbor 
```


![](/static/img/组播实验--PIM_SM、BSR、PIM_SSM/2eb360e484a84dfbbf78c79252ca9750.png)


![](/static/img/组播实验--PIM_SM、BSR、PIM_SSM/9869d67e20d845dfa965db5b803d77cf.png)


路由器之间已经全部建立正常的PIM邻居关系

## 4、部署BSR

​        部署BSR，通过调整优先级让AR3成为RP，AR2成为BSR

```
# 配置AR2的Loopback 0接口为BSR
[AR2]interface LoopBack 0
[AR2-LoopBack0]pim sm 
[AR2-LoopBack0]q
[AR2]pim 	
[AR2-pim]c-bsr priority 100
[AR2-pim]c-bsr LoopBack 0
[AR2-pim]q
[AR2]

# 配置AR3的Loopback 0接口为RP，指定RP所服务的组播组为239.0.0.12
[AR3]interface LoopBack 0
[AR3-LoopBack0]pim sm
[AR3-LoopBack0]q
[AR3]acl 2000
[AR3-acl-basic-2000]rule 1 permit source 239.0.0.12 0.0.0.0
[AR3-acl-basic-2000]q
[AR3]pim 
[AR3-pim]c-rp LoopBack 0 group-policy 2000 priority 100
[AR3-pim]q
[AR3]
```


在AR4上查看BSR、RP信息

```
<AR4>display pim bsr-info 
```


![](/static/img/组播实验--PIM_SM、BSR、PIM_SSM/c47110cb6b46410c88bcb630c1fc741d.png)


```
<AR4>display pim rp-info
```


![](/static/img/组播实验--PIM_SM、BSR、PIM_SSM/daa1ce22b457473395b575e374002eb2.png)


C-BSR、C-RP只有一台，AR2、AR3分别成为BSR、RP，组播组239.0.0.12的RP成为10.0.3.3

## 5、观察PIM路由表

​        在AR４上使用GE0/0/2接口模拟组播组239.0.0.12的接收者，分别在AR3、AR4上查看PImp路由表。之后修改SRT切换阈值，重新触发组播流量再次查看PIM路由表

```
# 在AR4的GE0/0/2接口上开启IGMP，并配置静态组播组模拟组播接收者
[AR4]interface GigabitEthernet 0/0/2
[AR4-GigabitEthernet0/0/2]ip address 192.168.1.1 24
[AR4-GigabitEthernet0/0/2]igmp enable 
[AR4-GigabitEthernet0/0/2]igmp static-group 239.0.0.12
[AR4-GigabitEthernet0/0/2]q
[AR4]
# 注意GE0/0/2接口需要配置IP地址，并为UP状态
```

![](/static/img/组播实验--PIM_SM、BSR、PIM_SSM/2b560633edd8487a8dbf2df23895af8a.png)


查看AR4的PIM路由表

```
<AR4>display pim routing-table
```


![](/static/img/组播实验--PIM_SM、BSR、PIM_SSM/bdb13384660d4fd8b5d89b273639cfb1.png)


R4上前往的RP（10.0.3.3）的路由出接口为GE0/0/1，因此R4将GE0/0/1接口指定为（*， 239.0.0.12）的上游接口，从上游接口发送PIM加入报文

查看AR3的PIM路由表

```
<AR3>display pim routing-table
```

![](/static/img/组播实验--PIM_SM、BSR、PIM_SSM/d949ef916caa4312af2d375ca5a944a6.png)


R3为RP，无需向上游发送加入报文，到目前为止暂未有组播源向该RP注册，所以上游接口依旧为空

在AR1上使用ping multicast命令模拟组播组239.0.0.12的组播源，发送组播数据

```
<AR1>ping multicast -c 10 239.0.0.12
```


再次查看AR4的PIM路由表

```
<AR4>display pim routing-table
```


![](/static/img/组播实验--PIM_SM、BSR、PIM_SSM/ac64f3d57f664cf9b5a22c6c86ffefa9.png)


R4上Flag为ACT的为（S,G）表项，代表真正指导转发的为（S,G）表项，同时上游接口不 再是连接R3的GE0/0/1，而是连接R2的GE0/0/0，此时RPT（共享树）已经切换成为SPT （最短路径树）

在AR4上修改SPT的切换阈值

```
[AR4]pim	
[AR4-pim]spt-switch-threshold infinity 
[AR4-pim]q
```

切换为禁止切换

\#在AR1上模拟239.0.0.12的组播源，发送组播数据

```
<AR1>ping multicast -c 10 239.0.0.12
```


在AR4上查看PIM路由表

![](/static/img/组播实验--PIM_SM、BSR、PIM_SSM/d2d180443e4645dfa3c1968869a508d9.png)


​        此时AR4的上游接口依旧为GE0/0/3，（S，G）表项的路径依旧为沿着RP到组播源，RPT并未向SRT切换

## 6、部署PIM-SSM

​        将AR4 GE0/0/0接口的IGMP版本修改为Version 3，配置静态加入SSM组播组232.0.0.12

修改GE0/0/0接口配置

```
[AR4]interface GigabitEthernet 0/0/0
[AR4-GigabitEthernet0/0/0]igmp version 3
[AR4-GigabitEthernet0/0/0]igmp static-group 232.0.0.12 source 10.0.1.1
[AR4-GigabitEthernet0/0/0]q
[AR4]
```


注意，在默认配置下，SSM组策略中的组播地址范围为232.0.0.0/8，如果配置的静态加入的组播组地址不在该范围内，则无法形成PIM-SSM表项

查看AR4的PIM路由表

![](/static/img/组播实验--PIM_SM、BSR、PIM_SSM/afdfc94e703948efa1123f934f004a42.png)

AR4形成的表项已经是（S，G），并且协议为PIM-SSM，上游为AR2

查看AR2的PIM路由表

![](/static/img/组播实验--PIM_SM、BSR、PIM_SSM/b1f347458acc41d9a02f226b683d5163.png)

可以看到AR2的协议也是变为的PIM-SSM，上游为AR1

组播实验--PIM_SM、BSR、PIM_SSM

# 目标

> 1. 三层交换机完成DHCP自动分配IP地址
> 2. 不同vlan间完成通信
> 3. DNS服务器能够解析www.baidu.com，使PC机能够访问
> 4. 连接真实物理机，PC机与物理机能够互相访问

![](/static/img/VLAN，DHCP实验访问物理机/2acdea2713be4b91a81b6020a4073401.png)


# 步骤

## 一、创建VLAN，配置好PC机和交换机的IP地址

LSW1

```
[LSW1]vlan batch 10 20
Info: This operation may take a few seconds. Please wait for a moment...done.
[LSW1]int vlan 10
[LSW1-Vlanif10]ip address 10.10.10.1 255.255.255.0
[LSW1-Vlanif10]q
[LSW1]int vlan 20
[LSW1-Vlanif20]ip address 10.10.20.1 255.255.255.0
[LSW1-Vlanif20]q
[LSW1]int g0/0/4
[LSW1-GigabitEthernet0/0/4]port link-type trunk
[LSW1-GigabitEthernet0/0/4]port trunk allow-pass vlan 10 
[LSW1-GigabitEthernet0/0/4]q
[LSW1]int g0/0/5
[LSW1-GigabitEthernet0/0/5]port link-type trunk
[LSW1-GigabitEthernet0/0/5]port trunk allow-pass vlan 20
[LSW1-GigabitEthernet0/0/5]q
[LSW1]
```


LSW2和LSW配置相同，这里仅以LSW2配置为例

```
[LSW2]vlan batch 10
Info: This operation may take a few seconds. Please wait for a moment...done.
[LSW2]int g0/0/1
[LSW2-GigabitEthernet0/0/1]port link-type trunk
[LSW2-GigabitEthernet0/0/1]port trunk allow-pass vlan 10
[LSW2-GigabitEthernet0/0/1]q
[LSW2]int g0/0/2
[LSW2-GigabitEthernet0/0/2]port link-type access
[LSW2-GigabitEthernet0/0/2]port default vlan 10
[LSW2-GigabitEthernet0/0/2]q
[LSW2]int g0/0/3
[LSW2-GigabitEthernet0/0/3]port link-type access
[LSW2-GigabitEthernet0/0/3]port default vlan 10
[LSW2-GigabitEthernet0/0/3]q
[LSW2]
```

![](/static/img/VLAN，DHCP实验访问物理机/88bfab39a717454d8d2114e6c035a6d8.png)


（其实，在这里不想弄DHCP自动分配地址的话，可以直接在PC机上手动配置相应的IP地址，然后就可以ping通网关和另一个VLAN的主机）

## 二、创建DHCP地址池，分配IP地址

LSW1

```
[LSW1]dhcp enable
Info: The operation may take a few seconds. Please wait for a moment.done.
[LSW1]ip pool vlan10
Info:It's successful to create an IP address pool.
[LSW1-ip-pool-vlan10]network 10.10.10.0 mask 255.255.255.0
[LSW1-ip-pool-vlan10]gateway-list 10.10.10.1
[LSW1-ip-pool-vlan10]q
[LSW1]int vlan 10
[LSW1-Vlanif10]dhcp select global 
[LSW1-Vlanif10]q
[LSW1]
[LSW1]ip pool vlan20
Info:It's successful to create an IP address pool.
[LSW1-ip-pool-vlan20]network 10.10.20.0 mask 255.255.255.0
[LSW1-ip-pool-vlan20]gateway-list 10.10.20.1
[LSW1-ip-pool-vlan20]q
[LSW1]int vlan 20
[LSW1-Vlanif20]dhcp select global
[LSW1-Vlanif20]q
[LSW1]
```

![](/static/img/VLAN，DHCP实验访问物理机/5ea66c0f6b994874a499ddd39325b0f6.png)


这样就设置好DHCP了，各个PC机能够自动获得IP地址

## 三、配置两个服务器，使得PC机能够直接访问www.baidu.com服务器

LSW1

```
[LSW1]vlan batch 4 5
Info: This operation may take a few seconds. Please wait for a moment...done.
[LSW1]int vlan 4 
[LSW1-Vlanif4]ip address 4.4.4.1 255.255.255.0
[LSW1-Vlanif4]q
[LSW1]int vlan 5
[LSW1-Vlanif5]ip address 5.5.5.1 255.255.255.0
[LSW1-Vlanif5]q
[LSW1]int g0/0/2
[LSW1-GigabitEthernet0/0/2]port link-type access
[LSW1-GigabitEthernet0/0/2]port default vlan 4
[LSW1-GigabitEthernet0/0/2]q
[LSW1]int g0/0/3
[LSW1-GigabitEthernet0/0/3]port link-type access
[LSW1-GigabitEthernet0/0/3]port default vlan 5
[LSW1-GigabitEthernet0/0/3]q


[LSW1]ip pool vlan10
[LSW1-ip-pool-vlan10]dns-list 4.4.4.4
[LSW1-ip-pool-vlan10]q
[LSW1]ip pool vlan20 
[LSW1-ip-pool-vlan20]dns-list 4.4.4.4
[LSW1-ip-pool-vlan20]q
[LSW1]
```

​    LSW1需要创建两个VLAN分别作为两个服务器的网关，同时需要在DHCP的地址池上增加DNS服务器的IP地址（配置好，最好重新启动一个PC机让它重新获取IP地址，才能出现DNS服务器地址）

![](/static/img/VLAN，DHCP实验访问物理机/c184ccc2afa144188586c3cc7f684c7d.png)


以DNS Server服务器为例，www.baidu.com服务器也是一样的配置

![](/static/img/VLAN，DHCP实验访问物理机/8a53dabedef244f783a5cb58fbf09a89.png)


同时作为DNS服务器需要增加一条域名解析

![](/static/img/VLAN，DHCP实验访问物理机/32a81ebb13294980ba68e9d8b92d3431.png)


结果

![](/static/img/VLAN，DHCP实验访问物理机/c719315bec204fe3ac6e23e3e1bd7b67.png)


## 四、连接真实物理机

![](/static/img/VLAN，DHCP实验访问物理机/31e9a2c4a8f6481cbb3af01c515a7a21.png)


我们这里是没有连接好，想连连不了云，这是我们没有给接口网卡给它

![](/static/img/VLAN，DHCP实验访问物理机/8205c854d2844ab386e4c255b0e27401.png)


![](/static/img/VLAN，DHCP实验访问物理机/345525e34fdf4374bec4622df8ed5ee5.png)


![](/static/img/VLAN，DHCP实验访问物理机/f4fc4c54b7ab4d22b09c87b8fc3a19ca.png)


就可以连接了

现在我们开始配置

AR1

```
[AR1]int g0/0/1
[AR1-GigabitEthernet0/0/1]ip address 192.168.88.2 24
[AR1-GigabitEthernet0/0/1]q
[AR1]
```

其实配置好了这个，有些电脑还是ping不通，这可能是物理机的防火墙在阻止ICMP请求。可以到控制面板找到防火墙设置，暂时关闭公用网络设置，就可以ping通了

![](/static/img/VLAN，DHCP实验访问物理机/9722f7a539cc4d47b246e76c4ac6e1b5.png)

这里只是实现了路由器与物理机的ping通，我们想要的是PC机与物理机的ping通，我们还需要一些操作

AR1

```
[AR1]int g0/0/0
[AR1-GigabitEthernet0/0/0]ip address 10.1.1.1 24
[AR1-GigabitEthernet0/0/0]q
[AR1]ip route-static 10.10.0.0 255.255.0.0 10.1.1.2
```

LSW1

```
[LSW1]vlan batch 100
Info: This operation may take a few seconds. Please wait for a moment...done.
[LSW1]int vlan 100
[LSW1-Vlanif100]ip address 10.1.1.2 24
[LSW1-Vlanif100]q
[LSW1]int g0/0/1
[LSW1-GigabitEthernet0/0/1]port link-type access
[LSW1-GigabitEthernet0/0/1]port default vlan 100
[LSW1-GigabitEthernet0/0/1]q
[LSW1]ip route-static 0.0.0.0 0.0.0.0 10.1.1.1
[LSW1]
```


LSW1是需要配置一条默认路由，帮助PC机访问物理机

当然到了这里还是差了一点东西，PC机可以发请求包给物理机了，而物理机却没有路径回应应答包回来，所以我们需要以管理员的权限打开物理机的命令行，增加一条默认路由

![](/static/img/VLAN，DHCP实验访问物理机/f5788d14bed047209f29e360f0bfb13d.png)


这样两个既可以互相访问了

![](/static/img/VLAN，DHCP实验访问物理机/189aceb9b0214d01ba685b7db9dfee2c.png)

VLAN，DHCP实验访问物理机

#  项目背景

​        公司G总部包含4个部门，园区网络包含2台核心交换机和10台接入交换机，项目组为了增加网络的可靠性，避免单点故障，在接入层交换机通过双链路分别连接到2台核心层交换机，前期已经完成设计和部署，现在需要在所有交换机上配置MSTP，确保网络中不会出现交换环路，同时要实现负载均衡。同时需要在核心交换机配置VRRP与MSTP联动，为连接到接入层交换机的主机提供冗余网关。李同学正在该公司实习，为了提高实际工作的准确性和工作效率，项目经理安排他在实验室环境下完成测试，为设备上线运行奠定坚实的基础。小李用2台交换机模拟核心层交换机，2台交换机模拟接入层交换机

![](/static/img/华为ENSP--STP实验/ceafb247154342bc89a09990bb2450c6.png)

# 项目任务

> **前期准备**
>
> 1. VLAN部署：在核心层和接入层交换机上完成VLAN相关配置，包括VLAN创建和端口划分、Trunk配置等。在交换机S1和S2之间链路配置链路聚合
> 2. IP地址部署：在核心三层交换机S1和S2上创建VLANIF并配置IP地址以及配置计算机的IP地址、子网掩码和网关 

> **项目核心**
>
> 1. 配置MSTP域：在交换机S1、S2 、S3和S4上配置MSTP域，包括MSTP域名、修订级别、实例和VLAN映射关系，并且激活MSTP域配置
> 2. 配置MSTP实例优先级：通过实例1（VLAN2和VLAN3）和实例2（VLAN4和VLAN5）选举不同的根桥实现负载分担。交换机S1是实例1的根桥（优先级为4096），是实例2的次根桥（优先级为8192）；交换机S2是实例1的次根桥（优先级为8192），是实例2的根桥（优先级为4096）
> 3. 配置边缘端口和BPDU保护：将接入层交换机S3和S4上连接主机的接口配置为边缘端口，并开启BPDU保护
> 4. 配置VRRP：核心交换机S1和S2上配置VRRP，为VLAN2-VLAN5主机提供冗余网关。通过修改接口优先级控制交换机S1作为VLAN2和VLAN3的Master，交换机S2作为VLAN4和VLAN5的Master。确保每个VLAN的VRRP的Master和MSTP的根一致

# 项目步骤

## 准备工作

### （1）配置VLAN

​        在核心层和接入层交换机上完成VLAN2-5的配置，在S1和S2之间配置链路聚合

```
# S1配置
[S1]vlan batch 2 to 5
Info: This operation may take a few seconds. Please wait for a moment...done.
[S1]interface Eth-Trunk 1
[S1-Eth-Trunk1]port link-type trunk
[S1-Eth-Trunk1]port trunk allow-pass vlan all
[S1-Eth-Trunk1]q
[S1]interface GigabitEthernet 0/0/1
[S1-GigabitEthernet0/0/1]eth-trunk 1
Info: This operation may take a few seconds. Please wait for a moment...done.
[S1-GigabitEthernet0/0/1]q
[S1]interface GigabitEthernet 0/0/2
[S1-GigabitEthernet0/0/2]eth-trunk 1
Info: This operation may take a few seconds. Please wait for a moment...done.
[S1-GigabitEthernet0/0/2]q
[S1]interface GigabitEthernet 0/0/3
[S1-GigabitEthernet0/0/3]port link-type trunk
[S1-GigabitEthernet0/0/3]port trunk allow-pass vlan all
[S1-GigabitEthernet0/0/3]q
[S1]interface GigabitEthernet 0/0/4
[S1-GigabitEthernet0/0/4]port link-type trunk
[S1-GigabitEthernet0/0/4]port trunk allow-pass vlan all
[S1-GigabitEthernet0/0/4]q
[S1]

# S2配置
[S2]vlan batch 2 to 5
Info: This operation may take a few seconds. Please wait for a moment...done.
[S2]interface Eth-Trunk 1
[S2-Eth-Trunk1]port link-type trunk
[S2-Eth-Trunk1]port trunk allow-pass vlan all
[S2-Eth-Trunk1]q
[S2]interface GigabitEthernet 0/0/1
[S2-GigabitEthernet0/0/1]eth-trunk 1
Info: This operation may take a few seconds. Please wait for a moment...done.
[S2-GigabitEthernet0/0/1]q
[S2]interface GigabitEthernet 0/0/2
[S2-GigabitEthernet0/0/2]eth-trunk 1
Info: This operation may take a few seconds. Please wait for a moment...done.
[S2-GigabitEthernet0/0/2]q
[S2]interface GigabitEthernet 0/0/3
[S2-GigabitEthernet0/0/3]port link-type trunk
[S2-GigabitEthernet0/0/3]port trunk allow-pass vlan all
[S2-GigabitEthernet0/0/3]q
[S2]interface GigabitEthernet 0/0/4
[S2-GigabitEthernet0/0/4]port link-type trunk
[S2-GigabitEthernet0/0/4]port trunk allow-pass vlan all
[S2-GigabitEthernet0/0/4]q
[S2]

# S3配置
[S3]vlan batch 2 to 5
Info: This operation may take a few seconds. Please wait for a moment...done.
[S3]interface GigabitEthernet 0/0/1
[S3-GigabitEthernet0/0/1]port link-type trunk
[S3-GigabitEthernet0/0/1]port trunk allow-pass vlan all
[S3-GigabitEthernet0/0/1]q
[S3]interface GigabitEthernet 0/0/2
[S3-GigabitEthernet0/0/2]port link-type trunk
[S3-GigabitEthernet0/0/2]port trunk allow-pass vlan all
[S3-GigabitEthernet0/0/2]q
[S3]interface GigabitEthernet 0/0/12
[S3-GigabitEthernet0/0/12]port link-type access
[S3-GigabitEthernet0/0/12]port default vlan 2
[S3-GigabitEthernet0/0/12]q
[S3]interface GigabitEthernet 0/0/13
[S3-GigabitEthernet0/0/13]port link-type access 
[S3-GigabitEthernet0/0/13]port default vlan 3
[S3-GigabitEthernet0/0/13]q
[S3]

# S4配置
[S4]vlan batch 2 to 5
Info: This operation may take a few seconds. Please wait for a moment...done.
[S4]interface GigabitEthernet 0/0/1
[S4-GigabitEthernet0/0/1]port link-type trunk
[S4-GigabitEthernet0/0/1]port trunk allow-pass vlan all
[S4-GigabitEthernet0/0/1]q
[S4]interface GigabitEthernet 0/0/2
[S4-GigabitEthernet0/0/2]port link-type trunk
[S4-GigabitEthernet0/0/2]port trunk allow-pass vlan all
[S4-GigabitEthernet0/0/2]q
[S4]interface GigabitEthernet 0/0/14
[S4-GigabitEthernet0/0/14]port link-type access
[S4-GigabitEthernet0/0/14]port default vlan 4
[S4-GigabitEthernet0/0/14]q
[S4]interface GigabitEthernet 0/0/15
[S4-GigabitEthernet0/0/15]port link-type access 
[S4-GigabitEthernet0/0/15]port default vlan 5
[S4-GigabitEthernet0/0/15]q
[S4]
```

​        查看链路聚合信息

```
<S1>dispaly eth-trunk 1
```

![](/static/img/华为ENSP--STP实验/5acfe00eb2254e0eb9270c3e84ecceec.png)


​        验证VLAN信息

```
<S1>display vlan 
```

![](/static/img/华为ENSP--STP实验/896cf4a36e89467f9fe72f102d84589b.png)

### （2）配置IP地址

​        在核心三层交换机S1和S2上创建VLANIF并配置IP地址以及配置计算机的IP地址、子网掩码和网关

```
# S1配置
[S1]interface Vlanif 12
Error: The VLAN does not exist.
[S1]interface Vlanif 2
[S1-Vlanif2]ip address 10.2.2.252 24
[S1-Vlanif2]q
[S1]interface Vlanif 3
[S1-Vlanif3]ip address 10.3.3.252 24
[S1-Vlanif3]q
[S1]interface Vlanif 4
[S1-Vlanif4]ip address 10.4.4.252 24
[S1-Vlanif4]q
[S1]interface Vlanif 5
[S1-Vlanif5]ip address 10.5.5.252 24
[S1-Vlanif5]q
[S1]

# S2配置
[S2]interface Vlanif 2
[S2-Vlanif2]ip address 10.2.2.253 24
[S2-Vlanif2]q
[S2]interface Vlanif 3
[S2-Vlanif3]ip address 10.3.3.253 24
[S2-Vlanif3]q
[S2]interface Vlanif 4
[S2-Vlanif4]ip address 10.4.4.253 24
[S2-Vlanif4]q	
[S2]interface Vlanif 5
[S2-Vlanif5]ip address 10.5.5.253 24
[S2-Vlanif5]q
[S2]
```


​        配置设备PC机IP地址、掩码和网关（以PC1为例）

![](/static/img/华为ENSP--STP实验/f948a47af9f84154a4573e87ce7418db.png)


## 核心工作

### （1）配置MSTP域

​        在交换机S1、S2、S3和S4上配置MSTP域，包括MSTP域名、修订级别、实例和VLAN映射关系，并且激活MSTP域配置

```
# S1配置
[S1]stp mode mstp
[S1]stp region-configuration
[S1-mst-region]region-name Region1
[S1-mst-region]instance 1 vlan 2 to 3
[S1-mst-region]instance 2 vlan 4 to 5
[S1-mst-region]active region-configuration 
Info: This operation may take a few seconds. Please wait for a moment...done.
[S1-mst-region]q
[S1]

# S2配置
[S2]stp mode mstp
[S2]stp region-configuration
[S2-mst-region]region-name Region1
[S2-mst-region]instance 1 vlan 2 to 3
[S2-mst-region]instance 2 vlan 4 to 5
[S2-mst-region]active region-configuration 
Info: This operation may take a few seconds. Please wait for a moment...done.
[S2-mst-region]q
[S2]

# S3配置
[S3]stp mode mstp
[S3]stp region-configuration
[S3-mst-region]region-name Region1
[S3-mst-region]instance 1 vlan 2 to 3
[S3-mst-region]instance 2 vlan 4 to 5
[S3-mst-region]active region-configuration
Info: This operation may take a few seconds. Please wait for a moment...done.
[S3-mst-region]q
[S3]

# S4配置
[S4]stp mode mstp
[S4]stp region-configuration
[S4-mst-region]region-name Region1
[S4-mst-region]instance 1 vlan 2 to 3
[S4-mst-region]instance 2 vlan 4 to 5
[S4-mst-region]active region-configuration
Info: This operation may take a few seconds. Please wait for a moment...done.
[S4-mst-region]q
[S4]
```

### （2）配置MSTP实例优先级

​        通过实例1（vlan2、vlan3）和实例2（vlan4、vlan5）选举不同的根桥实现负载分担。交换机S1是实例1的根桥（优先级为4096），是实例2的次根桥（优先级为8192）；S2是实例1的次根桥（优先级为8192），是实例2的根桥（优先级为4096）

```
# S1配置
[S1]stp instance 0 priority 4096
[S1]stp instance 1 priority 4096
[S1]stp instance 2 priority 8192

# S2配置
[S2]stp instance 0 priority 8192
[S2]stp instance 1 priority 8192
[S2]stp instance 2 priority 4096
```

### （3）配置边缘端口和BPDU保护

​        将接入交换机S3和S4上连接主机的接口配置为边缘端口，并开启BPDU保护

```
# S3配置
[S3]stp bpdu-protection
[S3]interface GigabitEthernet 0/0/12
[S3-GigabitEthernet0/0/12]stp edged-port  enable
[S3-GigabitEthernet0/0/12]q
[S3]interface GigabitEthernet 0/0/13
[S3-GigabitEthernet0/0/13]stp edged-port enable
[S3-GigabitEthernet0/0/13]q
[S3]

# S4配置
[S4]stp bpdu-protection
[S4]interface GigabitEthernet 0/0/14
[S4-GigabitEthernet0/0/14]stp edged-port enable
[S4-GigabitEthernet0/0/14]q
[S4]interface GigabitEthernet 0/0/15
[S4-GigabitEthernet0/0/15]stp edged-port enable
[S4-GigabitEthernet0/0/15]q
[S4]
```

### （4）配置VRRP

​        核心交换机S1和S2上配置VRRP，为VLAN2-VLAN5主句提供冗余网关。通过修改接口优先级控制交换机S1作为VLAN２和VLAN３的Master，交换机S2作为VLAN 4和VLAN 5的Master。确保每个VLAN的VRRP的Master和MSTP的根一致

```
# S1配置
[S1]interface Vlanif 2
[S1-Vlanif2]vrrp vrid 2 virtual-ip 10.2.2.254
[S1-Vlanif2]vrrp vrid 2 priority 120
[S1-Vlanif2]q
[S1]interface Vlanif 3
[S1-Vlanif3]vrrp vrid 3 virtual-ip 10.3.3.254
[S1-Vlanif3]vrrp vrid 3 priority 120
[S1-Vlanif3]q
[S1]interface Vlanif 4
[S1-Vlanif4]vrrp vrid 4 virtual-ip 10.4.4.254
[S1-Vlanif4]q
[S1]interface Vlanif 5
[S1-Vlanif5]vrrp vrid 5 virtual-ip 10.5.5.254
[S1-Vlanif5]q
[S1]

# S2配置
[S2]interface Vlanif 2
[S2-Vlanif2]vrrp vrid 2 virtual-ip 10.2.2.254
[S2-Vlanif2]q
[S2]interface Vlanif 3
[S2-Vlanif3]vrrp vrid 3 virtual-ip 10.3.3.254
[S2-Vlanif3]q
[S2]interface Vlanif 4
[S2-Vlanif4]vrrp vrid 4 virtual-ip 10.4.4.254
[S2-Vlanif4]vrrp vrid 4 priority 120
[S2-Vlanif4]q
[S2]interface Vlanif 5
[S2-Vlanif5]vrrp vrid 5 virtual-ip 10.5.5.254
[S2-Vlanif5]vrrp vrid 5 priority 120
[S2-Vlanif5]q
[S2]
```

## 验证

### 查看MSTP摘要信息

```
<S1>display stp brief
```

![](/static/img/华为ENSP--STP实验/e1983db749c244c399c003b0fd0c1105.png)


### 查看STP信息

```
<S1>display stp
```

![](/static/img/华为ENSP--STP实验/e355f320d5fd4d239f921b3c08dcf745.png)


### 查看MSTP域配置信息

```
<S1>display stp region-configuration
```

![](/static/img/华为ENSP--STP实验/04a811c4216b4c6c8d169ceced25c075.png)

### 查看MSTP实例端口信息

```
<S1>display stp instance 1 interface Eth-Trunk 1
```

![](/static/img/华为ENSP--STP实验/050a1b64d2c04ca2b4c602f954e4888b.png)

华为ENSP--STP实验

![](/static/img/RSTP与MSTP实验/3aa1781534384e8abe71a49c2d8fbc6d.png)

​        配置RSTP、MSTP打破二层环路，同时手动指定根桥、备份根桥

​        为避免环路问题，在网络中部署RSTP。所有的VLAN共享一颗STP生成树，为了实现VLAN间数据流量的负载均衡，在网络中部署MSTP

# 实验任务

1. 开启STP，修改STP模式为RSTP
2. 手动指定S1为RSTP根桥、S2为RSTP备份根桥
3. 通过修改接口开销值，使得S4的G0/0/1接口成为根端口
4. 通过修改S1的G0/0/11接口优先级，使得S2的G0/0/11接口成为根端口
5. 修改STP模式为MSTP，创建Instance1、2，指定S1为MSTI1的根桥、MSTI2的备份根桥，指定S2为MSTI2的根桥、MSTI的备份根桥

# 实验步骤

### （1）RSTP基础配置

​        在S1、S2、S3、S4上开启STP，并将STP模式切换为RSTP

```
# 以S1为例
[S1]stp enable
[S1]stp mode rstp
```

​        查看STP的状态和统计信息摘要（以S4为例）

```
[S4]display stp brief
```

![](/static/img/RSTP与MSTP实验/286bbaf5f4b84d708ee054594d7f464e.png)

​        S4上所有接口都是指定端口，S4为根桥交换机。由于交换机的MAC地址不可确定性，每次实验的根桥交换机可能都不一样

​        在S4上查看STP的状态和统计信息

```
<S4>display stp
```

![](/static/img/RSTP与MSTP实验/f655d2ddab5246b9974b2e94640dec8b.png)

​        S4为根桥交换机

### （2）根桥选举控制

​        配置S1为主根桥、S2为备份根桥

```
# 手动调整STP优先级，指定S1为主根桥、S2为备份根桥
[S1]stp priority 4096

[S2]stp priority 8192
```

​        在S1上查看STP的状态和统计信息

```
<S1>display stp
```

![](/static/img/RSTP与MSTP实验/83f4a3f898914b7a99feec45a3bfac19.png)


​        现在S1的桥优先级为4096，并且现在S1为根桥交换机

### （3）修改接口开销值控制根端口选举

​        在S4上查看STP的状态和统计信息摘要

```
<S4>display stp brief
```

![](/static/img/RSTP与MSTP实验/9a71eb460d7f4f48afb53222a47f3a0a.png)


​        S4上G0/0/2拥有更小的RPC（根路径开销），从而成为根端口

​        在S4上查看G0/0/2接口的STP的状态和统计信息

![](/static/img/RSTP与MSTP实验/c9fa036e0bde47368459e910a1629cfd.png)

​        此时路径的计算方法为Dot1t，接口的STP cost值为20000

​        修改S4的G0/0/2接口的STP cost值为40001

```
[S4]interface GigabitEthernet 0/0/2
[S4-GigabitEthernet0/0/2]stp cost 40001
[S4-GigabitEthernet0/0/2]q
[S4]
```

​        再次在S4上查看STP的状态和统计信息摘要

![](/static/img/RSTP与MSTP实验/9596c2eb2cf141a198dcf692ebc7e4d9.png)


​        此时G0/0/1接口的RPC为40000，小于G0/0/2的RPC值40001，S4的G0/0/1接口成为根端口

### （4）修改接口优先级控制根端口选举

​        在S2上查看STP的状态和统计信息摘要

```
<S2>display stp brief
```

![](/static/img/RSTP与MSTP实验/0a9e8b65329241ceb829f5c6492b00e9.png)


​        S2上G0/0/10、G0/0/11接口收到的BPDU拥有相同的RPC、网桥ID、接口优先级，此时将会比较接收到的BPDU接口ID中的接口编号

​        在S1、S2上开启LLDP，查看接口的互联关系

```
[S1]lldp enable

[S2]lldp enable

[S2]display lldp neighbor brief
```

![](/static/img/RSTP与MSTP实验/58128d26433f43b3b9432f2b0abffcbf.png)

​        S2的G0/0/10接口对端为S1的G0/0/10接口，S2的G0/0/11接口对端为S1的G0/0/11接口，S2的G0/0/10接口接收到的BPDU拥有更小的接口编号，这就是G0/0/10成为根端口的原因

​        在S1上修改G0/0/11的STP接口优先级，使其发送的BPDU优于G0/0/10发送的BPDU

```
[S1]interface GigabitEthernet 0/0/11
[S1-GigabitEthernet0/0/11]stp port priority 64
[S1-GigabitEthernet0/0/11]q
[S1]
```

​        STP接口优先级为128，数值越小越优

​        再次查看S2上的STP状态和统计信息下摘要

```
[S2]display stp brief
```

![](/static/img/RSTP与MSTP实验/4ebb491fbba243f4bca1902dd1ca4a97.png)


​        现在G0/0/11为根端口

### （5）MSTP基础配置

​        在所有交换机上创建VLAN10-80，配置MSTP域ｚｚｚ，并创建两个新的实例：Instance1、Instance2，将VLAN10、30、50、70映射到Instance1，将VLAN20、40、60、80映射到Instance2，同时将S1规划为MSTI1的主根桥、MSTI2的备份根桥，将S2规划为MSTI的主根桥、MSTI的备份根桥

​        创建VLAN10-80，并配置所有互联接口为trunk，放通所有VLAN，同时修改STP模式为MSTP（以S1为例）

```
[S1]stp mode mstp

[S1]vlan batch 10 20 30 40 50 60 70 80
Info: This operation may take a few seconds. Please wait for a moment...done.

[S1]interface GigabitEthernet 0/0/10
[S1-GigabitEthernet0/0/10]port link-type trunk
[S1-GigabitEthernet0/0/10]port trunk all	
[S1-GigabitEthernet0/0/10]port trunk allow-pass vlan all
[S1-GigabitEthernet0/0/10]q
[S1]interface GigabitEthernet 0/0/11
[S1-GigabitEthernet0/0/11]port link-type trunk
[S1-GigabitEthernet0/0/11]port trunk allow-pass vlan all
[S1-GigabitEthernet0/0/11]q
[S1]interface GigabitEthernet 0/0/12
[S1-GigabitEthernet0/0/12]port link-type trunk
[S1-GigabitEthernet0/0/12]port trunk allow-pass vlan all
[S1-GigabitEthernet0/0/12]q
[S1]interface GigabitEthernet 0/0/13
[S1-GigabitEthernet0/0/13]port link-type trunk
[S1-GigabitEthernet0/0/13]port trunk allow-pass vlan all
[S1-GigabitEthernet0/0/13]q
[S1]
```

​        配置MSTP

```
# S1配置
[S1]stp region-configuration 
[S1-mst-region]region-name zzz
[S1-mst-region]revision-level 1
[S1-mst-region]instance 1 vlan 10 30 50 70
[S1-mst-region]instance 2 vlan 20 40 60 80
[S1-mst-region]active region-configuration 
Info: This operation may take a few seconds. Please wait for a moment...done.
[S1-mst-region]q
[S1]

# S2配置
[S2]stp region-configuration 
[S2-mst-region]region-name zzz
[S2-mst-region]revision-level 1
[S2-mst-region]instance 1 vlan 10 30 50 70
[S2-mst-region]instance 2 vlan 20 40 60 80
[S2-mst-region]active region-configuration 
Info: This operation may take a few seconds. Please wait for a moment...done.
[S2-mst-region]q
[S2]

# S3配置
[S3]stp region-configuration 
[S3-mst-region]region-name zzz	
[S3-mst-region]revision-level 1
[S3-mst-region]instance 1 vlan 10 30 50 70
[S3-mst-region]instance 2 vlan 20 40 60 80
[S3-mst-region]active region-configuration 
Info: This operation may take a few seconds. Please wait for a moment...done.
[S3-mst-region]q
[S3]

# S4配置
[S4]stp region-configuration 
[S4-mst-region]region-name zzz
[S4-mst-region]revision-level 1
[S4-mst-region]instance 1 vlan 10 30 50 70
[S4-mst-region]instance 2 vlan 20 40 60 80
[S4-mst-region]active region-configuration 
Info: This operation may take a few seconds. Please wait for a moment...done.
[S4-mst-region]q
[S4]
```

​        在S1上检查MSTP实例和VLAN的映射关系

```
<S1>display stp region-configuration 
```

![](/static/img/RSTP与MSTP实验/16f628c1d80f47b2875796dcd05fec4d.png)


​        配置S1为MSTI1的根桥、MSTI2的备份根桥

```
[S1]stp instance 1 root primary
[S1]stp instance 2 root secondary
```


​        配置S2为MSTI2的根桥、MSTI1的备份根桥

```
[S2]stp instance 1 root secondary 
[S2]stp instance 2 root primary
```

​        在S1、S2上分别查看MSTI1、MSTI2的状态和统计信息摘要

```
[S1]display stp instance 1 brief
```

![](/static/img/RSTP与MSTP实验/ee6b4869e39249948152beb097a610dc.png)

​        S1上所有接口都是指定接口，S1为MSTI1的根桥

```
[S2]display stp instance 2 brief
```

![](/static/img/RSTP与MSTP实验/a4355450802e4ab28e95e07e1034d19a.png)

​        S2上所有接口都是指定接口，S2为MSTI2的根桥