一、实验拓扑及描述
1、这是一个由三台交换机组成的倒三角型二层交换网络；网络中有4个VLAN：101、200；接口编号如拓扑图所示；LSW1为接入层交换机，SW1、SW2为汇聚层交换机；
2、VLAN101对应的网段为172.16.101.0/24； VLAN200对应的网段为192.168.200.0/24；各VLAN的网关均为.254的地址，该地址为VRRP组的虚拟地址；
3、SW1的vlanif101的接口实际IP地址分别为：172.16.101.252；SW1的vlanif200接口实际IP地址分别为：192.168.200.253；
4、SW2的vlanif100和vlanif101的接口实际IP地址分别为： 172.16.101.253；SW2的vlanif200的接口实际IP地址分别为： 192.168.200.252。
二、实验需求
1、由于网络中VLAN较多，并且存在二层环路因此使用MSTP实现环路避免，同时建立负载分担。要求vlan101的流量主走PC1-LSW1-SW1这一侧链路，vlan200的流量主走PC2-LSW1-SW2这一侧链路；
2、为了提高网络的网关层冗余能力，在SW1及SW2的vlanif101、 vlanif200、上部署VRRP，一共2组。
三、实现步骤及配置
接入LSW1的调整如下:
sysname LSW1
#在LSW1上创建VLAN，并将接口加入相应的VLAN
vlan batch 101 200
#安装HXSW的接口信息
interface Ethernet0/0/1
description to PC1
port link-type access
port default vlan 200
#
interface Ethernet0/0/2
description to PC2
port link-type access
port default vlan 101
#
interface GigabitEthernet0/0/1
description to SW1G0/0/0
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 101 200
#
interface GigabitEthernet0/0/2
description to SW2G0/0/0
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 101 200
#配置MSTP，将vlan101映射到实例1，将vlan200映射到实例2
#在LSW1上，MSTP实例1及实例2的优先级保持默认32768
stp enable
#
stp mode mstp
#
stp region-configuration
region-name huawei
instance 1 vlan 101
instance 2 vlan 200
active region-configuration
#
SW1的配备如下:
#
sysname SW1
#
vlan batch 101 200 255
#
dhcp enable
#
interface GigabitEthernet0/0/1
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 101 200
#
interface GigabitEthernet0/0/21
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 101 200
#
interface GigabitEthernet0/0/24
description to ISPG0/0/1
port link-type access
port default vlan 255
#
#配置MSTP，将vlan101映射到实例1，将vlan200映射到实例2
#将SW1的MSTP设置为实例1的主根，实例2的次根
#
stp enable
#
stp mode mstp
#
stp region-configuration
region-name huawei
instance 1 vlan 101
instance 2 vlan 200
active region-configuration
#
stp instance 1 root primary
stp instance 2 root secondary
#部署vlanif101、vlanif200，分别加入VRRP组101,200,
#其中SW1为VRRP组101的Master，为组200的Backup
#
interface Vlanif101
ip address 172.16.101.252 255.255.255.0
vrrp vrid 101 virtual-ip 172.16.101.254
vrrp vrid 101 priority 120
vrrp vrid 101 track interface GigabitEthernet0/0/24 reduced 35
#
interface Vlanif200
ip address 192.168.200.253 255.255.255.0
vrrp vrid 200 virtual-ip 192.168.200.254
#
interface Vlanif255
ip address 10.10.255.1 255.255.255.252
#部署DHCP
ip pool vlan101
gateway-list 172.16.101.254
network 172.16.101.0 mask 255.255.255.0
lease day 3 hour 12 minute 0
dns-list 8.8.8.8 114.114.114.114
quit
#
ip pool vlan200
gateway-list 192.168.200.254
network 192.168.200.0 mask 255.255.255.0
excluded-ip-address 192.168.200.230 192.168.200.253
lease day 3 hour 12 minute 0
dns-list 8.8.8.8 114.114.114.114
#
interface Vlanif101
dhcp select global
#
interface Vlanif200
dhcp select global
#
#配置默认路由
ip route-static 0.0.0.0 0.0.0.0 10.10.255.2
#
SW2的配置如下:
#
sysname SW2
#
vlan batch 101 200 254
#
interface GigabitEthernet0/0/1
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 101 200
#
interface GigabitEthernet0/0/21
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 101 200
#
interface GigabitEthernet0/0/24
description to ISPG0/0/1
port link-type access
port default vlan 254
#
#配置MSTP，将vlan101映射到实例1，将vlan200映射到实例2
#将SW1的MSTP设置为实例1的主根，实例2的次根
#
stp enable
#
stp mode mstp
#
stp region-configuration
region-name huawei
instance 1 vlan 101
instance 2 vlan 200
active region-configuration
#
stp instance 1 root secondary
stp instance 2 root primary
#配置vlanif101、vlanif200，分别加入VRRP组101,200
#其中SW1为VRRP组101的Backup，为组200的Master
#
interface Vlanif101
ip address 172.16.101.253 255.255.255.0
vrrp vrid 101 virtual-ip 172.16.101.254
vrrp vrid 101 track interface GigabitEthernet0/0/24 reduced 35
#
interface Vlanif200
ip address 192.168.200.252 255.255.255.0
vrrp vrid 200 virtual-ip 192.168.200.254
vrrp vrid 200 priority 120
vrrp vrid 200 track interface GigabitEthernet0/0/24 reduced 35
#
interface Vlanif254
ip address 10.10.254.1 255.255.255.252
#配置DHCP
ip pool vlan101
gateway-list 172.16.101.254
network 172.16.101.0 mask 255.255.255.0
lease day 3 hour 12 minute 0
dns-list 8.8.8.8 114.114.114.114
quit
#
ip pool vlan200
gateway-list 192.168.200.254
network 192.168.200.0 mask 255.255.255.0
excluded-ip-address 192.168.200.230 192.168.200.253
lease day 3 hour 12 minute 0
dns-list 8.8.8.8 114.114.114.114
#
interface Vlanif101
dhcp select global
#
interface Vlanif200
dhcp select global
#
#配置默认路由
ip route-static 0.0.0.0 0.0.0.0 10.10.254.2
#
ISP路由器：
#
sysname ISP
#
interface GigabitEthernet0/0/1
ip address 10.10.255.2 255.255.255.252
#
interface GigabitEthernet0/0/2
ip address 10.10.254.2 255.255.255.252
#
interface LoopBack0
ip address 6.6.6.6 255.255.255.255
#
ip route-static 0.0.0.0 0.0.0.0 10.10.255.1
ip route-static 0.0.0.0 0.0.0.0 10.10.254.1
#
完成配置后，各VLAN的用户都能够ping通6.6.6.6：
在LSW1上看看：
我们看到，MSTP实例1中被Block掉的端口是GE0/0/2口；MSTP实例2中被Block掉的端口是GE0/0/1，符合需求。再去SW1上看看VRRP组的状态：
查看dhc已经租用的IP
<SW1>dis ip pool name vlan101 used
dis ip pool name vlan101 [all | conflict | expired | used]
conflict:可以查看地址池中发生冲突的IPv4地址信息。
Expired:可以查看地址池中过期的IPv4地址信息。
Used:能够查看地址池中已使用的IPv4地址信息。
