TE主要協(xié)議技術(shù)注意事項(xiàng)

1、TE 考點(diǎn)整理一 . 排錯(cuò)方法1. 分層2. 分塊3. 分段4. 替換二 . 考點(diǎn)整理1. PPP （CHAP認(rèn)證） + Mp捆綁R1display interface Serial 0/2/2Serial0/2/2 current state: UP Line protocol current state: UPDescription: Serial0/2/2 InterfaceThe Maximum Transmit Unit is 1500, Hold timer is 10(sec) Internet Address is 10.1.12.10/24 PrimaryLink layer

2、 protocol is PPP LCP opened, IPCP openedOutput queue : (Urgent queuing : Size/Length/Discards) 0/50/0Output queue : (Protocol queuing : Size/Length/Discards) 0/500/0 Output queue : (FIFO queuing : Size/Length/Discards) 0/75/0Interface is V35display interface s0/2/2Serial0/2/2 current state: UP Line

3、protocol current state: UPDescription: Serial0/2/2 InterfaceThe Maximum Transmit Unit is 1500, Hold timer is 10(sec) Internet protocol processing : disabledLink layer protocol is PPP LCP opened, MP openedOutput queue : (Urgent queuing : Size/Length/Discards) 0/50/0Output queue : (Protocol queuing :

4、Size/Length/Discards) 0/500/0 Output queue : (FIFO queuing : Size/Length/Discards) 0/75/0Interface is V35display interface Mp-group 1Mp-group1 current state: UP 1 / 27Line protocol current state: UPDescription: Mp-group1 InterfaceThe Maximum Transmit Unit is 1500, Hold timer is 10(sec) Internet Addr

5、ess is 10.1.12.1/30 PrimaryLink layer protocol is PPP LCP opened, MP opened, IPCP openedPhysical is MP, baudrate: 128000 bpsOutput queue : (Urgent queuing : Size/Length/Discards) 0/50/0Output queue : (Protocol queuing : Size/Length/Discards) 0/500/0 Output queue : (FIFO queuing : Size/Length/Discard

6、s) 0/75/0圖為PPP協(xié)商過程LCPAUTHNCPCHAP:1. 被驗(yàn)證方使用本地用戶及密碼進(jìn)行驗(yàn)證2. 被驗(yàn)證方使用默認(rèn)CHAP密碼進(jìn)行驗(yàn)證R1display current-configuration configuration luser local-user R2 pass sim h3cte12345 service-type ppp2. VLAN （access trunk）Access:只允許缺省VLAN通過，僅接收和發(fā)送一個(gè)VLAN的數(shù)據(jù)幀一般用于連接用戶設(shè)備Trunk:允許多個(gè)VLAN通過，可以接收和發(fā)送多個(gè)VLAN的數(shù)據(jù)幀缺省VLAN的以太網(wǎng)幀不帶標(biāo)簽一般用于交換機(jī)之

7、間連接單臺(tái)交換機(jī) 不同vlan 不能夠直接通訊:Vlan 間路由（1.單臂路由（路由器+L2SW） 2. Vlan路由（L3SW+L2SW）1. 單臂路由L2SW：1. 創(chuàng)建vlan信息2. 將用戶接口加入vlan3. SW上行接口放行相應(yīng)vlan業(yè)務(wù) R：1. 創(chuàng)建子接口，封裝802.1Q(dot1q)trunk協(xié)議，并且子接口配置所屬vlan2. 配置IP地址2. Vlan路由1. L2 SW 和 L3 SW 保證vlan信息同步 (注意事項(xiàng))2. L2 SW:1. 創(chuàng)建vlan信息2. 將用戶接口加入vlan3. SW上行接口放行相應(yīng)vlan業(yè)務(wù) L3 SW:1. 創(chuàng)建vlan信息2.

8、在連接L2SW的接口上封裝trunk協(xié)議，放行相關(guān)vlan信息3. 創(chuàng)建SVI接口（vlan接口-配置ip地址：vlan用戶網(wǎng)關(guān)地址）SW1display port trunk Interface PVID VLAN passingEth0/4/1 1 1, 10, 20SW2display current-configuration interface Vlan-interface #interface Vlan-interface10 ip address 192.168.1.100 255.255.255.0#interface Vlan-interface20 ip address 1

9、72.16.1.100 255.255.255.03. MSTPSTP: （Spanning Tree Protocol，生成樹協(xié)議）是用于在局域網(wǎng)中消除數(shù)據(jù)鏈路層物理環(huán)路的協(xié)議。STP是指IEEE 802.1DRSTP是指IEEE 802.1WMSTP是指IEEE 802.1S作用：. 通過阻斷冗余鏈路來消除橋接網(wǎng)絡(luò)中可能存在的路徑回環(huán)當(dāng)前路徑發(fā)生故障時(shí)，激活冗余備份鏈路，恢復(fù)網(wǎng)絡(luò)連通性工作原理: 通過在橋之間交換BPDU（Bridge Protocol Data Unit，橋協(xié)議數(shù)據(jù)單元），來保證設(shè)備完成生成樹的計(jì)算過程 。1. 根橋的選舉對比 橋ID(優(yōu)先級(jí)+MAC) 優(yōu)先級(jí)： 0-61

10、440 手動(dòng)修改：4096的倍數(shù)修改橋ID小者 為 根橋！2. 端口角色的確定 （1） 根橋上的端口-指定端口（轉(zhuǎn)發(fā)狀態(tài)）(2) 每臺(tái)非根橋必須存在一個(gè)（根端口）（：非根橋上 根路徑開銷最小的接口）E：200 2E：180 G：202G：18(3) 每個(gè)物理鏈路必須存在一臺(tái) （指定橋）（:根路徑開銷最小的橋），指定橋上的接口 為指定接口（轉(zhuǎn)發(fā)狀態(tài)）(4) 不是指定接口和根接口的端口為阻塞接口MSTP:l MSTP（Multiple Spanning Tree Protocol，多生成樹協(xié)議）l 將多個(gè)VLAN捆綁到一個(gè)實(shí)例，每個(gè)實(shí)例生成獨(dú)立的生成樹l 在多條Trunk鏈路上實(shí)現(xiàn)VLAN級(jí)負(fù)載分

11、擔(dān)MSTP 配置步驟：1. 保證SW vlan信息同步2. SW之間物理鏈路封裝trunk，放行相關(guān)vlan業(yè)務(wù)3. 啟用STP技術(shù)（MSTP模式）配置MST域（1）域名（2）修正級(jí)別 0 (3) 實(shí)例對應(yīng)vlan關(guān)系（4）激活4. 指定哪臺(tái)設(shè)備為對應(yīng)實(shí)例的主根和被根SW2display stp region-configuration Oper configuration Format selector :0 Region name :h3c Revision level :0 Instance Vlans Mapped 0 1 to 9, 11 to 19, 21 to 4094 1 10

12、 2 20SW1display stp brief MSTID Port Role STP State Protection 0 Ethernet0/4/1 DESI FORWARDING NONE 0 Ethernet0/4/2 DESI FORWARDING NONE 1 Ethernet0/4/1 ROOT FORWARDING NONE 1 Ethernet0/4/2 ALTE DISCARDING NONE 2 Ethernet0/4/1 ALTE DISCARDING NONE 2 Ethernet0/4/2 ROOT FORWARDING NONESW1display stp i

13、nstance 1-MSTI 1 Global Info-MSTI Bridge ID :32768.00e0-fc00-0600MSTI RegRoot/IRPC :0.00e0-fc00-0700 / 200MSTI RootPortId :128.2Master Bridge :32768.00e0-fc00-0600Cost to Master :0TC received :14 -Port2(Ethernet0/4/1)FORWARDING- Port Role :Root Port Port Priority :128 Port Cost(Legacy) :Config=auto

14、/ Active=200 Desg. Bridge/Port :0.00e0-fc00-0700 / 128.2 Num of Vlans Mapped :1 Port Times :RemHops 20 -Port3(Ethernet0/4/2)DISCARDING- Port Role :Alternate Port Port Priority :128 Port Cost(Legacy) :Config=auto / Active=200 Desg. Bridge/Port :4096.00e0-fc00-0800 / 128.3 Num of Vlans Mapped :1 Port

15、Times :RemHops 19STP : BPDU-Protection 接入端口設(shè)置為邊緣端口后，如果接收到配置消息，系統(tǒng)自動(dòng)將這些端口設(shè)置為非邊緣端口，重新計(jì)算生成樹，導(dǎo)致網(wǎng)絡(luò)震蕩。 交換機(jī)開啟了BPDU保護(hù)功能后，如果接收到BPDU，則交換機(jī)關(guān)閉此端口，以防止可能產(chǎn)生的網(wǎng)絡(luò)震蕩。而被關(guān)閉的端口只能由網(wǎng)絡(luò)管理人員恢復(fù)。S3600-01dis stp down-port Down Port ReasonEthernet1/0/2 BPDU-Protection3.5 smart-linkn Smart Link是一種針對雙上行組網(wǎng)的解決方案，實(shí)現(xiàn)了高效可靠的鏈路冗余備份和故障后的快速收斂

16、。n 一個(gè)Smart Link組，端口分別為主端口和副端口n 發(fā)送控制VLAN和接收控制VLAN ：當(dāng)鏈路出現(xiàn)故障時(shí)，用來發(fā)送flush消息報(bào)文的vlan，用來刷新網(wǎng)絡(luò)設(shè)備的MAC和ARP表信息。n 保護(hù)VLAN ：用戶的業(yè)務(wù)vlan 。l Smart Link組的保護(hù)VLAN是通過引用MSTP實(shí)例來實(shí)現(xiàn)的 注意事項(xiàng)：接收和發(fā)送flush消息報(bào)文的所有接口 STP特性必須關(guān)系配置步驟：1. 交換設(shè)備 保證vlan信息同步2. 配置鏈路聚合 （兩三層SW）3. 接口封裝trunk協(xié)議，放行相關(guān)業(yè)務(wù)vlan 和 控制vlan4. 在trunk類型的接口下關(guān)閉STP特性 5. 在trunk類型的接口

17、下配置接口允許接收和發(fā)送flush消息報(bào)文的所有控制vlan6. 在接入層交換機(jī)上 創(chuàng)建MST域（配置實(shí)例與vlan映射關(guān)系）7. 在接入層交換機(jī)上啟用smart link 組（1：保護(hù)vlan與實(shí)例的對應(yīng)關(guān)系2： 配置針對保護(hù)vlan對應(yīng)的控制vlan3： 將上行接口加入smart-link組，說明主備關(guān)系4： 開啟smart-link組搶占功能）SW1display stp region-configuration Oper configuration Format selector :0 Region name :000fe2000100 Revision level :0 Config

18、uration digest :0x9357ebb7a8d74dd5fef4f2bab50531aa Instance Vlans Mapped 0 1 to 9, 11 to 19, 21 to 4094 1 10 2 20SW1display smart-link group 1 Smart link group 1 information: Device ID: 000f-e200-0100 Preemption mode: ROLE Preemption delay: 1(s) Control VLAN: 100 Protected VLAN: Reference Instance 1

19、 Member Role State Flush-count Last-flush-time - Ethernet0/4/0 MASTER ACTIVE 3 10:48:42 2013/12/18 Ethernet0/4/1 SLAVE STANDBY 1 10:48:02 2013/12/184.鏈路聚合目的：增加帶寬、提高鏈路可靠性、負(fù)載分擔(dān)l 靜態(tài)聚合 雙方系統(tǒng)間不使用聚合協(xié)議來協(xié)商鏈路信息SW2display link-aggregation summary Aggregation Interface Type:BAGG - Bridge-Aggregation, RAGG - Rou

20、te-AggregationAggregation Mode: S - Static, D - DynamicLoadsharing Type: Shar - Loadsharing, NonS - Non-LoadsharingActor System ID: 0x8000, 000f-e200-0200AGG AGG Partner ID Select Unselect ShareInterface Mode Ports Ports Type-BAGG1 S none 2 0 NonSSW2display link-aggregation verbose Loadsharing Type:

21、 Shar - Loadsharing, NonS - Non-LoadsharingPort Status: S - Selected, U - UnselectedFlags: A - LACP_Activity, B - LACP_Timeout, C - Aggregation, D - Synchronization, E - Collecting, F - Distributing, G - Defaulted, H - ExpiredAggregation Interface: Bridge-Aggregation1Aggregation Mode: StaticLoadshar

22、ing Type: NonS Port Status Priority Oper-Key- Eth0/4/0 S 32768 1 Eth0/4/1 S 32768 1SW2display link-aggregation summary Aggregation Interface Type:BAGG - Bridge-Aggregation, RAGG - Route-AggregationAggregation Mode: S - Static, D - DynamicLoadsharing Type: Shar - Loadsharing, NonS - Non-LoadsharingAc

23、tor System ID: 0x8000, 000f-e200-0200AGG AGG Partner ID Select Unselect ShareInterface Mode Ports Ports Type-BAGG1 S none 1 1 NonS SW2display link-aggregation verbose Loadsharing Type: Shar - Loadsharing, NonS - Non-LoadsharingPort Status: S - Selected, U - UnselectedFlags: A - LACP_Activity, B - LA

24、CP_Timeout, C - Aggregation, D - Synchronization, E - Collecting, F - Distributing, G - Defaulted, H - ExpiredAggregation Interface: Bridge-Aggregation1Aggregation Mode: StaticLoadsharing Type: NonS Port Status Priority Oper-Key- Eth0/4/0 U 32768 1 Eth0/4/1 S 32768 1SW2display interface briefThe bri

25、ef information of interface(s) under route mode:Link: ADM - administratively down; Stby - standbyProtocol: (s) - spoofingInterface Link Protocol Main IP DescriptionGE0/0/3 DOWN DOWN -NULL0 UP UP(s) -The brief information of interface(s) under bridge mode:Link: ADM - administratively down; Stby - sta

26、ndbySpeed or Duplex: (a)/A - auto; H - half; F - fullType: A - access; T - trunk; H - hybridInterface Link Speed Duplex Type PVID DescriptionBAGG1 UP 100M(a) F(a) A 1Eth0/4/0 ADM 100M A A 1Eth0/4/1 UP 100M F(a) A 1Eth0/4/2 DOWN 100M A A 1Eth0/4/3 DOWN 100M A A 15.VRRPl VRRP(Virtual Router Redundancy

27、 Protocol , 虛擬路由器冗余協(xié)議)是一種容錯(cuò)協(xié)議，是由一臺(tái)以上的路由器或三層交換機(jī)虛擬成一臺(tái)路由器，而增加網(wǎng)關(guān)可靠性的協(xié)議。l 設(shè)備Log日志里出現(xiàn)VRRP配置錯(cuò)誤的信息l 同一個(gè)VRRP組內(nèi)出現(xiàn)多個(gè)主設(shè)備；配置步驟：1.創(chuàng)建 vlan接口 配置ip地址 2.將相同vlan接口加入同一VRRP備份組 配置虛擬ip地址（用來左右用戶網(wǎng)關(guān)地址）3.通過在vlan接口下配置vrrp優(yōu)先級(jí)確定主備網(wǎng)關(guān)4.主網(wǎng)關(guān)處配置偵測上行鏈路5.配置vrrp驗(yàn)證Authentication failed in IPv4 virtual router 1 (configured on Vlan-interf

28、ace10): authentication type mismatchIPv4 virtual router 1 (configured on Vlan-interface10) detected a VRRP configuration error: VIRTUAL IP ADDRESS ERRORThe IPv4 virtual router 1 (configured on Vlan-interface10) detected a VRRP configuration error: VIRTUAL IP ADDRESS COUNT ERROR.The IPv4 virtual rout

29、er 1 (configured on Vlan-interface10) detected a VRRP configuration error: ADVERTISEMENT INTERVAL ERROR.SW3display vrrp IPv4 Standby Information: Run Mode : Standard Run Method : Virtual MAC Total number of virtual routers : 2 Interface VRID State Run Adver Auth Virtual Pri Timer Type IP - Vlan10 1

30、Backup 100 50 Simple 192.168.1.254 Vlan20 2 Master 120 50 None 172.16.1.254SW3-Vlan-interface10display vrrp IPv4 Standby Information: Run Mode : Standard Run Method : Virtual MAC Total number of virtual routers : 2 Interface VRID State Run Adver Auth Virtual Pri Timer Type IP - Vlan10 1 Backup 100 5

31、0 Simple 192.168.1.254 Vlan20 2 Master 120 50 None 172.16.1.254 SW3display vrrp verbose IPv4 Standby Information: Run Mode : Standard Run Method : Virtual MAC Total number of virtual routers : 2 Interface Vlan-interface10 VRID : 1 Adver Timer : 50 Admin Status : Up State : Backup Config Pri : 100 Ru

32、nning Pri : 100 Preempt Mode : Yes Delay Time : 0 Auth Type : Simple Key : h3c Virtual IP : 192.168.1.254 Master IP : 192.168.1.252 Interface Vlan-interface20 VRID : 2 Adver Timer : 50 Admin Status : Up State : Master Config Pri : 120 Running Pri : 120 Preempt Mode : Yes Delay Time : 0 Auth Type : N

33、one Virtual IP : 172.16.1.254 Virtual MAC : 0000-5e00-0102 Master IP : 172.16.1.2536.靜態(tài)路由l 配置時(shí)須注意： 所有路由器上都必須配置到所有網(wǎng)段的路由 下一跳地址須為直連鏈路上可達(dá)的地址l 靜態(tài)黑洞路由：可以消除環(huán)路7.RIP靜默端口： 使用在rip協(xié)議中-接口只收不發(fā)rip消息報(bào)文l 接口是否正確啟動(dòng)RIP協(xié)議 Network命令包含兩層含義- 在接口地址包含在network主網(wǎng)絡(luò)內(nèi)的三層接口上使能RIP- 在RIP更新中發(fā)布相應(yīng)的路由l Filter-policy是否設(shè)置正確 Filter-policy命

34、令設(shè)置不當(dāng)，拒絕了相應(yīng)路由加入路由表注意事項(xiàng)：過濾策略在調(diào)用 訪問控制列表和地址前綴列表時(shí) 默認(rèn)拒絕所有！l ACL配置是否拒絕了路由更新報(bào)文l 包過濾防火墻l RIP版本1不連續(xù)子網(wǎng)問題 RIPv1是有類路由協(xié)議，在不連續(xù)子網(wǎng)的情況下，會(huì)導(dǎo)致子網(wǎng)路由缺失。 RT1display rip 1 Public VPN-instance name : RIP process : 1 RIP version : 2 Preference : 100 Checkzero : Enabled Default-cost : 0 Summary : Disabled Hostroutes : Enabled

35、Maximum number of balanced paths : 6 Update time : 30 sec(s) Timeout time : 180 sec(s) Suppress time : 120 sec(s) Garbage-collect time : 120 sec(s) update output delay : 20(ms) output count : 3 TRIP retransmit time : 5 sec(s) TRIP response packets retransmit count : 36 Silent interfaces : None Defau

36、lt routes : Disabled Verify-source : Enabled Networks : 192.168.1.0 10.0.0.0 Configured peers : None Triggered updates sent : 2 Number of routes changes : 4 Number of replies to queries : 9RT1display cu conf rip #rip 1 undo summary version 2 network 10.0.0.0 network 192.168.1.0*Dec 18 16:11:39:703 2

37、013 RT2 RM/6/RMDEBUG: RIP 1 : Receive response from 10.1.12.1 on GigabitEthernet0/0/0*Dec 18 16:11:39:703 2013 RT2 RM/6/RMDEBUG: Packet : vers 2, cmd response, length 64*Dec 18 16:11:39:703 2013 RT2 RM/6/RMDEBUG: authentication-mode simple: h3c*Dec 18 16:11:39:703 2013 RT2 RM/6/RMDEBUG: AFI 2, dest

38、192.168.1.253/255.255.255.255, nexthop 0.0.0.0, cost 1, tag 0*Dec 18 16:11:39:703 2013 RT2 RM/6/RMDEBUG: AFI 2, dest 192.168.1.254/255.255.255.255, nexthop 0.0.0.0, cost 1, tag 0*Dec 18 16:11:39:703 2013 RT2 RM/3/RMDEBUG: RIP 1 : Ignoring this packet. Authentication validation failed.*Dec 4 20:03:55

39、:484 2008 RTB RM/6/RMDEBUG: RIP 1 : Receive response from 10.10.10.1 on Ethernet0/1/0*Dec 4 20:03:55:500 2008 RTB RM/3/RMDEBUG: RIP 1 : Ignoring this packet. Version is not configured.*Dec 18 16:36:46:547 2013 RT1 RM/6/RMDEBUG: RIP 1 : Receive response from 10.1.12.2 on GigabitEthernet0/0/0*Dec 18 1

40、6:36:46:547 2013 RT1 RM/6/RMDEBUG: Packet : vers 2, cmd response, length 64*Dec 18 16:36:46:547 2013 RT1 RM/6/RMDEBUG: AFI 2, dest 10.1.23.0/255.255.255.252, nexthop 0.0.0.0, cost 1, tag 0*Dec 18 16:36:46:547 2013 RT1 RM/6/RMDEBUG: AFI 2, dest 172.16.0.0/255.255.0.0, nexthop 0.0.0.0, cost 15, tag 0*

41、Dec 18 16:36:46:547 2013 RT1 RM/6/RMDEBUG: AFI 2, dest 192.168.1.0/255.255.255.0, nexthop 0.0.0.0, cost 1, tag 0*Dec 18 16:36:46:547 2013 RT1 RM/3/RMDEBUG: RIP 1 : Ignoring route 192.168.1.0/255.255.255.0. Its major net addr is same as the local interfaces.8.OSPF靜默端口： 使用在ospf協(xié)議中-接口不收不發(fā)ospf消息報(bào)文l Rout

42、er ID的選擇 人為手動(dòng)指定 如無手動(dòng)指定，系統(tǒng)優(yōu)選最大的loopback，無loopback，其次為最大的接口地址 Router id 相同，則鄰居關(guān)系無法建立RT1display ospf error OSPF Process 1 with Router ID 1.1.1.1 OSPF Packet Error Statistics 34 : OSPF Router ID confusion 0 : OSPF bad packet 0 : OSPF bad version 0 : OSPF bad checksum 0 : OSPF bad area ID 0 : OSPF drop o

43、n unnumbered interface 0 : OSPF bad virtual link 0 : OSPF bad authentication type 0 : OSPF bad authentication key 0 : OSPF packet too small 0 : OSPF Neighbor state low 0 : OSPF transmit error 3 : OSPF interface down 0 : OSPF unknown neighbor 0 : HELLO: Netmask mismatch 0 : HELLO: Hello timer mismatc

44、h 0 : HELLO: Dead timer mismatch 0 : HELLO: Extern option mismatch 0 : HELLO: Neighbor unknown 38 : DD: MTU option mismatch 0 : DD: Unknown LSA type 0 : DD: Extern option mismatch 0 : LS ACK: Bad ack 0 : LS ACK: Unknown LSA type 0 : LS REQ: Empty request 0 : LS REQ: Bad request 0 : LS UPD: LSA check

45、sum bad 0 : LS UPD: Received less recent LSA 0 : LS UPD: Unknown LSA type 如子網(wǎng)掩碼不同，則鄰居建立失敗 (物理直連 廣播類型的鏈路 配置地址需要在同一網(wǎng)段中)*Dec 19 10:05:24:094 2013 RT2 RM/6/RMDEBUG: OSPF 1: RECV Packet.*Dec 19 10:05:24:094 2013 RT2 RM/6/RMDEBUG: Source Address: 10.1.12.1 *Dec 19 10:05:24:094 2013 RT2 RM/6/RMDEBUG: Destination Address: 224.0.0.5 *Dec 19 10:05:24:094 2013 RT2 RM/6/RMDEBUG: Ver# 2, Type: 1, Length: 44.*Dec 19 10:05:24:094 2013 RT2 RM/6/RMDEBUG: Router: 1.1.1.1, Area: 0.0.0.0, Checksum: 58522.*Dec 19 10:05:24:094 2013 RT2 RM/