第一步：配置R2，R4和R5
R2上的配置：
interface Loopback0
ip address 2.2.2.2 255.255.255.0
!
interface FastEthernet0/0
ip address 12.0.0.2 255.255.255.0
!
interface FastEthernet1/0
ip address 23.0.0.2 255.255.255.0
!
router rip
version 2
network 2.0.0.0
network 12.0.0.0
network 23.0.0.0
no auto-summary

R4上的配置：
interface FastEthernet0/0
ip address 192.168.1.4 255.255.255.0
ip default-gateway 192.168.1.254

R5上的配置：
interface FastEthernet0/0
ip address 192.168.1.5 255.255.255.0
ip default-gateway 192.168.1.253

第二步：配置R1
track 100 interface FastEthernet0/0 line-protocol
//通过track 后面为组号，接着为要追踪的接口

interface FastEthernet0/0
ip address 12.0.0.1 255.255.255.0
!
interface FastEthernet0/1
ip address 192.168.1.1 255.255.255.0
no ip redirects
no ip proxy-arp
//上面两句为关闭重定向，和关闭代理arp

//我们在下面定义了两个组
vrrp 1 ip 192.168.1.254
vrrp 1 priority 105
vrrp 1 track 100
//这里和hsrp不同的是，vrrp要在全局下先定义，然后在这里调用，不然调用不起来
vrrp 2 ip 192.168.1.253
!
router rip
version 2
network 12.0.0.0
network 192.168.1.0
no auto-summary

第三步：配置R3
track 200 interface FastEthernet0/0 line-protocol
!
!
!
!
!
interface FastEthernet0/0
ip address 23.0.0.3 255.255.255.0
shutdown
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 192.168.1.3 255.255.255.0
no ip redirects
no ip proxy-arp
duplex auto
speed auto
vrrp 1 ip 192.168.1.254
vrrp 2 ip 192.168.1.253
vrrp 2 priority 105
vrrp 2 track 200
!
router rip
version 2
network 23.0.0.0
network 192.168.1.0
no auto-summary

第四步：调试

当网络正常时：在R1和R3上的case
R1#sh vrrp
FastEthernet0/1 - Group 1
State is Master
Virtual IP address is 192.168.1.254
Virtual MAC address is 0000.5e00.0101
Advertisement interval is 1.000 sec
Preemption enabled
Priority is 105
Track object 100 state Up decrement 10
Master Router is 192.168.1.1 (local), priority is 105
Master Advertisement interval is 1.000 sec
Master Down interval is 3.589 sec

FastEthernet0/1 - Group 2
State is Backup
Virtual IP address is 192.168.1.253
Virtual MAC address is 0000.5e00.0102
Advertisement interval is 1.000 sec
Preemption enabled
Priority is 100
Master Router is 192.168.1.3, priority is 105
Master Advertisement interval is 1.000 sec
Master Down interval is 3.609 sec (expires in 3.009 sec)

R3#sh vrrp
FastEthernet0/1 - Group 1
State is Backup
Virtual IP address is 192.168.1.254
Virtual MAC address is 0000.5e00.0101
Advertisement interval is 1.000 sec
Preemption enabled
Priority is 100
Master Router is 192.168.1.1, priority is 105
Master Advertisement interval is 1.000 sec
Master Down interval is 3.609 sec (expires in 2.689 sec)

FastEthernet0/1 - Group 2
State is Master
Virtual IP address is 192.168.1.253
Virtual MAC address is 0000.5e00.0102
Advertisement interval is 1.000 sec
Preemption enabled
Priority is 105
Track object 200 state Up decrement 10
Master Router is 192.168.1.3 (local), priority is 105
Master Advertisement interval is 1.000 sec
Master Down interval is 3.589 sec

第五步：一个一个测试
先从R4来：
R1的外网接口Down 和up
在R1、R3和R4上出现的logging
R1上出现下列logging
R1(config)#int f0/0
R1(config-if)#sh
Apr 24 00:06:49.927: %VRRP-6-STATECHANGE: Fa0/1 Grp 1 state Master -> Backup
R1(config-if)#no sh

Apr 24 00:06:57.083: %VRRP-6-STATECHANGE: Fa0/1 Grp 1 state Backup -> Master

R1#sh vrrp
FastEthernet0/1 - Group 1
State is Backup
Virtual IP address is 192.168.1.254
Virtual MAC address is 0000.5e00.0101
Advertisement interval is 1.000 sec
Preemption enabled
Priority is 95 (cfgd 105) //优先级降到了95
Track object 100 state Down decrement 10
Master Router is 192.168.1.3, priority is 100
Master Advertisement interval is 1.000 sec
Master Down interval is 3.589 sec (expires in 2.669 sec)

FastEthernet0/1 - Group 2
State is Backup
Virtual IP address is 192.168.1.253
Virtual MAC address is 0000.5e00.0102
Advertisement interval is 1.000 sec
Preemption enabled
Priority is 100
Master Router is 192.168.1.3, priority is 105
Master Advertisement interval is 1.000 sec
Master Down interval is 3.609 sec (expires in 3.125 sec)

R3上出现：
#
Apr 24 00:06:29.779: %VRRP-6-STATECHANGE: Fa0/1 Grp 1 state Master -> Backup
Apr 24 00:06:49.635: %VRRP-6-STATECHANGE: Fa0/1 Grp 1 state Backup -> Master
*Apr 24 00:06:56.935: %VRRP-6-STATECHANGE: Fa0/1 Grp 1 state Master -> Backup

R4上出现：
R4-pc4#ping 2.2.2.2 re 33333

Type escape sequence to abort.
Sending 33333, 100-byte ICMP Echos to 2.2.2.2, timeout is 2 seconds:
.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!U.U.
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.
Success rate is 96 percent (188/195), round-trip min/avg/max = 44/85/296 ms
//这里的切换更快，因为hello包为1s一个

在R5上测试，把R3的接口down后up，R5会出现下列所示
R5-pc5# ping 2.2.2.2 re 222222

Type escape sequence to abort.
Sending 222222, 100-byte ICMP Echos to 2.2.2.2, timeout is 2 seconds:
!!!!!!!!!!!!!!!!!!!!!!!!!!!!U.U.....!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!.
Success rate is 95 percent (217/227), round-trip min/avg/max = 44/85/1128 ms
R5-pc5#

R3上show vrrp
R3#sh vrrp
FastEthernet0/1 - Group 1
State is Backup
Virtual IP address is 192.168.1.254
Virtual MAC address is 0000.5e00.0101
Advertisement interval is 1.000 sec
Preemption enabled
Priority is 100
Master Router is 192.168.1.1, priority is 105
Master Advertisement interval is 1.000 sec
Master Down interval is 3.609 sec (expires in 3.353 sec)

FastEthernet0/1 - Group 2
State is Backup
Virtual IP address is 192.168.1.253
Virtual MAC address is 0000.5e00.0102
Advertisement interval is 1.000 sec
Preemption enabled
Priority is 95 (cfgd 105)
Track object 200 state Down decrement 10
Master Router is 192.168.1.1, priority is 100
Master Advertisement interval is 1.000 sec
Master Down interval is 3.589 sec (expires in 2.941 sec)

实验过程：

第一步：在 SW1 上配置 VTP
sw1#vlan da
sw1(vlan)#vtp domain ccie
Changing VTP domain name from ccna to ccie
sw1(vlan)#vtp s
sw1(vlan)#vtp server
Device mode already VTP SERVER.
sw1(vlan)#exit
APPLY completed.
Exiting....
第二步：在 R2 上配置 VTP

sw2(vlan)#vtp domain ccie
Changing VTP domain name from ccna to ccie
sw2(vlan)#vtp c
sw2(vlan)#vtp client
Setting device to VTP CLIENT mode.
sw2(vlan)#exit
In CLIENT state, no apply attempted.
Exiting....
第三步：在 SW1 上配置 Trunk 中继接口

Enter configuration commands, one per line. End with CNTL/Z.
sw1(config)#int f0/23
sw1(config-if)#switchport mo tr
// 配置交换机端口为 trunk
sw1(config-if)#sw tr en dot1q
// 封装类型为 802.1q
sw1(config-if)#sw tr all vlan all
// 允许通过所有 vlan

第四步：在 SW2 上配置 trunk 中继接口
sw2#conf t
Enter configuration commands, one per line. End with CNTL/Z.
sw2(config)#int f0/23
sw2(config-if)#sw mo trunk
sw2(config-if)#switchport trunk encapsulation dot1q
第五步：在 SW1 上创建 vlan
sw1(vlan)#vlan 4 name 4
VLAN 4 modified:
Name: 4
sw1(vlan)#vlan 5 name 5
VLAN 5 modified:
Name: 5
sw1(vlan)#
第六步：在 SW1 上验证帧中继接口

sw1#sh int f0/23 sw
Name: Fa0/23
Switchport: Enabled
Administrative Mode: trunk
Operational Mode: trunk
Administrative Trunking Encapsulation: dot1q
Operational Trunking Encapsulation: dot1q
Negotiation of Trunking: On
Access Mode VLAN: 1 (default)
Trunking Native Mode VLAN: 1 (default)
Administrative Native VLAN tagging: enabled
第七步：到帧中继上查看是否学习到

sw2# sh vlan

VLAN Name Status Ports

---

1 default active Fa0/1, Fa0/2, Fa0/3, Fa0/4
Fa0/5, Fa0/6, Fa0/7, Fa0/8
Fa0/9, Fa0/10, Fa0/11, Fa0/12
Fa0/13, Fa0/14, Fa0/15, Fa0/16
Fa0/17, Fa0/18, Fa0/19, Fa0/20
Fa0/21, Fa0/22, Gi0/1, Gi0/2
4 4 active
5 5 active
6 VLAN0006 active
50 VLAN0050 active Fa0/12
1002 fddi-default act/unsup
1003 token-ring-default act/unsup
1004 fddinet-default act/unsup
1005 trnet-default act/unsup

VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2

---

1 enet 100001 1500 - - - - - 0 0
4 enet 100004 1500 - - - - - 0 0
5 enet 100005 1500 - - - - - 0 0

VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2

---

6 enet 100006 1500 - - - - - 0 0
50 enet 100050 1500 - - - - - 0 0
1002 fddi 101002 1500 - - - - - 0 0
1003 tr 101003 1500 - - - - srb 0 0
1004 fdnet 101004 1500 - - - ieee - 0 0
1005 trnet 101005 1500 - - - ibm - 0 0

Remote SPAN VLANs

Primary Secondary Type Ports

---

实验过程：

第一步：接通电源，长按 mode 键，等 led 灯不闪时，会出现下列字符
he system has been interrupted prior to initializing the
flash filesystem. The following commands will initialize
the flash filesystem, and finish loading the operating
system software:

flash_init
boot

第二步：加载 flash
switch: flash_init
Initializing Flash...
flashfs[0]: 8 files, 1 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
flashfs[0]: Total bytes: 15998976
flashfs[0]: Bytes used: 7145984
flashfs[0]: Bytes available: 8852992
flashfs[0]: flashfs fsck took 16 seconds.
...done Initializing Flash.
Boot Sector Filesystem (bs:) installed, fsid: 3

第三步：查看有没有 config.text 文件
switch: dir flash:
unable to stat ash:/: permission denied
switch: dir flash:
Directory of flash:/

2 -rwx 7134080 <date> 3550.bin
3 -rwx 916 <date> vlan.dat
4 -rwx 3244 <date> n
5 -rwx 2209 <date> statr
6 -rwx 0 <date> system_env_vars
7 -rwx 0 <date> env_vars
8 -rwx 24 <date> private-config.text
10 -rwx 2188 <date> config.text

8852992 bytes available (7145984 bytes used)
第四步：修改 config.text 名称。

switch: rename flash:config.text flash:config.qq
switch: dir flash:
Directory of flash:/

2 -rwx 7134080 <date> 3550.bin
3 -rwx 916 <date> vlan.dat
4 -rwx 3244 <date> n
5 -rwx 2209 <date> statr
6 -rwx 0 <date> system_env_vars
7 -rwx 0 <date> env_vars
8 -rwx 24 <date> private-config.text
10 -rwx 2188 <date> config.qq

8852992 bytes available (7145984 bytes used)

第五步：重新引导

switch: boot
Loading "flash:/3550.bin"...####################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################
[Connection to sw2 closed by foreign host]
lab>
00:02:09: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/24, changed state to up
Switch#rename flash:config.qq flash:config.text
Destination filename [config.text]?
Switch#
第六步：把原来的名字改回来并加裁

switch: rename flash:config. qq flash:config. text
Switch#copy flash:config.text system:running-config
Destination filename [running-config]?
Failed to generate persistent self-signed certificate.
Secure server will use temporary self-signed certificate.

2188 bytes copied in 0.208 secs (10519 bytes/sec)
第七步：清除密码，配置相关并保存

下列示例说明了在 vlan 10 在配置 dhcp 监听，在这种情况下 dhcp 服务器连接在 e0/1 ，
在 dhcp 服务端配置信任，
而在客户端不配置信任。

第一步：在全局下开启 dhcp snooping

ip dhcp snooping
ip dhcp snooping information option

第二步：定义信任接口和为发防止 Dos*** 在非 DHCP 服务端限制流量

int e0/1
sw mo acc
sw acc vlan 10
ip dhcp snooping trust
int range e0/2 -23
ip dhcp snooping limit rate 100

第三步：将 DHCP snooping 应用在相关 VLAN

ip dhcp snooping vlan 10

实验过程：

第一步：配置 sw1 接口
sw1(config)#int ran f2/13 -14
sw1(config-if-range)#no sh
sw1(config-if-range)#sw mo trunk

第二步：配置 SW2 接口
sw2(config)#int range f2/13 -14
sw2(config-if-range)#sw mo trunk
sw2(config-if-range)#no sh

第三步：在交换机上查看 stp 的运行情况

sw1# sh spanning-tree

VLAN1 is executing the ieee compatible Spanning Tree protocol
Bridge Identifier has priority 32768, address ccf8.0f24.0000
// 优先级，的 mac 地址
Configured hello time 2, max age 20, forward delay 15
We are the root of the spanning tree
// 在这个 stp 中我们为根桥
Topology change flag not set, detected flag not set
Number of topology changes 1 last change occurred 00:03:19 ago
from FastEthernet2/13
Times: hold 1, topology change 35, notification 2
hello 2, max age 20, forward delay 15
Timers: hello 1, topology change 0, notification 0, aging 0

Port 94 (FastEthernet2/13) of VLAN1 is forwarding
//f2/13 口在活动状态
Port path cost 19, Port priority 128, Port Identifier 128.94.
Designated root has priority 32768, address ccf8.0f24.0000
Designated bridge has priority 32768, address ccf8.0f24.0000
Designated port id is 128.94, designated path cost 0
Timers: message age 0, forward delay 0, hold 0
Number of transitions to forwarding state: 1
BPDU: sent 236, received 7

Port 95 (FastEthernet2/14) of VLAN1 is forwarding
// 此接口为活动状态
Port path cost 19, Port priority 128, Port Identifier 128.95.
Designated root has priority 32768, address ccf8.0f24.0000
Designated bridge has priority 32768, address ccf8.0f24.0000
Designated port id is 128.95, designated path cost 0
Timers: message age 0, forward delay 0, hold 0
Number of transitions to forwarding state: 1
BPDU: sent 241, received 14

w2#sh spanning-tree

VLAN1 is executing the ieee compatible Spanning Tree protocol
Bridge Identifier has priority 32768, address ccf9.0f28.0000
// 这个桥的优先级和 mac 地址
Configured hello time 2, max age 20, forward delay 15
Current root has priority 32768, address ccf8.0f24.0000
// 根桥的优先级和 mac 地址
Root port is 94 (FastEthernet2/13), cost of root path is 19
Topology change flag not set, detected flag not set
Number of topology changes 0 last change occurred 00:03:41 ago
Times: hold 1, topology change 35, notification 2
hello 2, max age 20, forward delay 15
Timers: hello 0, topology change 0, notification 0, aging 0

Port 94 (FastEthernet2/13) of VLAN1 is forwarding
// 此接口为活动状态
Port path cost 19, Port priority 128, Port Identifier 128.94.
Designated root has priority 32768, address ccf8.0f24.0000
Designated bridge has priority 32768, address ccf8.0f24.0000
Designated port id is 128.94, designated path cost 0
Timers: message age 1, forward delay 0, hold 0
Number of transitions to forwarding state: 1
BPDU: sent 1, received 106

Port 95 (FastEthernet2/14) of VLAN1 is blocking
//sw2 上 f2/24 的接口被阻塞
Port path cost 19, Port priority 128, Port Identifier 128.95.
Designated root has priority 32768, address ccf8.0f24.0000
Designated bridge has priority 32768, address ccf8.0f24.0000
Designated port id is 128.95, designated path cost 0
Timers: message age 4, forward delay 0, hold 0
Number of transitions to forwarding state: 0
BPDU: sent 18, received 11