网络互联技术(第2版)梁广民数字资源2.3.6 STP防护.ppt

《网络互联技术(第2版)梁广民数字资源2.3.6 STP防护.ppt》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。

1、2.3.6STP防护深圳职业技术学院梁广民（CCIE#14496）网络互联技术国家精品课程国家精品资源共享课程教育部网络技术专业教学资源库课程“十二五”职业教育国家规划教材端口加速（PortFast）BPDUGuard配置接口下配置BPDU防护spanning-treebpduguardenable全局启用BPDU防护spanning-treeportfastbpduguarddefaultS1#shspanning-treesummarySwitchisinpvstmodeRootbridgefor:VLAN0

2、001ExtendedsystemIDisenabledPortfastDefaultisenabledPortFastBPDUGuardDefaultisenabledPortfastBPDUFilterDefaultisdisabledLoopguardDefaultisdisabledEtherChannelmisconfigguardisenabledUplinkFastisdisabledBackboneFastisdisabledConfiguredPathcostmethodusedisshort对

3、于设置了PortFast接口，却收到了BPDU，如果设置了BPDU防护，就能将此接口关闭BPDUGuard验证RootGuard目的RootGuard操作能够将接口强制设为DP，进而防止对端SW成为Root。设置了根保护的端口如果收到了一个优于原BPDU的新的BPDU，它将把本端口设为blocking禁止状态，过一段时间，如果再收到更差的BPDU,它会恢复端口，这一点不同于BPDU的防护。RootGuard配置S1(config)#interfaceFastEthernetf0/21S1(config-if)#s

4、panning-treeguardrootS1(config-if)#endS1#showspanning-treevlan1VLAN0001SpanningtreeenabledprotocolieeeRootIDPriority4097Address0023.ac7d.9c00Cost38Port26(FastEthernet0/24)HelloTime2secMaxAge20secForwardDelay15secBridgeIDPriority8193(priority8192sys-id-ext1)Ad

5、dress0023.ac9d.f000HelloTime2secMaxAge20secForwardDelay15secAgingTime15InterfaceRoleStsCostPrio.NbrType---------------------------------------------------------------------------Fa0/1DesgFWD19128.3P2pEdgeFa0/21DesgBKN*19128.23P2p*ROOT_IncFa0/24RootFWD19128.26

6、P2pRootGuard验证S1#showspanning-treevlan1intf0/21detailPort23(FastEthernet0/21)ofVLAN0001isbroken(RootInconsistent)Portpathcost19,Portpriority128,PortIdentifier128.23.Designatedroothaspriority4097,address0023.ac7d.9c00Designatedbridgehaspriority8193,address0023

7、.ac9d.f000Designatedportidis128.23,designatedpathcost38Timers:messageage1,forwarddelay0,hold0Numberoftransitionstoforwardingstate:1Linktypeispoint-to-pointbydefaultRootguardisenabledontheportBPDU:sent639,received133RootGuard验证S1#showspanning-treeinconsistentp

8、ortsNameInterfaceInconsistency--------------------------------------------------------------VLAN0001FastEthernet0/21RootInconsistentVLAN0002FastEthernet0/21RootInconsistentVLAN0003FastEth