配置思路
本實(shí)驗(yàn)中,s5130交換機(jī)上聯(lián)為DMZ_S5120和NW_S5500交換機(jī)
NW側(cè)的二層聚合接口為BAG13
要使去往NW的VLAN10與VLAN20的數(shù)據(jù)流量均能通過二層聚合接口13返咱,須配置二層聚合接口的鏈路類型為Trunk端口,并允許VLAN10和VLAN20的報文通過。
DMZ側(cè)的二層聚合接口為BAG26
要使去往DMZ的VLAN110與VLAN120的數(shù)據(jù)流量均能通過二層聚合接口26幽七,須配置二層聚合接口的鏈路類型為Trunk端口凿将,并允許VLAN110和VLAN120的報文通過欲虚。
配置注意事項(xiàng)
先配置二層鏈路聚合接口組擒抛,退出配置進(jìn)入對應(yīng)端口(所有需要加入的端口)依次加入聚合組,再次進(jìn)入聚合組進(jìn)行vlan放行鳍寂,否則端口無法自動識別聚合組內(nèi)vlan信息
配置步驟
1改含、配置NW_S5500交換機(jī)
1-1、創(chuàng)建二層聚合接口13
<Sysname> system-view
[Sysname] sysname NW
[NW] interface bridge-aggregation 13
[NW-Bridge-Aggregation13] quit
1-2迄汛、分別將端口GigabitEthernet1/0/13至 GigabitEthernet1/0/14加入到聚合組13中
[NW] interface gigabitethernet 1/0/13
[NW-gigabitethernet1/0/13] port link-aggregation group 13
[NW-gigabitethernet1/0/13] quit
[NW] interface gigabitethernet 1/0/14
[NW-gigabitethernet1/0/14] port link-aggregation group 13
[NW-gigabitethernet1/0/14] quit
1-3-配置二層聚合接口13為Trunk端口捍壤,并允許vlan10和20的報文通過
[NW] interface bridge-aggregation 13
[NW-Bridge-Aggregation13] port link-type trunk
[NW-Bridge-Aggregation13] port trunk permit vlan 10 20
Please wait... Done.
Configuring GigabitEthernet1/0/13... Done.
Configuring GigabitEthernet1/0/14... Done.
[NW-Bridge-Aggregation13] quit
2、配置S5130交換機(jī)(與NW交換機(jī)互聯(lián))
2-1鞍爱、創(chuàng)建二層聚合接口13
<Sysname> system-view
[Sysname] sysname S5130
[S5130] interface bridge-aggregation 13
[S5130-Bridge-Aggregation13] quit
2-2鹃觉、分別將端口GigabitEthernet1/0/13至 Ten-GigabitEthernet1/0/14加入到聚合組13中
[S5130] interface gigabitethernet 1/0/13
[S5130-gigabitethernet1/0/13] port link-aggregation group 13
[S5130-gigabitethernet1/0/13] quit
[S5130] interface gigabitethernet 1/0/14
[S5130-gigabitethernet1/0/14] port link-aggregation group 13
[S5130-gigabitethernet1/0/14] quit
2-3、配置二層聚合接口13為Trunk端口睹逃,并允許vlan10和20的報文通過盗扇。
[S5130] interface bridge-aggregation 13
[S5130-Bridge-Aggregation13] port link-type trunk
[S5130-Bridge-Aggregation13] port trunk permit vlan 10 20
Please wait... Done.
Configuring Ten-GigabitEthernet1/0/13... Done.
Configuring Ten-GigabitEthernet1/0/14... Done.
[S5130-Bridge-Aggregation13] quit
3祷肯、配置DMZ_S5120交換機(jī)
3-1、創(chuàng)建二層聚合接口26
<Sysname> system-view
[Sysname] sysname DMZ
[DMZ] interface bridge-aggregation 26
[DMZ-Bridge-Aggregation26] quit
3-2疗隶、分別將端口GigabitEthernet1/0/26至 GigabitEthernet1/0/27加入到聚合組26中
[DMZ] interface gigabitethernet 1/0/26
[DMZ-gigabitethernet1/0/26] port link-aggregation group 26
[DMZ-gigabitethernet1/0/26] quit
[DMZ] interface gigabitethernet 1/0/27
[DMZ-gigabitethernet1/0/27] port link-aggregation group 26
[DMZ-gigabitethernet1/0/27] quit
3-3佑笋、配置二層聚合接口26為Trunk端口,并允許vlan110和120的報文通過
[DMZ] interface bridge-aggregation 26
[DMZ-Bridge-Aggregation26] port link-type trunk
[DMZ-Bridge-Aggregation26] port trunk permit vlan 110 120
Please wait... Done.
Configuring GigabitEthernet1/0/26... Done.
Configuring GigabitEthernet1/0/27... Done.
[DMZ-Bridge-Aggregation26] quit
4斑鼻、配置S5130堆疊交換機(jī)(與DMZ交換機(jī)互聯(lián))
4-1蒋纬、創(chuàng)建二層聚合接口26
[S5130] interface bridge-aggregation 26
[S5130-Bridge-Aggregation26] quit
4-2、分別將端口Ten-GigabitEthernet1/0/26至 Ten-GigabitEthernet1/0/27加入到聚合組26中
[S5130] interface Ten-gigabitethernet 1/0/26
[S5130-Ten-gigabitethernet1/0/26] port link-aggregation group 26
[S5130-Ten-gigabitethernet1/0/26] quit
[S5130] interface Ten-gigabitethernet 1/0/27
[S5130-Ten-gigabitethernet1/0/27] port link-aggregation group 26
[S5130-gigabitethernet1/0/27] quit
4-3坚弱、配置二層聚合接口26為Trunk端口蜀备,并允許vlan110和120的報文通過
[S5130] interface bridge-aggregation 26
[S5130-Bridge-Aggregation26] port link-type trunk
[S5130-Bridge-Aggregation26] port trunk permit vlan 110 120
Please wait... Done.
Configuring Ten-GigabitEthernet1/0/26... Done.
Configuring Ten-GigabitEthernet1/0/27... Done.
[S5130-Bridge-Aggregation13] quit
驗(yàn)證配置
鏈路聚合配置信息 display link-aggregation verbose
鏈路聚合配置信息 display link-aggregation summary