最近因為商務需要，跟園區合作公司對接網路
我方是思科4507核心交換機，接對端核心華為s7706，光纖直連
思路是這樣的：
劃分一個公用vlan96 用與連接，雙方介面都設定為access模式，雙方寫靜態路由完成互通。
cisco vlan 96 192.168.96.10/24
huawei vlan 96 192.168.96.20/24
沒想到接好線之后，不能通信，96.10和96.20都不互通，埠和埠協議都是up狀態。 將相連介面從access改為trunk,僅允許vlan96透傳，96段ip可以通信，但無法轉發其他vlan資料。
將列印資訊顯示到terminal，發現埠處于access時，有以下列印資訊
*Oct 14 08:22:30.468: %SPANTREE-2-UNBLOCK_CONSIST_PORT: Unblocking TenGigabitEthernet4/1 on VLAN0096. Port consistency restored.
*Oct 14 08:22:31.466: %SPANTREE-7-RECV_1Q_NON_TRUNK: Received 802.1Q BPDU on non trunk TenGigabitEthernet4/1 VLAN96.
*Oct 14 08:22:31.466: %SPANTREE-7-BLOCK_PORT_TYPE: Blocking TenGigabitEthernet4/1 on VLAN0096. Inconsistent port type.
根據報錯資訊，度娘了一下，發現是思科和華為生成樹協議不匹配導致，跟著網上的思路，查看解決方案
查看cisco vtp狀態，發現埠處于狀態BKN*（broken）
4507#show spanning-tree interface tenGigabitEthernet 4/1
Vlan Role Sts Cost Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
VLAN0096 Desg BKN*2 128.385 P2p Edge *TYPE_Inc
4507#show spanning-tree interface tenGigabitEthernet 4/1 state
VLAN0096 broken
查看cisco vtp模式，發現cisco果然是用自家私有協議pvst
CD_CORE#show spanning-tree summary
Switch is in pvst mode
Root bridge for: none
Extended system ID is enabled
Portfast Default is disabled
PortFast BPDU Guard Default is disabled
Portfast BPDU Filter Default is disabled
Loopguard Default is disabled
EtherChannel misconfig guard is enabled
UplinkFast is disabled
BackboneFast is disabled
Configured Pathcost method used is short
查看一下華為的stp資訊，發現華為的埠未報錯，處于FORWARDING狀態
[S7706]display stp brief
MSTID Port Role STP State Protection
0 XGigabitEthernet1/0/11 DESI FORWARDING NONE
0 XGigabitEthernet1/0/12 DESI FORWARDING NONE
0 XGigabitEthernet1/0/15 DESI FORWARDING NONE
查看具體資訊，發現華為stp協議是up狀態，全域使用mstp
[S7706]display stp interface XGigabitEthernet 1/0/15
----[Port42(XGigabitEthernet1/0/15)][FORWARDING]----
Port Protocol :Enabled
Port Role :Designated Port
Port Priority :128
Port Cost(Dot1T ) :Config=auto / Active=2000
Designated Bridge/Port :32768.f063-f94d-efd0 / 128.42
Port Edged :Config=default / Active=disabled
Point-to-point :Config=auto / Active=true
Transit Limit :6 packets/s
Protection Type :None
Port STP Mode :STP
Port Protocol Type :Config=auto / Active=dot1s
BPDU Encapsulation :Config=stp / Active=stp
PortTimes :Hello 2s MaxAge 20s FwDly 15s RemHop 20
TC or TCN send :141
TC or TCN received :256
BPDU Sent :232
TCN: 0, Config: 230, RST: 0, MST: 2
BPDU Received :257
TCN: 22, Config: 235, RST: 0, MST: 0
Last forwarding time: 2019/10/14 10:00:00 UTC
查看資料，應該有兩種解決方案：
1、是開啟bpdu埠資訊過屢功能
2、是雙方使用能夠匹配的vtp協議，思科改為mst即可
查看了兩種方法的難易程度，發現方法1更為適合，方法2對域名要求相同，貌似不適合兩個公司使用。
只需要在4507埠下啟用bpdufilter即可
spanning-tree bpdufilter enable
埠配置如下：
[color=#800000]interface TenGigabitEthernet4/1
switchport access vlan 96
switchport mode access
spanning-tree bpdufilter enable
[/color]
cisco端stp狀態也終于顯示正常
CD#show spanning-tree interface tenGigabitEthernet 4/1
Vlan Role Sts Cost Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
VLAN0096 Desg FWD 2 128.385 P2p
查看7706狀態，顯示也未正常
<XITC_CD_S7706_Core>display stp vlan 96
ProcessId InstanceId Port Role State
0 0 XGigabitEthernet1/0/15 DESI FORWARDING
各個ip相互通信測驗也正常，感覺解決了問題
最后進行帶寬測驗
上傳40Mb，下載80Mb左右
一臉懵逼
不知道哪里還有疏漏，請各位大佬指教（50分聊表敬意）
轉載請註明出處，本文鏈接：https://www.uj5u.com/qita/57625.html
標籤：交換及路由技術