网络拓扑
注意：在配置RRPP过程中，交换机必须先断开一个方向，否则就会成环，导致网络不通。
配置思路：
1、创建eth-trunk并配置：
福州：
#
interface Eth-Trunk1
description --SW--fuzhou--to--hangzhou--DWDM--huiju
set flow-stat interval 10
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 100 to 300 4092 to 4093 ==============vlan必须在RRPP配置完成之后，才能添加，否则RRPP创建不成功。
stp disable
#
interface Eth-Trunk2
description --SW--fuzhou--to--wenzhou--DWDM--huiju
set flow-stat interval 10
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 100 to 300 4092 to 4093 ==============vlan必须在RRPP配置完成之后，才能添加，否则RRPP创建不成功。
stp disable
#
杭州：
#
interface Eth-Trunk1
description --SW--hangzhou--fuzhou--DWDM--huiju
set flow-stat interval 10
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 100 to 300 4092 to 4093 ==============vlan必须在RRPP配置完成之后，才能添加，否则RRPP创建不成功。
stp disable
#
interface Eth-Trunk2
description --SW--hangzhou--ningbo--DWDM--huiju
set flow-stat interval 10
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 100 to 300 4092 to 4093 ==============vlan必须在RRPP配置完成之后，才能添加，否则RRPP创建不成功。
stp disable
#
宁波：
#
interface Eth-Trunk1
description --sw--ningbo--to--wenzhou--DWDM--huiju
set flow-stat interval 10
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 100 to 300 4092 to 4093
stp disable
#
interface Eth-Trunk2
description --sw--ningbo--to--hangzhou--DWDM--huiju
set flow-stat interval 10
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 100 to 300 4092 to 4093
stp disable
#
温州：
#
interface Eth-Trunk1
description --SW--wenzhou--to--ningbo--DWDM--huiju
set flow-stat interval 10
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 100 to 300 4092 to 4093
stp disable
#
interface Eth-Trunk2
description --SW--wenzhou--to--fuzhou--DWDM--huiju
set flow-stat interval 10
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 100 to 300 4092 to 4093
stp disable
#
2、创建类
#
stp region-configuration
instance 1 vlan 100 300 to 4093
active region-configuration
#
4台交换机配置相同，此处略。
3、RRPP配置：
福州：
#
rrpp domain 1
control-vlan 4092
protected-vlan reference-instance 1
timer hello-timer 2 fail-timer 6
ring 1 node-mode transit primary-port Eth-Trunk1 secondary-port Eth-Trunk2 level 0
ring 1 enable
#
杭州：
#
rrpp domain 1
control-vlan 4092
protected-vlan reference-instance 1
timer hello-timer 2 fail-timer 6
ring 1 node-mode master primary-port Eth-Trunk1 secondary-port Eth-Trunk2 level 0
ring 1 enable
#
宁波：
#
rrpp domain 1
control-vlan 4092
protected-vlan reference-instance 1
timer hello-timer 2 fail-timer 6
ring 1 node-mode transit primary-port Eth-Trunk1 secondary-port Eth-Trunk2 level 0
ring 1 enable
#
温州：
#
rrpp domain 1
control-vlan 4092
protected-vlan reference-instance 1
timer hello-timer 2 fail-timer 6
ring 1 node-mode transit primary-port Eth-Trunk1 secondary-port Eth-Trunk2 level 0
ring 1 enable
#
4、激活RRPP：
在4台交换机上配置RRPP enable命令。
5、创建vlan，并配置4台交换机的地址：
福州：
#
interface Vlanif100
ip address 172.40.1.11 255.255.255.224
#
杭州：
#
interface Vlanif100
ip address 172.40.1.8 255.255.255.224
#
宁波：
#
interface Vlanif100
ip address 172.40.1.9 255.255.255.224
#
温州：
#
interface Vlanif100
ip address 172.40.1.10 255.255.255.224
#
6、把eth-trunk加入到端口，并描述端口：
福州：
#
interface GigabitEthernet0/0/1
description fuzhou--to--hangzhou--DWDM--CH33
eth-trunk 1
#
interface GigabitEthernet0/0/2
description fuzhou--to--hangzhou--DWDM--CH27
eth-trunk 1
#
interface GigabitEthernet0/0/3
description fuzhou--to--wenzhou--DWDM--CH21
eth-trunk 2
#
interface GigabitEthernet0/0/4
description fuzhou--to--wenzhou--DWDM--CH23
eth-trunk 2
#
杭州：
#
interface GigabitEthernet0/0/1
description hangzhou--to--fuzhou--DWDM--CH33
eth-trunk 1
#
interface GigabitEthernet0/0/2
description hangzhou--to--fuzhou--DWDM--CH27
eth-trunk 1
#
interface GigabitEthernet0/0/3
description hangzhou--to--ningbo--DWDM--CH58
eth-trunk 2
#
interface GigabitEthernet0/0/4
description hangzhou--to--ningbo--DWDM--CH57
eth-trunk 2
#
宁波：
#
interface GigabitEthernet0/0/1
description ningbo--to--wenzhou--DWDM--CH58
eth-trunk 1
#
interface GigabitEthernet0/0/2
description ningbo--to--wenzhou--DWDM--CH57
eth-trunk 1
#
interface GigabitEthernet0/0/3
description ningbo--to--hangzhou--DWDM--CH58
eth-trunk 2
#
interface GigabitEthernet0/0/4
description ningbo--to--hangzhou--DWDM--CH57
eth-trunk 2
#
温州：
#
interface GigabitEthernet0/0/1
description wenzhou--to--ningbo--DWDM--CH58
eth-trunk 1
#
interface GigabitEthernet0/0/2
description wenzhou--to--ningbo--DWDM--CH57
eth-trunk 1
#
interface GigabitEthernet0/0/3
description wenzhou--to--fuzhou--DWDM--CH21
eth-trunk 2
#
interface GigabitEthernet0/0/4
description wenzhou--to--fuzhou--DWDM--CH23
eth-trunk 2
#
测试网络：
福州ping宁波：
<fuzhou-zj9312>ping 172.40.1.9
PING 172.40.1.9: 56 data bytes,press CTRL_C to break
Reply from 172.40.1.9: bytes=56 Sequence=1 ttl=255 time=390 ms
Reply from 172.40.1.9: bytes=56 Sequence=2 ttl=255 time=60 ms
Reply from 172.40.1.9: bytes=56 Sequence=3 ttl=255 time=70 ms
Reply from 172.40.1.9: bytes=56 Sequence=4 ttl=255 time=70 ms
Reply from 172.40.1.9: bytes=56 Sequence=5 ttl=255 time=60 ms
--- 172.40.1.9 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 60/130/390 ms
<fuzhou-zj9312>
福州ping杭州：
默认是就近原则，路由为：福州-杭州
<fuzhou-zj9312>ping 172.40.1.8
PING 172.40.1.8: 56 data bytes,press CTRL_C to break
Reply from 172.40.1.8: bytes=56 Sequence=1 ttl=255 time=40 ms
Reply from 172.40.1.8: bytes=56 Sequence=2 ttl=255 time=10 ms
Reply from 172.40.1.8: bytes=56 Sequence=3 ttl=255 time=30 ms
Reply from 172.40.1.8: bytes=56 Sequence=4 ttl=255 time=50 ms
Reply from 172.40.1.8: bytes=56 Sequence=5 ttl=255 time=20 ms
--- 172.40.1.8 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 10/30/50 ms
<fuzhou-zj9312>
把福州eth-trunk 1断开，测试福州到杭州
路由为：福州-温州-宁波-杭州
[fuzhou-zj9312]ping 172.40.1.8
PING 172.40.1.8: 56 data bytes,press CTRL_C to break
Reply from 172.40.1.8: bytes=56 Sequence=1 ttl=255 time=110 ms
Reply from 172.40.1.8: bytes=56 Sequence=2 ttl=255 time=110 ms
Reply from 172.40.1.8: bytes=56 Sequence=3 ttl=255 time=80 ms
Reply from 172.40.1.8: bytes=56 Sequence=4 ttl=255 time=110 ms
Reply from 172.40.1.8: bytes=56 Sequence=5 ttl=255 time=100 ms
--- 172.40.1.8 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 80/102/110 ms
[fuzhou-zj9312]
安全配置：
aaa
local-user test password simple 123456
local-user test privilege level 0
local-user test service-type telnet
local-user gouzhongxing password simple aqkfkhnuiwu
local-user gouzhongxing privilege level 15
local-user gouzhongxing service-type telnet web
#
user-interface maximum-vty 15
user-interface con 0
authentication-mode password
user privilege level 15
set authentication password simple zydx2013
user-interface vty 0 14
authentication-mode aaa
#
telnet使用aaa本地登录。
实验成功。
