组网图如下:
6800/S12508-S/S105交换机实现方式:
interface Vlan-interface100 --------一般此接口配置为Down状态,需手动开启
ip binding vpn-instance Public
ip address 192.168.1.2 255.255.255.252
interface Ten-GigabitEthernet1/2/2
port link-type trunk
port trunk permit vlan 100
undo mac-address static source-check enable
interface Ten-GigabitEthernet1/2/1.100
ip binding vpn-instance VPN1
ip address 192.168.1.1 255.255.255.252
undo mac-address static source-check enable
ip route-static vpn-instance Public 10.0.135.0 24 VPN1 192.168.1.1 preference 90
ip route-static vpn-instance VPN1 0.0.0.0 0 Public 192.168.1.2 preference 90
S125X-AF 交换机实现方式:
interface Vlan-interface100 -----------一般此接口配置为Down状态,需手动开启
ip binding vpn-instance Public
ip address 192.168.1.2 255.255.255.252
mac-address 74ea-c828-f300
interface Ten-GigabitEthernet1/2/2
port link-type trunk
port trunk permit vlan 100
interface Ten-GigabitEthernet1/2/1.100
ip binding vpn-instance VPN1
ip address 192.168.1.1 255.255.255.252
mac-address 74ea-c828-f310
ip route-static vpn-instance Public 10.0.135.0 24 VPN1 192.168.1.1 preference 90
ip route-static vpn-instance VPN1 0.0.0.0 0 Public 192.168.1.2 preference 90
A, B 为交换机的两个端口
A B 直连,A 的报文发到B后, B 学习A的报文的源MAC到B口上时,发现这个MAC 是本设备的MAC, 会触发静态MAC迁移丢包
去使能Mac-address static source-check后,则不检查报文入接口与静态MAC地址表项匹配,B口不会丢弃从A接口过来的报文。
更改三层接口的Mac地址实现方式也是一致的,也是为了解决这个问题。
该案例暂时没有网友评论
✖
案例意见反馈
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作