第7个模块：最小化园区网的服务丢失数据窃听-5-阻止生成树转发环路 CCNP交换部分中文版 教学课件.ppt

ITAA学习情报组 汤姆一通互联网技术训练中心 /bbs 最小化园区的服务丢失和数据窃听 阻止生成树转发环路 单向链路失效UniDirectional Link Detection 环路保护 Root 开启环路保护之前 Root 环路保护的工作情况 UDLD和环路保护配置 Configuring and verifying UDLD udld enable show udld interface fa0/1 Configuring and verifying loop guard spantree global-default loopguard enable show spantree guard fa0/1 配置 UDLD Switch(config)#udld enable Enables UDLD globally on all fiber-optic interfaces Switch(config-if)#udld enable Enables UDLD on an individual interface Switch(config-if)#no udld enable Disables UDLD on an individual nonfiber-optic interface Switch(config-if)#udld disable Disables UDLD on an individual fiber-optic interface 重设和验证 UDLD Switch# udld reset Resets all interfaces that have been shut down by UDLD Switch#show udld interface Displays UDLD information for a specific interface 配置环路保护 对比 Loop Guard 及 UDLD Loop Guard UDLD 配置 Per port Per port 活动粒度 Per VLAN Per Port 自动恢复 Yes Yes, with errdisabletimeout feature 保护由单向链路引起的生成树失效 Yes, when enabled on all root and alternative ports in redundant topology Yes, when enabled on all links in redundant topology 保护由软件引起指定交换机不发送BPDU，进而导致生成树失效的问题， Yes No 预防错误的接线 No Yes 总结 UDLD通过单向连通性检测关闭接口，保护不规则STP条件下的网络 环路保护通过第2层单向连通性检测，保护不规则STP条件下的网络 通过特定的命令配置及验证以上功能 执行UDLD and loop guard保护由单向链路失效引起的生成树问题 * * Understanding How UDLD Works The UDLD protocol allows devices that are connected through fiber-optic or copper (for example, Category?5 cabling) Ethernet cables to monitor the physical configuration of the cables and detect when a unidirectional link exists. When a unidirectional link is detected, UDLD shuts down the affected port and alerts the user. Unidirectional links can cause a variety of problems, including spanning tree topology loops. UDLD is a Layer?2 protocol that works with the Layer 1 mechanisms to determine the physical status of a link. At Layer 1, autonegotiation takes care of physical signaling and fault detection. UDLD performs tasks that autonegotiation cannot perform such as detecting the