二层环路保护，SEP多实例的配置

　　作者:邓聪聪

　　智能以太保护SEP（Smart Ethernet Protection）是一种专用于以太网链路层的环网协议。SEP是一种以太环路保护机制，它通过有选择性地阻塞网络环路冗余链路，来达到消除网络二层环路的目的，避免报文在环路网络中增生和无限循环，有效防止形成网络风暴。本人刚接手了一套网络，布局也不是太复杂，基本全是2层网络，所以就利用了sep这个小技术。

　　实例1：

sysname sw1
#
vlan batch  to
#
stp disable
#
sep segment
 control-vlan
 block port optimal
 preempt delay
 protected-instance  to
sep segment
 control-vlan
 block port optimal
 preempt delay
 tc-notify segment
 protected-instance  to
#
interface Vlanif12
 ip address 10.1.1.1 255.255.255.224
#
interface GigabitEthernet0//
 port link-type trunk
 port trunk allow-pass vlan
 stp disable
 sep segment
#
interface GigabitEthernet0//
 port link-type access
 port default vlan
#
interface GigabitEthernet0//
 shutdown
 port link-type trunk
 undo port trunk allow-pass vlan
 port trunk allow-pass vlan  to
 stp disable
 sep segment  edge primary
#
interface GigabitEthernet0//
 shutdown
 port link-type trunk
 port trunk allow-pass vlan
 stp disable
 sep segment 10 edge primary
#

sysname sw2
#
stp disable
#
sep segment
 control-vlan
 protected-instance  to
#

　　sep segment 11
　　control-vlan 100
　　block port optimal
　　preempt delay 30
　　tc-notify segment 5
　　protected-instance 0 to 48

interface GigabitEthernet0//
 port link-type trunk
 undo port trunk allow-pass vlan
 port trunk allow-pass vlan
 stp disable
 sep segment
#
interface GigabitEthernet0//
 port link-type trunk
 undo port trunk allow-pass vlan
 port trunk allow-pass vlan
 stp disable
 sep segment 5

　　interface GigabitEthernet0/0/4
　　port link-type trunk
　　port trunk allow-pass vlan 11 100
　　stp disable
　　sep segment 11 edge primary

sysname sw3
#
stp disable
#
sep segment
 control-vlan
 protected-instance  to
sep segment
 control-vlan
 tc-notify segment
 protected-instance  to
#
interface Vlanif11
 ip address 1.1.1.30 255.255.255.224
#
interface Vlanif12
 ip address 10.1.1.2 255.255.255.224
#
interface MEth0//
#
interface GigabitEthernet0//
 port link-type access
 port default vlan
#
interface GigabitEthernet0//
 port link-type trunk
 undo port trunk allow-pass vlan
 port trunk allow-pass vlan
 stp disable
 sep segment
#
interface GigabitEthernet0//
 port link-type trunk
 undo port trunk allow-pass vlan
 port trunk allow-pass vlan  to
 stp disable
 sep segment
 sep segment  priority
#
interface GigabitEthernet0//
 port link-type trunk
 undo port trunk allow-pass vlan
 port trunk allow-pass vlan
 stp disable
 sep segment
 sep segment  priority
#

sysname sw4
#
vlan batch
#
stp disable
#
sep segment
 control-vlan
 protected-instance  to
#

　　sep segment 11
　　control-vlan 100
　　tc-notify segment 10
　　protected-instance 0 to 48

interface Vlanif11
 ip address 1.1.1.4 255.255.255.224
#

interface GigabitEthernet0/0/3
 port link-type trunk
 port trunk allow-pass vlan 11 100
 stp disable
 sep segment 11
 sep segment 11 priority 128

interface GigabitEthernet0//
 port link-type trunk
 undo port trunk allow-pass vlan
 port trunk allow-pass vlan
 stp disable
 sep segment
#
interface GigabitEthernet0//
 port link-type trunk
 port trunk allow-pass vlan
 stp disable
 sep segment 

sysname sw5
#
sep segment
 control-vlan
 protected-instance  to
#
interface GigabitEthernet0//
 port link-type trunk
 port trunk allow-pass vlan
 stp disable
 sep segment
#
interface GigabitEthernet0//
 port link-type trunk
 port trunk allow-pass vlan
 stp disable
 sep segment
#

　　实例2：

9306配置：

sep segment 1
control-vlan 4094
block port optimal
preempt delay 30
tc-notify segment 2
protected-instance 0 to 48
sep segment 2
control-vlan 4094
block port optimal
preempt delay 15
tc-notify segment 1
protected-instance 0 to 48
sep segment 3
control-vlan 4090
block port optimal
preempt delay 15
protected-instance 0 to 48
#
interface Vlanif1
ip address 1.1.1.1 255.255.255.0
#
interface MEth0/0/1
#
interface GigabitEthernet0/0/1
shutdown
port hybrid tagged vlan 4094
stp disable
sep segment 1 edge secondary
#
interface GigabitEthernet0/0/2
port link-type trunk
port trunk allow-pass vlan 4094
stp disable
sep segment 2 edge primary
#
interface GigabitEthernet0/0/3
port hybrid tagged vlan 4094
stp disable
sep segment 1 edge primary
#
interface GigabitEthernet0/0/4
port hybrid tagged vlan 4090
stp disable
sep segment 3 edge primary
#
interface GigabitEthernet0/0/5
port hybrid tagged vlan 4090
stp disable
sep segment 3 edge secondary
#

分支1-5700配置：

sep segment
 control-vlan
 block port optimal
 protected-instance  to 

#
interface Vlanif1
 ip address 1.1.1.254 255.255.255.0
#
interface MEth0//
#
interface GigabitEthernet0//
 port hybrid tagged vlan
 stp disable
 sep segment
#
interface GigabitEthernet0//
 port hybrid tagged vlan
 stp disable
 sep segment
#

分支3-5700配置：

sep segment 1
control-vlan 4094
tc-notify segment 2
protected-instance 0 to 48
sep segment 2
control-vlan 4094
tc-notify segment 1
protected-instance 0 to 48
#
interface Vlanif1
ip address 1.1.1.2 255.255.255.0
#
interface MEth0/0/1
#
interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 4094
stp disable
sep segment 2 edge secondary
#
interface GigabitEthernet0/0/2
port hybrid tagged vlan 4094
stp disable
sep segment 1
sep segment 1 priority 128
#
interface GigabitEthernet0/0/3
port hybrid tagged vlan 4094
stp disable
sep segment 1
#

分支2-5700配置：

sep segment 2
control-vlan 4094
protected-instance 0 to 48
#
interface Vlanif1
ip address 1.1.1.3 255.255.255.0
#
interface MEth0/0/1
#
interface GigabitEthernet0/0/1
port hybrid tagged vlan 4094
stp disable
sep segment 2
sep segment 2 priority 128
#
interface GigabitEthernet0/0/2
shutdown
port hybrid tagged vlan 4094
stp disable
sep segment 2

分支1配置：

sep segment
 control-vlan
 protected-instance  to
#
interface Vlanif1
#
interface MEth0//
#
interface GigabitEthernet0//
 port hybrid tagged vlan
 stp disable
 sep segment
#
interface GigabitEthernet0//
 port hybrid tagged vlan
 stp disable
 sep segment
#

分支2配置：

sep segment
 control-vlan
 protected-instance  to
#
interface Vlanif1
 ip address 1.1.1.6 255.255.255.0
#
interface MEth0//
#
interface GigabitEthernet0//
 port hybrid tagged vlan
 stp disable
 sep segment
 sep segment  priority
#
interface GigabitEthernet0//
 port hybrid tagged vlan
 stp disable
 sep segment