kstm-su / ictsc9_final

勝つぞ
0 stars 0 forks source link

[電子通信網局 特殊物理装置課]rs232c使ったことあります? #13

Open tsurugi-TakaChan opened 6 years ago

tsurugi-TakaChan commented 6 years ago

問題: この問題を始める前にALA-Bの35番ポートからALA-Cの37番ポートに繋がっているLANケーブルを抜いた状態にしてから解き始めてください。 今回ある学校のL2部分をalaxala製のL2SWで構築することになった。 そして回線障害、機器障害が起きても通信を問題なく行えるように、alaxalaの独自プロトコル(リングプロトコル、GSRP)で冗長化をする。 しかし検証環境で設定を入れて、ALA-CとALA-Bを繋いでいるケーブルの障害試験を行なった際に、正常に切り替わることができず検証用のホスト(192.168.19.200/26)へ一切疎通が取れなくなってしまった。 またコンソールにはたくさんのログが流れており、状況がつかめずにいる。

あなたは疎通が取れない原因の報告と、そして障害が起きた状態で疎通が出来るように対処をしてもらいたい。

制約 ALA-B,ALA-C,2960-B間は必ずgsrpを使った冗長設定、またALA-A,ALA-B,ALA-Cはリングプロトコルを使った冗長設定にしてください。プロトコルを使わないという解答は点数になりません。 スタート 障害時、手元のPCから検証用ホストにpingが正常に届かない コンソールに大量のログが流れている ゴール 障害が起きた状態(ALA-Bの35番ポートからALA-Cの37番ポートのケーブルを抜いた状態)で検証用ホスト192.168.19.200/26にpingが正常に送れること。 情報 手元の機材のipアドレスとポートについて

手元のPCには自分でstaticでipアドレスを192.168.19.201/26を設定し、2960-BのFa0/5に接続をして192.168.19.200へpingをしてください。 コンソールについて

今回使うAlaxalaのL2SWのコンソールにはいつもciscoで繋ぐRJ45シリアルケーブルからRS232C変換できるアダプタを使用して接続します。 password : z2TES64 解答について

解答は以下の点を報告してください。 どうして通信が出来ていないかの原因報告、及び対処法 今回問題で使うリングプロトコルとGSRPの簡単な説明

リングプロトコル 自分で調べて GSRP 自分で調べて image.png

tsurugi-TakaChan commented 6 years ago

https://contest.svc.icttoracon.net/attachments/18/1275f62c78122f9c9ac40e48354f304bb26162f6584dd9792360b952ed6925d0/19_ala.jpg

fono09 commented 6 years ago

AX-C

#Last modified by operator at Sat Jan  1 19:59:46 2000 with version 11.7.L
!
hostname "ALA-C"
!
vlan 1
  name "VLAN0001"
!
vlan 1058
!
vlan 1059
!
vlan 1060
!
vlan 1061
!
vlan 1062
!
spanning-tree disable
spanning-tree mode pvst
!
interface port-channel 1
  switchport mode trunk
  switchport trunk allowed vlan 1058-1059,1061-1062
  axrp-ring-port 1
!
interface port-channel 2
  switchport mode trunk
  switchport trunk allowed vlan 1058-1062
  axrp-ring-port 1
  gsrp 1 direct-link
!
interface gigabitethernet 0/1
  switchport mode access
!
interface gigabitethernet 0/2
  switchport mode access
!
interface gigabitethernet 0/3
  switchport mode access
!
interface gigabitethernet 0/4
  switchport mode access
!
interface gigabitethernet 0/5
  switchport mode access
!
interface gigabitethernet 0/6
  switchport mode access
!
interface gigabitethernet 0/7
  switchport mode access
!
interface gigabitethernet 0/8
  switchport mode access
!
interface gigabitethernet 0/9
  switchport mode access
!
interface gigabitethernet 0/10
  switchport mode access
!
interface gigabitethernet 0/11
  switchport mode access
!
interface gigabitethernet 0/12
  switchport mode access
!
interface gigabitethernet 0/13
  switchport mode access
!
interface gigabitethernet 0/14
  switchport mode access
!
interface gigabitethernet 0/15
  switchport mode access
!
interface gigabitethernet 0/16
  switchport mode access
!
interface gigabitethernet 0/17
  switchport mode access
!
interface gigabitethernet 0/18
  switchport mode access
!
interface gigabitethernet 0/19
  switchport mode access
!
interface gigabitethernet 0/20
  switchport mode access
!
interface gigabitethernet 0/21
  switchport mode access
!
interface gigabitethernet 0/22
  switchport mode access
!
interface gigabitethernet 0/23
  switchport mode access
!
interface gigabitethernet 0/24
  switchport mode access
!
interface gigabitethernet 0/25
  switchport mode access
!
interface gigabitethernet 0/26
  switchport mode access
!
interface gigabitethernet 0/27
  switchport mode access
!
interface gigabitethernet 0/28
  switchport mode access
!
interface gigabitethernet 0/29
  switchport mode access
!
interface gigabitethernet 0/30
  switchport mode access
!
interface gigabitethernet 0/31
  switchport mode access
!
interface gigabitethernet 0/32
  switchport mode access
!
interface gigabitethernet 0/33
  link debounce time 0
  switchport mode access
  switchport access vlan 1061
  gsrp 1 reset-flush-port
!
interface gigabitethernet 0/34
  switchport mode access
!
interface gigabitethernet 0/35
  link debounce time 0
  switchport mode trunk
  switchport trunk allowed vlan 1058-1059,1061-1062
  channel-group 1 mode active
!
interface gigabitethernet 0/36
  link debounce time 0
  switchport mode trunk
  switchport trunk allowed vlan 1058-1059,1061-1062
  channel-group 1 mode active
!
interface gigabitethernet 0/37
  link debounce time 0
  switchport mode trunk
  switchport trunk allowed vlan 1058-1062
  gsrp 1 direct-link
  channel-group 2 mode active
!
interface gigabitethernet 0/38
  link debounce time 0
  switchport mode trunk
  switchport trunk allowed vlan 1058-1062
  gsrp 1 direct-link
  channel-group 2 mode active
!
interface gigabitethernet 0/39
  switchport mode access
!
interface gigabitethernet 0/40
  switchport mode access
!
interface gigabitethernet 0/41
  switchport mode access
!
interface gigabitethernet 0/42
  switchport mode access
!
interface gigabitethernet 0/43
  switchport mode access
!
interface gigabitethernet 0/44
  switchport mode access
!
interface gigabitethernet 0/45
  switchport mode access
!
interface gigabitethernet 0/46
  switchport mode access
!
interface gigabitethernet 0/47
  switchport mode access
!
interface gigabitethernet 0/48
  switchport mode access
!
interface tengigabitethernet 0/49
  switchport mode access
!
interface tengigabitethernet 0/50
  switchport mode access
!
interface vlan 1
!
axrp virtual-link 1 vlan 1059
axrp vlan-mapping 1 vlan 1059,1061-1062
!
axrp 1
  mode transit
  control-vlan 1058
  vlan-group 1 vlan-mapping 1
!
gsrp 1
  gsrp-vlan 1060
  advertise-holdtime 3
  advertise-interval 0.5
  no-neighbor-to-master direct-down
  vlan-group 1 vlan 1059,1061-1062
  vlan-group 1 priority 100
!
fono09 commented 6 years ago

ALA-B

#Last modified by operator at Sat Jan  1 19:59:13 2000 with version 11.7.L
!
hostname "ALA-B"
!
vlan 1
  name "VLAN0001"
!
vlan 1058
!
vlan 1059
!
vlan 1060
!
vlan 1061
!
vlan 1062
!
spanning-tree disable
spanning-tree mode pvst
!
interface port-channel 1
  switchport mode trunk
  switchport trunk allowed vlan 1058-1062
  axrp-ring-port 1
  gsrp 1 direct-link
!
interface port-channel 2
  switchport mode trunk
  switchport trunk allowed vlan 1058-1059,1061-1062
  axrp-ring-port 1
!
interface gigabitethernet 0/1
  switchport mode access
!
interface gigabitethernet 0/2
  switchport mode access
!
interface gigabitethernet 0/3
  switchport mode access
!
interface gigabitethernet 0/4
  switchport mode access
!
interface gigabitethernet 0/5
  switchport mode access
!
interface gigabitethernet 0/6
  switchport mode access
!
interface gigabitethernet 0/7
  switchport mode access
!
interface gigabitethernet 0/8
  switchport mode access
!
interface gigabitethernet 0/9
  switchport mode access
!
interface gigabitethernet 0/10
  switchport mode access
!
interface gigabitethernet 0/11
  switchport mode access
!
interface gigabitethernet 0/12
  switchport mode access
!
interface gigabitethernet 0/13
  switchport mode access
!
interface gigabitethernet 0/14
  switchport mode access
!
interface gigabitethernet 0/15
  switchport mode access
!
interface gigabitethernet 0/16
  switchport mode access
!
interface gigabitethernet 0/17
  switchport mode access
!
interface gigabitethernet 0/18
  switchport mode access
!
interface gigabitethernet 0/19
  switchport mode access
!
interface gigabitethernet 0/20
  switchport mode access
!
interface gigabitethernet 0/21
  switchport mode access
!
interface gigabitethernet 0/22
  switchport mode access
!
interface gigabitethernet 0/23
  switchport mode access
!
interface gigabitethernet 0/24
  switchport mode access
!
interface gigabitethernet 0/25
  switchport mode access
!
interface gigabitethernet 0/26
  switchport mode access
!
interface gigabitethernet 0/27
  switchport mode access
!
interface gigabitethernet 0/28
  switchport mode access
!
interface gigabitethernet 0/29
  switchport mode access
!
interface gigabitethernet 0/30
  switchport mode access
!
interface gigabitethernet 0/31
  switchport mode access
!
interface gigabitethernet 0/32
  switchport mode access
!
interface gigabitethernet 0/33
  link debounce time 0
  switchport mode access
  switchport access vlan 1061
  gsrp 1 reset-flush-port
!
interface gigabitethernet 0/34
  switchport mode access
!
interface gigabitethernet 0/35
  link debounce time 0
  switchport mode trunk
  switchport trunk allowed vlan 1058-1062
  gsrp 1 direct-link
  channel-group 1 mode active
!
interface gigabitethernet 0/36
  link debounce time 0
  switchport mode trunk
  switchport trunk allowed vlan 1058-1062
  gsrp 1 direct-link
  channel-group 1 mode active
!
interface gigabitethernet 0/37
  link debounce time 0
  switchport mode trunk
  switchport trunk allowed vlan 1058-1059,1061-1062
  channel-group 2 mode active
!
interface gigabitethernet 0/38
  link debounce time 0
  switchport mode trunk
  switchport trunk allowed vlan 1058-1059,1061-1062
  channel-group 2 mode active
!
interface gigabitethernet 0/39
  switchport mode access
!
interface gigabitethernet 0/40
  switchport mode access
!
interface gigabitethernet 0/41
  switchport mode access
!
interface gigabitethernet 0/42
  switchport mode access
!
interface gigabitethernet 0/43
  switchport mode access
!
interface gigabitethernet 0/44
  switchport mode access
!
interface gigabitethernet 0/45
  switchport mode access
!
interface gigabitethernet 0/46
  switchport mode access
!
interface gigabitethernet 0/47
  switchport mode access
!
interface gigabitethernet 0/48
  switchport mode access
!
interface tengigabitethernet 0/49
  switchport mode access
!
interface tengigabitethernet 0/50
  switchport mode access
!
interface vlan 1
!
axrp virtual-link 1 vlan 1059
axrp vlan-mapping 1 vlan 1059,1061-1062
!
axrp 1
  mode transit
  control-vlan 1058
  vlan-group 1 vlan-mapping 1
!
gsrp 1
  gsrp-vlan 1060
  advertise-holdtime 3
  advertise-interval 0.5
  no-neighbor-to-master direct-down
  vlan-group 1 vlan 1059,1061-1062
  vlan-group 1 priority 200
!
fono09 commented 6 years ago

C2960-B: Dan3ckyA

fono09 commented 6 years ago

2960-B

version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname 2960-B
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$FNT6$t0WRNT6574RRfBKBhQof11
!
no aaa new-model
system mtu routing 1500
vtp mode transparent
ip subnet-zero
!
!
no ip igmp snooping
!
!
crypto pki trustpoint TP-self-signed-946593152
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-946593152
 revocation-check none
 rsakeypair TP-self-signed-946593152
!
!
crypto pki certificate chain TP-self-signed-946593152
 certificate self-signed 01
  3082023D 308201A6 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
  30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274
  69666963 6174652D 39343635 39333135 32301E17 0D393330 33303130 30303130
  305A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F
  532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3934 36353933
  31353230 819F300D 06092A86 4886F70D 01010105 0003818D 00308189 02818100
  965287FE 0FB5F854 02B67347 1EDE20D7 0CD6595D BAC4B9D2 3D332B00 FC15A201
  75AB0F54 5CE3DCAC B27AD8B8 54268C77 AD9249E2 B12C42E8 6C2829DE 74643553
  33B90C0B CD6B8558 DC551400 46FB1D88 DA3F8DB1 2F3280E7 A043D5B5 1BF68318
  7204D2E9 4790049E B6CBB6E5 A41DA3CF 57F0037B F332668C 87E48834 3878E1CD
  02030100 01A36730 65300F06 03551D13 0101FF04 05300301 01FF3012 0603551D
  11040B30 09820732 3936302D 422E301F 0603551D 23041830 1680140C 517F5078
  A99BD3A9 A8ECB018 5B69226C DF9F2930 1D060355 1D0E0416 04140C51 7F5078A9
  9BD3A9A8 ECB0185B 69226CDF 9F29300D 06092A86 4886F70D 01010405 00038181
  001A4F02 C2C454FF 3C8C946C 7D282059 25503FA4 FFFEA19E D980F09D 06939266
  24750D2C B6011CDB 16CFC524 EE2395D4 6F175FF7 8C68EEC3 D0335459 ED4C538E
  F058B4FB 9A9045CD 61ABA707 8514DC09 912E8FC3 83125EB2 B3D81B6A 2AE12B79
  C788C825 4D666380 D126AE4D A0E9459F 21905BBC 48403F32 620AE21F 05122FDA E8
  quit
!
!
!
!
!
!
spanning-tree mode pvst
spanning-tree extend system-id
no spanning-tree vlan 1061
!
vlan internal allocation policy ascending
!
vlan 1000-1001,1006-1099
!
!
!
interface FastEthernet0/1
 switchport access vlan 1019
 switchport mode access
!
interface FastEthernet0/2
 switchport access vlan 1041
 switchport mode access
!
interface FastEthernet0/3
 switchport access vlan 1037
 switchport mode access
!
interface FastEthernet0/4
 switchport access vlan 1045
 switchport mode access
!
interface FastEthernet0/5
 switchport access vlan 1061
 switchport mode access
!
interface FastEthernet0/6
 switchport access vlan 1052
 switchport mode access
!
interface FastEthernet0/7
 switchport access vlan 1075
 switchport mode access
!
interface FastEthernet0/8
 switchport access vlan 1015
 switchport mode access
!
interface FastEthernet0/9
 switchport access vlan 1054
 switchport mode access
!
interface FastEthernet0/10
 switchport access vlan 1054
 switchport mode access
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
 switchport mode trunk
!
interface FastEthernet0/14
 switchport mode trunk
!
interface FastEthernet0/15
 switchport mode trunk
!
interface FastEthernet0/16
 switchport mode trunk
!
interface FastEthernet0/17
 switchport access vlan 1061
 switchport mode access
!
interface FastEthernet0/18
 switchport access vlan 1061
 switchport mode access
!
interface FastEthernet0/19
 switchport access vlan 1061
 switchport mode access
!
interface FastEthernet0/20
 switchport access vlan 1061
 switchport mode access
!
interface FastEthernet0/21
 switchport mode trunk
!
interface FastEthernet0/22
 switchport mode trunk
!
interface FastEthernet0/23
 switchport mode trunk
!
interface FastEthernet0/24
 switchport mode trunk
!
interface GigabitEthernet0/1
 switchport mode trunk
!
interface GigabitEthernet0/2
 switchport access vlan 1000
 switchport mode access
!
interface Vlan1
 no ip address
 no ip route-cache
!
interface Vlan1090
 ip address 192.168.127.2 255.255.255.0
 no ip route-cache
!
ip default-gateway 192.168.127.254
ip http server
ip http secure-server
!
control-plane
!
banner motd ^C
.___  _________   ___________   _________ _________      ________
|   | \_   ___ \  \__    ___/  /   _____/ \_   ___ \    /   __   \
|   | /    \  \/    |    |     \_____  \  /    \  \/    \____    /
|   | \     \____   |    |     /        \ \     \____      /    /
|___|  \______  /   |____|    /_______  /  \______  /     /____/
              \/                      \/          \/    
^C
!
line con 0
 password Dan3ckyA
 logging synchronous
 login
 exec prompt timestamp
line vty 0 4
 password Dan3ckyA
 login
line vty 5 15
 password Dan3ckyA
 login
!
end
tsurugi-TakaChan commented 6 years ago

GSRP スイッチに障害が発生した場合でも,同一ネットワーク上の別スイッチを経由して通信経路を確保することを目的とした装置の冗長化を実現する機能です。

レイヤ2ではネットワークの冗長化を行うスパニングツリー,レイヤ3ではデフォルトゲートウェイの冗長化を行うVRRPが冗長化機能として利用できますが,GSRPを使うと,レイヤ2とレイヤ3の冗長化を一つの機能で同時に実現できます

L2において、2台のスイッチ間で制御するため,スパニングツリーよりも装置間の切り替えが高速です。また,ネットワークのコアスイッチを多段にするような大規模な構成にも適しています。

tsurugi-TakaChan commented 6 years ago

image

tsurugi-TakaChan commented 6 years ago

リングプロトコル:輪っかを作ってどっか切れても流し方変えるだけでうまくいく。 普段は輪っか毎にデータの流す方向を決めてあるのでループしない。→そうでないとループする。