作者:邓聪聪
智能以太保护SEP（Smart Ethernet Protection）是一种专用于以太网链路层的环网协议。SEP是一种以太环路保护机制，它通过有选择性地阻塞网络环路冗余链路，来达到消除网络二层环路的目的，避免报文在环路网络中增生和无限循环，有效防止形成网络风暴。本人刚接手了一套网络，布局也不是太复杂，基本全是2层网络，所以就利用了sep这个小技术。
实例1：
sysname sw1
#
vlan batch to
#
stp disable
#
sep segment
control-vlan
block port optimal
preempt delay
protected-instance to
sep segment
control-vlan
block port optimal
preempt delay
tc-notify segment
protected-instance to
#
interface Vlanif12
ip address 10.1.1.1 255.255.255.224
#
interface GigabitEthernet0//
port link-type trunk
port trunk allow-pass vlan
stp disable
sep segment
#
interface GigabitEthernet0//
port link-type access
port default vlan
#
interface GigabitEthernet0//
shutdown
port link-type trunk
undo port trunk allow-pass vlan
port trunk allow-pass vlan to
stp disable
sep segment edge primary
#
interface GigabitEthernet0//
shutdown
port link-type trunk
port trunk allow-pass vlan
stp disable
sep segment 10 edge primary
#
sysname sw2
#
stp disable
#
sep segment
control-vlan
protected-instance to
#
sep segment 11
control-vlan 100
block port optimal
preempt delay 30
tc-notify segment 5
protected-instance 0 to 48
interface GigabitEthernet0//
port link-type trunk
undo port trunk allow-pass vlan
port trunk allow-pass vlan
stp disable
sep segment
#
interface GigabitEthernet0//
port link-type trunk
undo port trunk allow-pass vlan
port trunk allow-pass vlan
stp disable
sep segment 5
interface GigabitEthernet0/0/4
port link-type trunk
port trunk allow-pass vlan 11 100
stp disable
sep segment 11 edge primary
sysname sw3
#
stp disable
#
sep segment
control-vlan
protected-instance to
sep segment
control-vlan
tc-notify segment
protected-instance to
#
interface Vlanif11
ip address 1.1.1.30 255.255.255.224
#
interface Vlanif12
ip address 10.1.1.2 255.255.255.224
#
interface MEth0//
#
interface GigabitEthernet0//
port link-type access
port default vlan
#
interface GigabitEthernet0//
port link-type trunk
undo port trunk allow-pass vlan
port trunk allow-pass vlan
stp disable
sep segment
#
interface GigabitEthernet0//
port link-type trunk
undo port trunk allow-pass vlan
port trunk allow-pass vlan to
stp disable
sep segment
sep segment priority
#
interface GigabitEthernet0//
port link-type trunk
undo port trunk allow-pass vlan
port trunk allow-pass vlan
stp disable
sep segment
sep segment priority
#
sysname sw4
#
vlan batch
#
stp disable
#
sep segment
control-vlan
protected-instance to
#
sep segment 11
control-vlan 100
tc-notify segment 10
protected-instance 0 to 48
interface Vlanif11
ip address 1.1.1.4 255.255.255.224
#
interface GigabitEthernet0/0/3
port link-type trunk
port trunk allow-pass vlan 11 100
stp disable
sep segment 11
sep segment 11 priority 128
interface GigabitEthernet0//
port link-type trunk
undo port trunk allow-pass vlan
port trunk allow-pass vlan
stp disable
sep segment
#
interface GigabitEthernet0//
port link-type trunk
port trunk allow-pass vlan
stp disable
sep segment
sysname sw5
#
sep segment
control-vlan
protected-instance to
#
interface GigabitEthernet0//
port link-type trunk
port trunk allow-pass vlan
stp disable
sep segment
#
interface GigabitEthernet0//
port link-type trunk
port trunk allow-pass vlan
stp disable
sep segment
#
实例2：
9306配置：
sep segment 1
control-vlan 4094
block port optimal
preempt delay 30
tc-notify segment 2
protected-instance 0 to 48
sep segment 2
control-vlan 4094
block port optimal
preempt delay 15
tc-notify segment 1
protected-instance 0 to 48
sep segment 3
control-vlan 4090
block port optimal
preempt delay 15
protected-instance 0 to 48
#
interface Vlanif1
ip address 1.1.1.1 255.255.255.0
#
interface MEth0/0/1
#
interface GigabitEthernet0/0/1
shutdown
port hybrid tagged vlan 4094
stp disable
sep segment 1 edge secondary
#
interface GigabitEthernet0/0/2
port link-type trunk
port trunk allow-pass vlan 4094
stp disable
sep segment 2 edge primary
#
interface GigabitEthernet0/0/3
port hybrid tagged vlan 4094
stp disable
sep segment 1 edge primary
#
interface GigabitEthernet0/0/4
port hybrid tagged vlan 4090
stp disable
sep segment 3 edge primary
#
interface GigabitEthernet0/0/5
port hybrid tagged vlan 4090
stp disable
sep segment 3 edge secondary
#
分支1-5700配置：
sep segment
control-vlan
block port optimal
protected-instance to #
interface Vlanif1
ip address 1.1.1.254 255.255.255.0
#
interface MEth0//
#
interface GigabitEthernet0//
port hybrid tagged vlan
stp disable
sep segment
#
interface GigabitEthernet0//
port hybrid tagged vlan
stp disable
sep segment
#
分支3-5700配置：
sep segment 1
control-vlan 4094
tc-notify segment 2
protected-instance 0 to 48
sep segment 2
control-vlan 4094
tc-notify segment 1
protected-instance 0 to 48
#
interface Vlanif1
ip address 1.1.1.2 255.255.255.0
#
interface MEth0/0/1
#
interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 4094
stp disable
sep segment 2 edge secondary
#
interface GigabitEthernet0/0/2
port hybrid tagged vlan 4094
stp disable
sep segment 1
sep segment 1 priority 128
#
interface GigabitEthernet0/0/3
port hybrid tagged vlan 4094
stp disable
sep segment 1
#
分支2-5700配置：
sep segment 2
control-vlan 4094
protected-instance 0 to 48
#
interface Vlanif1
ip address 1.1.1.3 255.255.255.0
#
interface MEth0/0/1
#
interface GigabitEthernet0/0/1
port hybrid tagged vlan 4094
stp disable
sep segment 2
sep segment 2 priority 128
#
interface GigabitEthernet0/0/2
shutdown
port hybrid tagged vlan 4094
stp disable
sep segment 2
分支1配置：
sep segment
control-vlan
protected-instance to
#
interface Vlanif1
#
interface MEth0//
#
interface GigabitEthernet0//
port hybrid tagged vlan
stp disable
sep segment
#
interface GigabitEthernet0//
port hybrid tagged vlan
stp disable
sep segment
#
分支2配置：
sep segment
control-vlan
protected-instance to
#
interface Vlanif1
ip address 1.1.1.6 255.255.255.0
#
interface MEth0//
#
interface GigabitEthernet0//
port hybrid tagged vlan
stp disable
sep segment
sep segment priority
#
interface GigabitEthernet0//
port hybrid tagged vlan
stp disable
sep segment