VRRP 网关冗余备份
一. 实验目的
验证网关的冗余备份功能
二. 实验拓扑
客户端ip设置：
三. 实验配置命令
1.交换机配置
<Huawei>system-view #进入系统视图
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname sw1 #修改交换机名称
[sw1]vlan 10 #创建VLAN
[sw1-vlan10]q
[sw1]interface gig0/0/1
[sw1-GigabitEthernet0/0/1]port link-type access #接口配置
[sw1-GigabitEthernet0/0/1]port default vlan 10
[sw1-GigabitEthernet0/0/1]q
[sw1]interface gig0/0/2
[sw1-GigabitEthernet0/0/2]port link-type access
[sw1-GigabitEthernet0/0/2]port default vlan 10
[sw1-GigabitEthernet0/0/2]q
[sw1]interface gig0/0/3
[sw1-GigabitEthernet0/0/3]port link-type access
[sw1-GigabitEthernet0/0/3]port default vlan 10
[sw1-GigabitEthernet0/0/3]q
<sw1>display vlan #查看VLAN配置情况
The total number of vlans is : 2
--------------------------------------------------------------------------------
U: Up; D: Down; TG: Tagged; UT: Untagged;
MP: Vlan-mapping; ST: Vlan-stacking;
#: ProtocolTransparent-vlan; *: Management-vlan;
--------------------------------------------------------------------------------
VID Type Ports
--------------------------------------------------------------------------------
1 common UT:GE0/0/4(D) GE0/0/5(D) GE0/0/6(D) GE0/0/7(D)
GE0/0/8(D) GE0/0/9(D) GE0/0/10(D) GE0/0/11(D)
GE0/0/12(D) GE0/0/13(D) GE0/0/14(D) GE0/0/15(D)
GE0/0/16(D) GE0/0/17(D) GE0/0/18(D) GE0/0/19(D)
GE0/0/20(D) GE0/0/21(D) GE0/0/22(D) GE0/0/23(D)
GE0/0/24(D)
10 common UT:GE0/0/1(U) GE0/0/2(U) GE0/0/3(U)
VID Status Property MAC-LRN Statistics Description
--------------------------------------------------------------------------------
1 enable default enable disable VLAN 0001
10 enable default enable disable VLAN 0010 #此处是创建的vlan
<sw1>display port vlan
Port Link Type PVID Trunk VLAN List
-------------------------------------------------------------------------------
GigabitEthernet0/0/1 access 10 - #接口配置的VLAN
GigabitEthernet0/0/2 access 10 -
GigabitEthernet0/0/3 access 10 -
GigabitEthernet0/0/4 hybrid 1 -
GigabitEthernet0/0/5 hybrid 1 -
GigabitEthernet0/0/6 hybrid 1 -
<sw1>
User interface con0 is available
Please Press ENTER.
2.路由器的配置
R1:
<Huawei>system-view
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname R1
[R1]interface GigabitEthernet 0/0/0
[R1-GigabitEthernet0/0/0]ip address 192.168.10.251 24 #配置路由器ip
[R1-GigabitEthernet0/0/0]vrrp vrid 1 virtual-ip 192.168.10.250 #配置R1的虚拟网关
[R1-GigabitEthernet0/0/0]vrrp vrid 1 priority 200 #设置优先级为200
[R1-GigabitEthernet0/0/0]display this #检查接口数据配置情况。
#
interface GigabitEthernet0/0/0
ip address 192.168.10.251 255.255.255.0
vrrp vrid 1 virtual-ip 192.168.10.250
vrrp vrid 1 priority 200
#
return
[R1-GigabitEthernet0/0/0]q
[R1]display vrrp #查看R1 的vrrp 配置情况
GigabitEthernet0/0/0 | Virtual Router 1
State : Master #此处表明是主网关
Virtual IP : 192.168.10.250
Master IP : 192.168.10.251
PriorityRun : 200
PriorityConfig : 200
MasterPriority : 200
Preempt : YES Delay Time : 0 s
TimerRun : 1 s
TimerConfig : 1 s
Auth type : NONE
Virtual MAC : 0000-5e00-0101
Check TTL : YES
Config type : normal-vrrp
Create time : 2022-08-01 12:06:36 UTC-08:00
Last change time : 2022-08-01 12:06:40 UTC-08:00
R2:
[R2]int gig0/0/0
[R2-GigabitEthernet0/0/0]vrrp vrid 1 virtual-ip 192.168.10.250 #配置R2的虚拟网关
[R2-GigabitEthernet0/0/0]q
[R2]display vrrp
GigabitEthernet0/0/0 | Virtual Router 1
State : Backup #此处表明是备份网关
Virtual IP : 192.168.10.250
Master IP : 192.168.10.251
PriorityRun : 100
PriorityConfig : 100
MasterPriority : 200
Preempt : YES Delay Time : 0 s
TimerRun : 1 s
TimerConfig : 1 s
Auth type : NONE
Virtual MAC : 0000-5e00-0101
Check TTL : YES
Config type : normal-vrrp
Create time : 2022-08-01 12:11:36 UTC-08:00
Last change time : 2022-08-01 12:11:36 UTC-08:00
四.实验结果，抓包验证
客户机pc：ping 192.168.10.250 ,R1 上有ping 包，R2上没有，说明数据包走的是R1。
断开R1, ping 192.168.10.250，R1上没有,数据包走R2,重新恢复R1后，数据包重新走R1.,链路备份成功。
