实验10VRRP
实验任务一：配置VRRP单备份组
-
建立物理连接
-
基本配置
SWA的配置
display cu
version 7.1.075, Alpha 7571
sysname SWA
irf mac-address persistent timer
irf auto-update enable
undo irf link-delay
irf member 1 priority 1
rip 1
undo summary
version 2
network 192.168.0.0
network 192.168.255.0
silent-interface Vlan-interface10
lldp global enable
system-working-mode standard
xbar load-single
password-recovery enable
lpu-type f-series
vlan 1
vlan 10
vlan 100
stp global enable
interface Vlan-interface10
ip address 192.168.0.252 255.255.255.0
vrrp vrid 1 virtual-ip 192.168.0.254
vrrp vrid 1 priority 120
interface Vlan-interface100
ip address 192.168.255.1 255.255.255.252
interface GigabitEthernet1/0/1
port link-mode bridge
port access vlan 100
combo enable fiber
undo stp enable
interface GigabitEthernet1/0/2
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 10
combo enable fiber
version 7.1.075, Alpha 7571
sysname SWB
irf mac-address persistent timer
irf auto-update enable
undo irf link-delay
irf member 1 priority 1
rip 1
undo summary
version 2
network 192.168.0.0
network 192.168.255.0
silent-interface Vlan-interface10
lldp global enable
system-working-mode standard
xbar load-single
password-recovery enable
lpu-type f-series
vlan 1
vlan 10
vlan 101
stp global enable
interface NULL0
interface Vlan-interface10
ip address 192.168.0.253 255.255.255.252
vrrp vrid 1 virtual-ip 192.168.0.254
interface Vlan-interface101
ip address 192.168.255.5 255.255.255.252
interface GigabitEthernet1/0/1
port link-mode bridge
port access vlan 101
combo enable fiber
undo stp enable
interface GigabitEthernet1/0/2
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 10
combo enable fiber
version 7.1.075, Alpha 7571
sysname SWC
irf mac-address persistent timer
irf auto-update enable
undo irf link-delay
irf member 1 priority 1
lldp global enable
system-working-mode standard
xbar load-single
password-recovery enable
lpu-type f-series
vlan 1
vlan 10
stp global enable
interface NULL0
interface GigabitEthernet1/0/1
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 10
combo enable fiber
interface GigabitEthernet1/0/2
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 10
combo enable fiber
version 7.1.075, Alpha 7571
sysname SWD
irf mac-address persistent timer
irf auto-update enable
undo irf link-delay
irf member 1 priority 1
rip 1
undo summary
version 2
network 10.0.0.0
network 192.168.255.0
lldp global enable
system-working-mode standard
xbar load-single
password-recovery enable
lpu-type f-series
vlan 1
vlan 100 to 102
stp global enable
interface NULL0
interface Vlan-interface100
ip address 192.168.255.2 255.255.255.252
interface Vlan-interface101
ip address 192.168.255.6 255.255.255.252
interface Vlan-interface102
ip address 10.0.0.254 255.255.255.0
interface FortyGigE1/0/53
port link-mode bridge
interface FortyGigE1/0/54
port link-mode bridge
interface GigabitEthernet1/0/1
port link-mode bridge
port access vlan 100
combo enable fiber
undo stp enable
interface GigabitEthernet1/0/2
port link-mode bridge
port access vlan 101
combo enable fiber
undo stp enable
//HostA可以ping通HostC
[SWA-rip-1]display vrrp verbose
IPv4 virtual router information:
Running mode : Standard
Total number of virtual routers : 1
Interface Vlan-interface10
VRID : 1 Adver timer : 100 centiseconds
Admin status : Up State : Master
Config pri : 120 Running pri : 120
Preempt mode : Yes Delay time : 0 centiseconds
Auth type : None
Virtual IP : 192.168.0.254
Virtual MAC : 0000-5e00-0101
Master IP : 192.168.0.252
IPv4 virtual router information:
Running mode : Standard
Total number of virtual routers : 1
Interface Vlan-interface10
VRID : 1 Adver timer : 100 centiseconds
Admin status : Up State : Backup
Config pri : 100 Running pri : 100
Preempt mode : Yes Delay time : 0 centiseconds
Become master : 3110 millisecond left
Auth type : None
Virtual IP : 192.168.0.254
Master IP : 192.168.0.252
注意事项：
VRRP默认优先级是100
测试SWA链路故障前后：
[SWA-Vlan-interface10]shutdown
[SWA-Vlan-interface10]display vrrp verbose
IPv4 virtual router information:
Running mode : Standard
Total number of virtual routers : 1
Interface Vlan-interface10
VRID : 1 Adver timer : 100 centiseconds
Admin status : Up State : Initialize
Config pri : 120 Running pri : 120
Preempt mode : Yes Delay time : 0 centiseconds
Auth type : None
Virtual IP : 192.168.0.254
Master IP : 0.0.0.0
[SWB-GigabitEthernet1/0/2]display vrrp verbose
IPv4 virtual router information:
Running mode : Standard
Total number of virtual routers : 1
Interface Vlan-interface10
VRID : 1 Adver timer : 100 centiseconds
Admin status : Up State : Master
Config pri : 100 Running pri : 100
Preempt mode : Yes Delay time : 0 centiseconds
Auth type : None
Virtual IP : 192.168.0.254
Virtual MAC : 0000-5e00-0101
Master IP : 192.168.0.253
[SWA-Vlan-interface10]undo shutdown
[SWA-Vlan-interface10]display vrrp verbose
IPv4 virtual router information:
Running mode : Standard
Total number of virtual routers : 1
Interface Vlan-interface10
VRID : 1 Adver timer : 100 centiseconds
Admin status : Up State : Master
Config pri : 120 Running pri : 120
Preempt mode : Yes Delay time : 0 centiseconds
Auth type : None
Virtual IP : 192.168.0.254
Virtual MAC : 0000-5e00-0101
Master IP : 192.168.0.252
//当一个SWA发送故障，还能用SWB继续进行转发。
实验任务二：配置VRRP监视接口
- 建立物理连接
- 基本配置（如实验任务一）
- 测试SWA上行链路故障
[SWA-Vlan-interface100]shutdown
[SWA-Vlan-interface100]display vrrp verbose
IPv4 virtual router information:
Running mode : Standard
Total number of virtual routers : 1
Interface Vlan-interface10
VRID : 1 Adver timer : 100 centiseconds
Admin status : Up State : Master
Config pri : 120 Running pri : 120
Preempt mode : Yes Delay time : 0 centiseconds
Auth type : None
Virtual IP : 192.168.0.254
Virtual MAC : 0000-5e00-0101
Master IP : 192.168.0.252
//SWA上行链路故障不会更改虚拟网关为SWB - 配置VRRP监视接口，检查VRRP特性
[SWA]track 1 interface Vlan-interface 100
[SWA-Vlan-interface10]vrrp vrid 1 track 1 priority reduced 30
[SWA]display vrrp verbose
IPv4 virtual router information:
Running mode : Standard
Total number of virtual routers : 1
Interface Vlan-interface10
VRID : 1 Adver timer : 100 centiseconds
Admin status : Up State : Backup
Config pri : 120 Running pri : 90
Preempt mode : Yes Delay time : 0 centiseconds
Become master : 3010 millisecond left
Auth type : None
Virtual IP : 192.168.0.254
Master IP : 192.168.0.253
VRRP track information:
Track object : 1 State : Negative Pri reduced : 30
从显示信息中可以看出，SWB为VRRP单备份组1master设备，备份组1 的虚拟ip地址为192.168.0.254/24 ， VRRP状态切换正常，VRRP监视接口功能正常。
实验任务三：配置VRRP双备份组
-
建立物理连接
-
基本配置
在实验任务一的基础上，在SWA和SWB上创建一个VLAN20接口，弄个虚拟网关。
3.SWA上配置VLAN20的备份组2的虚拟ip地址
[SWA-Vlan-interface20]ip ad 192.168.1.252 24
[SWA-Vlan-interface20]vrrp vrid 2 virtual-ip 192.168.1.254
[SWA-Vlan-interface20]vrrp vrid 2 preempt-mode
[SWA-Vlan-interface20]vrrp vrid 2 priority 120
SWB进行同上操作。 -
检查VRRP端口
[SWA]display vrrp verbose
IPv4 virtual router information:
Running mode : Standard
Total number of virtual routers : 2
Interface Vlan-interface10
VRID : 1 Adver timer : 100 centiseconds
Admin status : Up State : Master
Config pri : 120 Running pri : 120
Preempt mode : Yes Delay time : 0 centiseconds
Auth type : None
Virtual IP : 192.168.0.254
Virtual MAC : 0000-5e00-0101
Master IP : 192.168.0.252
VRRP track information:
Track object : 1 State : Positive Pri reduced : 30
Interface Vlan-interface20
VRID : 2 Adver timer : 100 centiseconds
Admin status : Up State : Master
Config pri : 120 Running pri : 120
Preempt mode : Yes Delay time : 0 centiseconds
Auth type : None
Virtual IP : 192.168.1.254
Virtual MAC : 0000-5e00-0102
Master IP : 192.168.1.252
配置的注意事项：
- 备份组交换机SWA,SWB下面的接口必须允许下面SWC接口vlan通过，SWC配置基于端口vlan。
- 备份组1 和2要注意vlan接口必须是up
- 备份组上面的链路必须关闭stp
- 备份组使能接口学习网段，连接SWA的链路设置为静默口。
配置虚拟Ip地址和接口地址在同一个网段，且为合法的主机地址，备份组才能够就正常工作，否则，不在同一个网段，或为接口ip地址所在网段的网络地址或网络广播地址，虽然可以配置成功，但是备份组会始终处于initialize状态，vrrp不起作用。
浙公网安备 33010602011771号