《华为交换机VRRP配置.doc》由会员分享,可在线阅读,更多相关《华为交换机VRRP配置.doc(9页珍藏版)》请在淘文阁 - 分享文档赚钱的网站上搜索。
1、.word.图图 3-1283-128 配置 VRRP 主备备份组网图配置思路配置思路采用 VRRP 主备备份实现网关冗余备份,配置思路如下:1.配置各设备接口 IP 地址及路由协议,使各设备间网络层连通。2.在 SwitchA 和 SwitchB 上配置 VRRP 备份组。其中,SwitchA 上配置较高优先级和 20秒抢占延时,作为 Master 设备承当流量转发;SwitchB 上配置较低优先级,作为备用交换机,实现网关冗余备份。操作步骤操作步骤1.配置设备间的网络互连#配置设备各接口的 IP 地址,以 SwitchA 为例。SwitchB 和 SwitchC 的配置与 SwitchA
2、类似,详见配置文件。system-viewsystem-viewHUAWEI sysnamesysname SwitchASwitchASwitchA vlanvlan batchbatch 100100 300300SwitchA interfaceinterface gigabitethernetgigabitethernet 1/0/11/0/1SwitchA-GigabitEthernet1/0/1 portport link-typelink-type hybridhybridSwitchA-GigabitEthernet1/0/1 portport hybridhybrid pvi
3、dpvid vlanvlan 300300SwitchA-GigabitEthernet1/0/1 portport hybridhybrid untaggeduntagged vlanvlan 300300SwitchA-GigabitEthernet1/0/1 quitquitSwitchA interfaceinterface gigabitethernetgigabitethernet 1/0/21/0/2SwitchA-GigabitEthernet1/0/2 portport link-typelink-type hybridhybrid.word.SwitchA-GigabitE
4、thernet1/0/2 portport hybridhybrid pvidpvid vlanvlan 100100SwitchA-GigabitEthernet1/0/2 portport hybridhybrid untaggeduntagged vlanvlan 100100SwitchA-GigabitEthernet1/0/2 quitquitSwitchA interfaceinterface vlanifvlanif 100100SwitchA-Vlanif100 ip ip addressaddress 10.1.1.110.1.1.1 2424SwitchA-Vlanif1
5、00 quitquitSwitchA interfaceinterface vlanifvlanif 300300SwitchA-Vlanif300 ip ip addressaddress 192.168.1.1192.168.1.1 2424SwitchA-Vlanif300 quitquit#配置 Switch 的二层转发功能。system-viewsystem-viewHUAWEI sysnamesysname SwitchSwitchSwitch vlanvlan 100100Switch-vlan100 quitquitSwitch interfaceinterface gigab
6、itethernetgigabitethernet 1/0/11/0/1Switch-GigabitEthernet1/0/1 portport link-typelink-type hybridhybridSwitch-GigabitEthernet1/0/1 portport hybridhybrid pvidpvid vlanvlan 100100Switch-GigabitEthernet1/0/1 portport hybridhybrid untaggeduntagged vlanvlan 100100Switch-GigabitEthernet1/0/1 quitquitSwit
7、ch interfaceinterface gigabitethernetgigabitethernet 1/0/21/0/2Switch-GigabitEthernet1/0/2 portport link-typelink-type hybridhybridSwitch-GigabitEthernet1/0/2 portport hybridhybrid pvidpvid vlanvlan 100100Switch-GigabitEthernet1/0/2 portport hybridhybrid untaggeduntagged vlanvlan 100100Switch-Gigabi
8、tEthernet1/0/2 quitquit#配置 SwitchA、SwitchB 和 SwitchC 间采用 OSPF 协议进展互连。以 SwitchA 为例,SwitchB和 SwitchC 的配置与 SwitchA 类似,详见配置文件。SwitchA ospfospf 1 1SwitchA-ospf-1 areaarea 0 0SwitchA-ospf-1-area-0.0.0.0 networknetwork 10.1.1.010.1.1.0 0.0.0.2550.0.0.255SwitchA-ospf-1-area-0.0.0.0 networknetwork 192.168.1.
9、0192.168.1.0 0.0.0.2550.0.0.255SwitchA-ospf-1-area-0.0.0.0 quitquitSwitchA-ospf-1 quitquit2.配置 VRRP 备份组#在 SwitchA 上创立 VRRP 备份组 1,配置 SwitchA 在该备份组中的优先级为 120,并配置抢占时间为 20 秒。SwitchA interfaceinterface vlanifvlanif 100100.word.SwitchA-Vlanif100 vrrpvrrp vridvrid 1 1 virtual-ipvirtual-ip 10.1.1.11110.1.1.
10、111SwitchA-Vlanif100 vrrpvrrp vridvrid 1 1 prioritypriority 120120/设备在 VRRP 备份组中的优先级缺省为100,修改 Master 设备的优先级大于 Backup 设备SwitchA-Vlanif100 vrrpvrrp vridvrid 1 1 preempt-modepreempt-mode timertimer delaydelay 2020/设备在 VRRP 备份组中缺省采用立即抢占方式。修改 Master 设备的延迟抢占时间,以防止在网络环境不稳定时,由于双方频繁抢占而导致流量中断的问题SwitchA-Vlanif
11、100 quitquit#在 SwitchB 上创立 VRRP 备份组 1,其在该备份组中的优先级采用缺省值 100 不需要配置。SwitchB interfaceinterface vlanifvlanif 100100SwitchB-Vlanif100 vrrpvrrp vridvrid 1 1 virtual-ipvirtual-ip 10.1.1.11110.1.1.111SwitchB-Vlanif100 quitquit3.验证配置结果#完成上述配置以后,在 SwitchA 和 SwitchB 上分别执行 displaydisplay vrrpvrrp 命令,可以看到SwitchA
12、 在备份组中的状态为 Master,SwitchB 在备份组中的状态为 Backup。SwitchA displaydisplay vrrpvrrpVlanif100|Virtual Router 1StateState:MasterMasterVirtual IP:10.1.1.111Master IP:10.1.1.1PriorityRun:120PriorityConfig:120MasterPriority:120Preempt:YESDelay Time:20 sTimerRun:1 sTimerConfig:1 sAuth type:NONEVirtual MAC:0000-5e0
13、0-0101Check TTL:YESConfig type:normal-vrrpBackup-forward:disabledCreate time:2021-01-12 20:15:46Last change time:2021-01-12 20:15:46SwitchB displaydisplay vrrpvrrpVlanif100|Virtual Router 1StateState:BackupBackup.word.Virtual IP:10.1.1.111Master IP:10.1.1.1PriorityRun:100PriorityConfig:100MasterPrio
14、rity:120Preempt:YESDelay Time:0 sTimerRun:1 sTimerConfig:1 sAuth type:NONEVirtual MAC:0000-5e00-0101Check TTL:YESConfig type:normal-vrrpBackup-forward:disabledCreate time:2021-01-12 20:15:46Last change time:2021-01-12 20:15:46#在 SwitchA 和 SwitchB 上执行 displaydisplay ip ip routing-tablerouting-table 命
15、令,SwitchA 上可以看到路由表中有一条目的地址为虚拟 IP 地址的直连路由,而 SwitchB 上该路由为 OSPF 路由。SwitchA和 SwitchB 上的显示信息如下。SwitchA displaydisplay ip ip routing-tablerouting-tableRoute Flags:R-relay,D-download to fib-Routing Tables:PublicDestinations:9Routes:10Destination/MaskProtoPreCostFlags NextHopInterface10.1.1.0/24Direct00D10
16、.1.1.1Vlanif10010.1.1.1/32Direct00D127.0.0.1Vlanif10010.1.1.111/32Direct00D127.0.0.1Vlanif10010.1.1.111/32Direct00D127.0.0.1Vlanif100127.0.0.0/8Direct00D127.0.0.1InLoopBack0127.0.0.1/32Direct00D127.0.0.1InLoopBack0172.16.1.0/24OSPF102D192.168.1.2Vlanif300192.168.1.0/24Direct00D192.168.1.1Vlanif30019
17、2.168.1.1/32Direct00D127.0.0.1Vlanif300192.168.2.0/24OSPF102D10.1.1.2Vlanif100OSPF102D192.168.1.2Vlanif300.word.SwitchB displaydisplay ip ip routing-tablerouting-tableRoute Flags:R-relay,D-download to fib-Routing Tables:PublicDestinations:9Routes:10Destination/MaskProtoPreCostFlags NextHopInterface1
18、0.1.1.0/24Direct00D10.1.1.2Vlanif10010.1.1.2/32Direct00D127.0.0.1Vlanif10010.1.1.111/32OSPF102D10.1.1.1Vlanif10010.1.1.111/32OSPF102D10.1.1.1Vlanif100127.0.0.0/8Direct00D127.0.0.1InLoopBack0127.0.0.1/32Direct00D127.0.0.1InLoopBack0172.16.1.0/24OSPF102D192.168.2.2Vlanif200192.168.1.0/24OSPF102D10.1.1
19、.1Vlanif100OSPF102D192.168.2.2Vlanif200192.168.2.0/24Direct00D192.168.2.1Vlanif200192.168.2.1/32Direct00D127.0.0.1Vlanif200#在 SwitchA 的接口 GE1/0/2 上执行 shutdownshutdown 命令,模拟 SwitchA 出现故障。SwitchA interfaceinterface gigabitethernetgigabitethernet 1/0/21/0/2SwitchA-GigabitEthernet1/0/2 shutdownshutdownS
20、witchA-GigabitEthernet1/0/2 quitquit#在 SwitchB 上执行 displaydisplay vrrpvrrp 命令查看 VRRP 状态信息,可以看到 SwitchB 的状态是Master。SwitchB displaydisplay vrrpvrrpVlanif100|Virtual Router 1StateState:MasterMasterVirtual IP:10.1.1.111Master IP:10.1.1.2PriorityRun:100PriorityConfig:100MasterPriority:100Preempt:YESDelay
21、 Time:0 sTimerRun:1 sTimerConfig:1 sAuth type:NONE.word.Virtual MAC:0000-5e00-0101Check TTL:YESConfig type:normal-vrrpBackup-forward:disabledCreate time:2021-01-12 20:15:46Last change time:2021-01-12 20:18:40#在 SwitchA 的接口 GE1/0/2 上执行 undoundo shutdownshutdown 命令。SwitchA interfaceinterface gigabitet
22、hernetgigabitethernet 1/0/21/0/2SwitchA-GigabitEthernet1/0/2 undoundo shutdownshutdownSwitchA-GigabitEthernet1/0/2 quitquit#等待20秒后,在SwitchA上执行displaydisplay vrrvrrp p命令查看VRRP状态信息,可以看到SwitchA的状态恢复成 Master。SwitchA displaydisplay vrrpvrrpVlanif100|Virtual Router 1StateState:MasterMasterVirtual IP:10.1.
23、1.111Master IP:10.1.1.1PriorityRun:120PriorityConfig:120MasterPriority:120Preempt:YESDelay Time:20 sTimerRun:1 sTimerConfig:1 sAuth type:NONEVirtual MAC:0000-5e00-0101Check TTL:YESConfig type:normal-vrrpBackup-forward:disabledCreate time:2021-01-12 20:15:46Last change time:2021-01-12 20:20:56配置文件配置文
24、件SwitchA 的配置文件#sysname SwitchA#.word.vlan batch 100 300#interface Vlanif100ip address 10.1.1.1 255.255.255.0vrrp vrid 1 virtual-ip 10.1.1.111vrrp vrid 1 priority 120vrrp vrid 1 preempt-mode timer delay 20#interface Vlanif300ip address 192.168.1.1 255.255.255.0#interface GigabitEthernet1/0/1port link
25、-type hybridport hybrid pvid vlan 300port hybrid untagged vlan 300#interface GigabitEthernet1/0/2port link-type hybridport hybrid pvid vlan 100port hybrid untagged vlan 100#ospf 1area 0.0.0.0network 10.1.1.0 0.0.0.255network 192.168.1.0 0.0.0.255#returnSwitchB 的配置文件#sysname SwitchB#vlan batch 100 20
26、0#interface Vlanif100ip address 10.1.1.2 255.255.255.0vrrp vrid 1 virtual-ip 10.1.1.111#interface Vlanif200ip address 192.168.2.1 255.255.255.0#interface GigabitEthernet1/0/1.word.port link-type hybridport hybrid pvid vlan 200port hybrid untagged vlan 200#interface GigabitEthernet1/0/2port link-type
27、 hybridport hybrid pvid vlan 100port hybrid untagged vlan 100#ospf 1area 0.0.0.0network 10.1.1.0 0.0.0.255network 192.168.2.0 0.0.0.255#returnSwitchC 的配置文件#sysname SwitchC#vlan batch 200 300 400#interface Vlanif200ip address 192.168.2.2 255.255.255.0#interface Vlanif300ip address 192.168.1.2 255.255
28、.255.0#interface Vlanif400ip address 172.16.1.1 255.255.255.0#interface GigabitEthernet1/0/1port link-type hybridport hybrid pvid vlan 300port hybrid untagged vlan 300#interface GigabitEthernet1/0/2port link-type hybridport hybrid pvid vlan 200port hybrid untagged vlan 200#interface GigabitEthernet1
29、/0/3.word.port link-type hybridport hybrid pvid vlan 400port hybrid untagged vlan 400#ospf 1area 0.0.0.0network 172.16.1.0 0.0.0.255network 192.168.1.0 0.0.0.255network 192.168.2.0 0.0.0.255#returnSwitch 的配置文件#sysname Switch#vlan batch 100#interface GigabitEthernet1/0/1port link-type hybridport hybrid pvid vlan 100port hybrid untagged vlan 100#interface GigabitEthernet1/0/2port link-type hybridport hybrid pvid vlan 100port hybrid untagged vlan 100#return
限制150内