VRRP技術專題PPT學習教案

1、會計學1VRRP技術專題技術專題Page 2目目 標標第1頁/共46頁Page 3課程內容課程內容第2頁/共46頁Page 4NETWORK單點故障單點故障192.168.1.254192.168.1.1/24網(wǎng)關1.254192.168.1.2/24網(wǎng)關1.254192.168.1.3/24網(wǎng)關1.254第3頁/共46頁Page 5R1R2GE0/0/0192.168.1.253/24GE0/0/0192.168.1.252/24VRRPMasterBackupVirtual Router192.168.1.254192.168.1.2/24網(wǎng)網(wǎng)關關1.254第4頁/共46頁Page 6R1

2、R2GE0/0/0192.168.1.253/24GE0/0/0192.168.1.252/24MasterBackupVirtual Router192.168.1.254192.168.1.2/24網(wǎng)關1.254第5頁/共46頁Page 7R1R2GE0/0/0192.168.1.253/24GE0/0/0192.168.1.252/24BackupMasterVirtual Router192.168.1.254192.168.1.2/24網(wǎng)關1.254第6頁/共46頁Page 8第7頁/共46頁Page 9第8頁/共46頁Page 10第9頁/共46頁Page 11Internet A

3、ddress Physical Address 192.168.1.252 00-E0-FC-03-AD-5A 192.168.1.253 00-E0-FC-03-C9-82 192.168.1.254 00-00-5E-00-01-01 R1R2GE0/0/0192.168.1.253/24GE0/0/0192.168.1.252/24VRRPMasterBackupVirtual Router192.168.1.25400-00-5E-00-01-01 第10頁/共46頁Page 12第11頁/共46頁Page 13InitializeMasterBackupShutdownShutdow

4、nStartup , winStartup , loss收到優(yōu)先級更高的VRRP通告Master_Down_Timer第12頁/共46頁Page 14 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |Version| Type | Virtual Rtr ID| Priority | Count IP Addrs| +-+-+-+-+-+-+-+-+-+-+-+-+-

5、+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Auth Type | Adver Int | Checksum | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | IP Address (1) | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | . | | . | | . | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-

6、+-+-+-+-+-+ | IP Address (n) | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Authentication Data (1) | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Authentication Data (2) | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+第13頁/共46頁nCount

7、IP Addrs：配置的備份組虛擬地址個數(shù)(1個備份組可對應多個虛擬地址)nAuthentication Type: 驗證類型，協(xié)議中指定了3種類型0 - No Authentication1 - Simple Text Password2 - IP Authentication HeaderPage 15第14頁/共46頁Page 16第15頁/共46頁Page 17課程內容課程內容第16頁/共46頁Page 18R1R2GE0/0/0192.168.1.253/24GE0/0/0192.168.1.252/24MasterBackup192.168.1.1/24網(wǎng)關1.254Virtual

8、 Router192.168.1.254VRRP第17頁/共46頁Page 19配置虛擬路由器1的搶占時間為20s，搶占時間是指當主設備因為故障修復重新切換為主狀態(tài)時等待的時間第18頁/共46頁Page 20第19頁/共46頁Page 21本設備在該VRRP組的狀態(tài)，為masterVRRP組ID接口在本VRRP組的優(yōu)先級開啟搶占，且延遲時間為20s第20頁/共46頁Page 22第21頁/共46頁Page 23本設備在該VRRP組的狀態(tài)，為master接口在本VRRP組的優(yōu)先級開啟搶占Master的IP地址第22頁/共46頁Page 24R1R2GE0/0/0192.168.1.253/24G

9、E0/0/0192.168.1.252/24MasterBackup192.168.1.1/24網(wǎng)關1.254R1的VRRP組跟蹤接口GE0/0/1的狀態(tài)，如果接口DOWN了，那么立即將VRRP組優(yōu)先級減去30，比R2的更小。GE0/0/1VRRP第23頁/共46頁Page 25第24頁/共46頁Page 26R1R2GE0/0/0192.168.1.253/24GE0/0/0192.168.1.252/24MasterSlave192.168.1.1/24網(wǎng)關1.254R1、R2之間配置了一組BFD，用于快速檢測雙方接口的狀態(tài)，一旦發(fā)現(xiàn)對端接口連通性出現(xiàn)問題，立即引發(fā)VRRP發(fā)生切換。VRR

10、P第25頁/共46頁Page 27第26頁/共46頁Page 28第27頁/共46頁Page 29R1GE0/0/0.10192.168.1.253/24dot1q termination vid 10vrrp vrid 1 MasterGE0/0/0.20192.168.2.252/24dot1q termination vid 20vrrp vrid 2 SlavePC1 VLAN10192.168.1.1/24網(wǎng)關1.254PC2 VLAN20192.168.2.1/24網(wǎng)關2.254R2TrunkTrunkGE0/0/0.10192.168.1.252/24dot1q terminat

11、ion vid 10vrrp vrid 1 SlaveGE0/0/0.20192.168.2.253/24dot1q termination vid 20vrrp vrid 2 Master內網(wǎng)存在兩個VLAN：10及20；現(xiàn)在要求在網(wǎng)絡正常的情況下，vlan10流量走左側，vlan20走右側，并且能夠在左右兩側鏈路或R1、R2發(fā)生故障時自動切換。GE0/0/0GE0/0/0第28頁/共46頁Page 30第29頁/共46頁Page 31第30頁/共46頁Page 32SW1interface vlanif 10192.168.10.253/24vrrp vrid 1 Master192.16

12、8.10.1/24網(wǎng)關192.168.10.254SW2interface vlanif 10192.168.10.252/24vrrp vrid 1 BackupTrunkTrunkG0/0/22G0/0/23G0/0/22G0/0/23G0/0/1VRRPSW3第31頁/共46頁Page 33第32頁/共46頁Page 34第33頁/共46頁Page 35SW1interface vlanif 10192.168.10.253/24vrrp vrid 1 MasterPC1（VLAN10）192.168.10.1/24網(wǎng)關192.168.10.254SW2interface vlanif

13、10192.168.10.252/24vrrp vrid 1 BackupTrunkTrunkG0/0/22G0/0/23G0/0/22G0/0/23G0/0/1VRRPSW3interface vlanif 20192.168.20.252/24vrrp vrid 2 Backupinterface vlanif 20192.168.20.253/24vrrp vrid 2 MasterPC2（VLAN20）192.168.20.1/24網(wǎng)關192.168.20.254G0/0/2第34頁/共46頁Page 36Gi0/0/22Gi0/0/23Gi0/0/24Gi0/0/24SW1SW2SW

14、3Instance1 vlan 10 20 PrimaryInstance2 vlan 30 40 SecondaryInstance1 vlan 10 20 SecondaryInstance2 vlan 30 40 PrimaryVrid 1 for Instance 1 MasterVrid 2 for Instance 2 SlaveVrid 1 for Instance 1 SlaveVrid 2 for Instance 2 MasterGi0/0/22Gi0/0/23第35頁/共46頁Page 37interface Vlanif10 ip address 192.168.10.

15、253 255.255.255.0 vrrp vrid 10 virtual-ip 192.168.10.254 vrrp vrid 10 priority 120 vrrp vrid 10 preempt-mode timer delay 20interface Vlanif20 ip address 192.168.20.253 255.255.255.0 vrrp vrid 20 virtual-ip 192.168.20.254 vrrp vrid 20 priority 120 vrrp vrid 20 preempt-mode timer delay 20interface Vla

16、nif30 ip address 192.168.30.252 255.255.255.0 vrrp vrid 30 virtual-ip 192.168.30.254interface Vlanif40 ip address 192.168.40.252 255.255.255.0 vrrp vrid 40 virtual-ip 192.168.40.254第36頁/共46頁Page 38interface Vlanif10 ip address 192.168.10.252 255.255.255.0 vrrp vrid 10 virtual-ip 192.168.10.254interf

17、ace Vlanif20 ip address 192.168.20.252 255.255.255.0 vrrp vrid 20 virtual-ip 192.168.20.254interface Vlanif30 ip address 192.168.30.253 255.255.255.0 vrrp vrid 30 virtual-ip 192.168.30.254 vrrp vrid 30 priority 120 vrrp vrid 30 preempt-mode timer delay 20interface Vlanif40 ip address 192.168.40.253

18、255.255.255.0 vrrp vrid 40 virtual-ip 192.168.40.254 vrrp vrid 40 priority 120 vrrp vrid 40 preempt-mode timer delay 20第37頁/共46頁Page 39第38頁/共46頁Page 40課程內容課程內容第39頁/共46頁Page 41R1R2GE0/0/0GE0/0/0VRRP1.由于VRRP協(xié)議報文是組播數(shù)據(jù)包，這就限制了VRRP的成員接口必須處于一個LAN或者說一個廣播域內，否則VRRP報文將無法正常收發(fā)，這時就會出現(xiàn)雙主故障。2.在上圖中，二層交換機就構成了一個二層組播環(huán)境，也就R1、R2的GE0/0/0口處于一個廣播域內，那