華為交換機VRRP配置

1、圖3-128 配置VRRP主備備份組網(wǎng)圖VRRP URID 1Virtuill IP Address:SwitchAI0.1J J11G&1/0/2 Master192.168.1.1/24LsGE 1/0/II1192.166,1,2/24GE VO/3HostA GE1O21C.1.1.100/24GE 1/02 192.166.2.2/24"八GEI/0/1 黔陣伯2.16321版 10.1.1.2/24 SwitchBBackup配置思路采用VRRP主備備份實現(xiàn)網(wǎng)關(guān)冗余備份，配置思路如下:1.配置各設(shè)備接口IP地址及路由協(xié)議，使各設(shè)備間網(wǎng)絡(luò)層連通。2.在 Switch

2、A 和SwitchB上配置VRRP備份組。其中，SwitchA上配置較高優(yōu)先級和20秒搶占延時,作為 Master設(shè)備承擔(dān)流量轉(zhuǎn)發(fā)；SwitchB上配置較低優(yōu)先級，作為備用交換機，實現(xiàn)網(wǎng)關(guān)冗余備份。操作步驟1.配置設(shè)備間的網(wǎng)絡(luò)互連#配置設(shè)備各接口的IP地址，以SwitchA 為例。SwitchB和SwitchC 的配置與SwitchA類似，詳見配置文件。<HUAWEI> system-viewHUAWEI sys name SwitchASwitchA vla n batch 100 300SwitchA in terface gigabitethernet 1/0/1Switch

3、A-GigabitEthernet1/0/1port lin k-t ype hybridport hybrid p vid vla n 300SwitchA-GigabitEthernet1/0/1SwitchA-GigabitEthernet1/0/1 port hybrid un tagged vla n 300SwitchA-GigabitEthernet1/0/1quitSwitchA in terface gigabitethernet 1/0/2SwitchA-GigabitEthernet1/0/2port lin k-t ype hybridSwitchA-GigabitEt

4、hernet1/0/2port hybrid p vid vla n 100SwitchA-GigabitEthernet1/0/2 port hybrid un tagged vla n 100quitSwitchA-GigabitEthernet1/0/2SwitchAin terface vla nif 100 SwitchA-Vla nif100 ip address 10.1.1.1 24 SwitchA-Vla nif100 quitSwitchAin terface vla nif 300SwitchA-Vla nif300ip address 192.168.1.1 24 Sw

5、itchA-Vla nif300 quit#配置Switch的二層轉(zhuǎn)發(fā)功能。<HUAWEI> system-view HUAWEI sys name Switch Switch vla n 100Switch-vla n100quit Switch in terface gigabitether net 1/0/1Switch-GigabitEthernet1/0/1port lin k-t ype hybridport hybrid p vid vla n 100Switch-GigabitEthernet1/0/1Switch-GigabitEthernet1/0/1 port

6、 hybrid un tagged vla n 100Switch-GigabitEthernet1/0/1quitSwitch in terface gigabitethernet 1/0/2Switch-GigabitEthernet1/0/2port lin k-t ype hybridSwitch-GigabitEthernet1/0/2port hybrid p vid vla n 100Switch-GigabitEthernet1/0/2 port hybrid un tagged vla n 100quitSwitch-GigabitEthernet1/0/2# 配置 Swit

7、chA、SwitchB和SwitchC間采用OSPF協(xié)議進(jìn)行互連。以 SwitchA 為例，SwitchB 和SwitchC的配置與SwitchA類似，詳見配置文件。SwitchA ospf 1SwitchA-os pf-1area 0SwitchA-os pf-1-area-0.0.0.0network 10.1.1.0 0.0.0.255SwitchA-os pf-1-area-0.0.0.0network 192.168.1.0 0.0.0.255quitSwitchA-os pf-1-area-0.0.0.0SwitchA-os pf-1quit2.配置VRRP備份組#在SwitchA

8、 上創(chuàng)建VRRP備份組1，配置SwitchA 在該備份組中的優(yōu)先級為120，并配置搶占時間為 20秒。SwitchAin terface vla nif 100SwitchA-Vla nif100vrrp vrid 1 virtual-ip 10.1.1.111SwitchA-Vla niflOOvrrp vrid 1 priority 120/設(shè)備在VRRP備份組中的優(yōu)先級缺省為SwitchA-Vla nif100vrrp vrid 1 preemp t-mode timer delay 20/設(shè)備在VRRP備份組中缺省采用立即搶占方式。修改Master設(shè)備的延遲搶占時間，以避免在網(wǎng)絡(luò)環(huán)境1

9、00，修改Master設(shè)備的優(yōu)先級大于Backup設(shè)備不穩(wěn)定時，由于雙方頻繁搶占而導(dǎo)致流量中斷的問題SwitchA-Vla nif100 quit100 （不#在SwitchB上創(chuàng)建VRRP備份組1，其在該備份組中的優(yōu)先級采用缺省值需要配置）。SwitchB in terface vla nif 100SwitchB-Vla nif100vrr p vrid 1 virtual-i p 10.1.1.111SwitchB-Vla nif100quit3.驗證配置結(jié)果#完成上述配置以后,在 SwitchA 和SwitchB 上分別執(zhí)行dis play vrrp命令，可以看到SwitchA 在備份

10、組中的狀態(tài)為 Master ，SwitchB在備份組中的狀態(tài)為Backup 。SwitchAdis play vrrpVla nif100 | Virtual Router 1State : MasterVirtual IP : 10.1.1.111Master IP : 10.1.1.1PriorityRun : 120PriorityCo nfig : 120MasterPriority : 120Preempt : YESDelay Time : 20 sTimerRu n : 1 sTimerC onfig : 1 sAuth type : NONEVirtual MAC : 0000

11、-5e00-0101Check TTL : YESConfig type : nor mal-vrr pBacku p-forward : disabledCreate time : 2012-01-12 20:15:46Last cha nge time : 2012-01-12 20:15:46 SwitchB dis play vrrpVla nif100 | Virtual Router 1State : Backu pVirtual IP : 10.1.1.111Master IP : 10.1.1.1PriorityRu n : 100PriorityCo nfig : 100Ma

12、sterPriority : 120Preempt : YESDelay Time : 0 sTimerRu n : 1 sTimerC onfig : 1 sAuth type : NONEVirtual MAC : 0000-5e00-0101Check TTL : YESConfig type : nor mal-vrr pBacku p-forward : disabledCreate time : 2012-01-12 20:15:46Last cha nge time : 2012-01-12 20:15:46#在SwitchA 和SwitchB 上執(zhí)行dis play ip ro

13、uti ng-table命令，SwitchA上可以看到路由表中有一條目的地址為虛擬IP地址的直連路由，而SwitchB上該路由為上的顯示信息如下。OSPF 路由。SwitchA 和 SwitchBSwitchAdis play ip rout in g-tableRoute Flags: R - relay, D - dow nl oad to fibRouti ng Tables: P ublicDest in ati ons : 9Routes : 10Dest in atio n/MaskProtoPreCostFlags NextHopIn terface10.1.1.0/24Dire

14、ct10.1.1.1Vla nif10010.1.1.1/32Direct127.0.0.1Vla nif10010.1.1.111/32Direct127.0.0.1Vla nif100127.0.0.0/8Direct127.0.0.1InLoopBack0127.0.0.1/32Direct127.0.0.1InLoopBack0172.16.1.0/24OSPF10192.168.1.2Vla nif300192.168.1.0/24Direct192.168.1.1Vla nif300192.168.1.1/32Direct127.0.0.1Vla nif300192.168.2.0

15、/24OSPF1010.1.1.2Vla nif100OSPF10192.168.1.2Vla nif300SwitchBdis play ip rout in g-tableRoute Flags: R - relay, D - dow nl oad to fibRouti ng Tables: P ublicDest in ati ons : 9Routes : 10Dest in atio n/MaskProtoPreCostFlags NextHopIn terface10.1.1.0/24Direct10.1.1.2Vla nif10010.1.1.2/32Direct127.0.0

16、.1Vla nif10010.1.1.111/32OSPF1010.1.1.1Vla nif100127.0.0.0/8Direct127.0.0.1InLoopBack0127.0.0.1/32Direct127.0.0.1InLoopBack0172.16.1.0/24192.168.1.0/24192.168.2.0/24192.168.2.1/32#在SwitchA的接口OSPF102D192.168.2.2Vla nif200OSPF102D10.1.1.1Vla nif100OSPF102D192.168.2.2Vlan if200Direct00D192.168.2.1Vlan

17、if200Direct00D127.0.0.1Vlan if200GE1/0/2上執(zhí)行shutdow n命令,模擬 SwitchA出現(xiàn)故障。SwitchA in terface gigabitethernet 1/0/2SwitchA-GigabitEthernet1/0/2shutdow nSwitchA-GigabitEthernet1/0/2quit#在SwitchB 上執(zhí)行dis play vrrp命令查看 VRR P狀態(tài)信息，可以看到SwitchB 的狀態(tài)是Master。SwitchB dis play vrrpVla nif100 | Virtual Router 1State :

18、 MasterVirtual IP : 10.1.1.111Master IP : 10.1.1.2PriorityRun : 100PriorityCo nfig : 100MasterPriority : 100Preempt : YESDelay Time : 0 sTimerRu n : 1 sTimerC onfig : 1 sAuth type : NONEVirtual MAC : 0000-5e00-0101Check TTL : YESConfig type : nor mal-vrr pBacku p-forward : disabledCreate time : 2012

19、-01-12 20:15:46Last cha nge time : 2012-01-12 20:18:40# 在 SwitchA 的接口 GE1/0/2 上執(zhí)行 undo shutdown命令。SwitchA in terface gigabitethernet 1/0/2undo shutdow nquitSwitchA-GigabitEthernet1/0/2 SwitchA-GigabitEthernet1/0/2#等待20秒后，在SwitchA 上執(zhí)行dis play vrrp命令查看 VRR P狀態(tài)信息，可以看到SwitchA的狀態(tài)恢復(fù)成Master 。SwitchAdis pla

20、y vrrpVla nif100 | Virtual Router 1State : MasterVirtual IP : 10.1.1.111Master IP : 10.1.1.1PriorityRun : 120PriorityCo nfig : 120MasterPriority : 120Preempt : YESDelay Time : 20 s配置文件TimerRu n : 1 sTimerC onfig : 1 sAuth type : NONEVirtual MAC : 0000-5e00-0101Check TTL : YESConfig type : nor mal-vr

21、r pBacku p-forward : disabledCreate time : 2012-01-12 20:15:46Last cha nge time : 2012-01-12 20:20:56? SwitchA的配置文件sys name SwitchAvlan batch 100 300in terface Vla nif100ip address 10.1.1.1 255.255.255.0vrrp vrid 1 virtual-i p 10.1.1.111vrrp vrid 1 priority 120vrrp vrid 1 preemp t-mode timer delay 2

22、0 in terface Via nif300ip address 192.168.1.1 255.255.255.0 in terface GigabitEthernet1/0/1port lin k-type hybridport hybrid p vid via n 300port hybrid un tagged via n 300 in terface GigabitEthernet1/0/2port lin k-type hybridport hybrid p vid via n 100port hybrid un tagged via n 100 ospf 1area 0.0.0

23、.0network 10.1.1.0 0.0.0.255network 192.168.1.0 0.0.0.255 return? SwitchB的配置文件sys name SwitchB vlan batch 100 200 in terface Vla niflOOip address 10.1.1.2 255.255.255.0vrrp vrid 1 virtual-i p 10.1.1.111 in terface Vla nif200ip address 192.168.2.1 255.255.255.0 in terface GigabitEthernet1/0/1port lin

24、 k-type hybridport hybrid p vid vla n 200port hybrid un tagged vla n 200 in terface GigabitEthernet1/0/2port lin k-type hybridport hybrid p vid vla n 100port hybrid un tagged via n 100 ospf 1area 0.0.0.0network 10.1.1.0 0.0.0.255network 192.168.2.0 0.0.0.255 return? SwitchC的配置文件sys name SwitchC vlan batch 200 300 400 in terface Vla nif200ip address 192.168.2.2 255.255.255.0 in terface Vla nif300ip a