华为设备VRRP配置

 双核心冗余结构下的网络架构中，HSRP,VRRP，STP都是最常用的几种技术。Cisco命名为HSRP（热备份路由协议），华为与H3C等国内的厂商称为虚拟路由冗余协议。名称不同但配置过程与作用却是类似的。

典型的网络结构如下图所示

此处我以client 1作为内网，ip地址段192.168.1.0/24 ，属于vlan3.  lsw1与ar1连接处使用10.10.10.0/30,

Lsw2与ar1连接处使用20.20.20.0/30,client2作为目标网段，使用30.30.30.0/24.路由器与交换机上跑OSPF协议，LSW1作为活跃路由器。

配置前的准备工作例如IP地址，主要是看VRRP的配置。

LSW3配置

[LSW3]vlan 3

[LSW3-vlan3]quit

[LSW3]int e0/0/3

[LSW3-Ethernet0/0/3]port link-type access

[LSW3-Ethernet0/0/3]port default vlan 3

[LSW3-Ethernet0/0/3]quit

[LSW3]int e0/0/1

[LSW3-Ethernet0/0/1]port link-type trunk

[LSW3-Ethernet0/0/1]port trunk allow-pass vlan all

[LSW3-Ethernet0/0/1]quit

[LSW3]int e0/0/2

[LSW3-Ethernet0/0/2]port link-type trunk

[LSW3-Ethernet0/0/2]port trunk allow-pass vlan all

[LSW3-Ethernet0/0/2]quit

LSW1上的配置

[LSW1]vlan 20

[LSW1-vlan20]quit

[LSW1]int vlan 20

[LSW1-Vlanif20]ip add 10.10.10.1 30

[LSW1-Vlanif20]quit

[LSW1]int e0/0/1

[LSW1-Ethernet0/0/1]port link-type trunk

[LSW1-Ethernet0/0/1]port trunk allow-pass vlan all

[LSW1-Ethernet0/0/1]quit

[LSW1]int e0/0/2

[LSW1-Ethernet0/0/2]port link-type access

[LSW1-Ethernet0/0/2]port default vlan 20

[LSW1-Ethernet0/0/2]quit

[LSW1]ospf 1

[LSW1-ospf-1]are 0

[LSW1-ospf-1-area-0.0.0.0]network 192.168.1.0 0.0.0.255

[LSW1-ospf-1-area-0.0.0.0]network 10.10.10.0 0.0.0.3

[LSW1-ospf-1-area-0.0.0.0]quit

[LSW1]vlan 3

[LSW1-vlan3]quit

[LSW1]int vlan 3

[LSW1-Vlanif3]ip address 192.168.1.100 24

[LSW1-Vlanif3]quit

[LSW1-Vlanif3]vrrp vrid 1 virtual-ip 192.168.1.1  //虚拟ip

[LSW1-Vlanif3]vrrp vrid 1 priority 200 //优先级

[LSW1-Vlanif3]vrrp vrid 1 preempt-mode timer delay 5 //在5s后进行抢占

[LSW1-Vlanif3]vrrp vrid 1 track interface Ethernet 0/0/2 reduced 100 //当发现端口down掉后优先级降低100,

LSW2

[LSW2]vlan 20

[LSW2-vlan20]quit

[LSW2]int vlan 20

[LSW2-Vlanif20]ip add 20.20.20.1 30

[LSW2-Vlanif20]quit

[LSW2]int e0/0/1

[LSW2-Ethernet0/0/1]port link-type trunk

[LSW2-Ethernet0/0/1]port trunk allow-pass vlan all

[LSW2]int e0/0/2

[LSW2-Ethernet0/0/2]port link-type access

[LSW2-Ethernet0/0/2]port default vlan 20

[LSW2-Ethernet0/0/2]quit

[LSW2]ospf 1

[LSW2-ospf-1]area 0

[LSW2-ospf-1-area-0.0.0.0]network 192.168.1.0 0.0.0.255

[LSW2-ospf-1-area-0.0.0.0]network 20.20.20.0 0.0.0.3

[LSW2-ospf-1-area-0.0.0.0]quit

[LSW2-ospf-1]

[LSW2]vlan 3

[LSW2-vlan3]quit

[LSW2]int vlan 3

[LSW2-Vlanif3]ip add 192.168.1.200 24

[LSW2-Vlanif3]vrrp vrid 1 virtual-ip 192.168.1.1

[LSW2-Vlanif3]vrrp vrid 1 priority 120

[LSW2-Vlanif3]vrrp vrid 1 preempt-mode timer delay 5

 

AR1

<AR1>sys

Enter system view, return user view with Ctrl+Z.

[AR1]int g0/0/0

[AR1-GigabitEthernet0/0/0]ip add 10.10.10.2 30

[AR1-GigabitEthernet0/0/0]quit

[AR1]int g0/0/1

[AR1-GigabitEthernet0/0/1]quit

[AR1]int g0/0/2

[AR1-GigabitEthernet0/0/2]ip add 30.30.30.1 24

[AR1-GigabitEthernet0/0/2]quit

[AR1-ospf-1]area 0

[AR1-ospf-1-area-0.0.0.0]network 10.10.10.0 0.0.0.3

[AR1-ospf-1-area-0.0.0.0]network 20.20.20.0 0.0.0.3

[AR1-ospf-1-area-0.0.0.0]network 30.30.30.0 0.0.0.255

 

配置完毕后在CLIENT1上PING CLIENT2

查看VRRP组的状态

[LSW1]display vrrp 1

  Vlanif3 | Virtual Router 1

    State : Master

    Virtual IP : 192.168.1.1

    Master IP : 192.168.1.100

    PriorityRun : 200

    PriorityConfig : 200

    MasterPriority : 200

    Preempt : YES   Delay Time : 5 s

    TimerRun : 1 s

    TimerConfig : 1 s

    Auth type : NONE

    Virtual MAC : 0000-5e00-0101

    Check TTL : YES

    Config type : normal-vrrp

    Track IF : Ethernet0/0/2   Priority reduced : 100

    IF state : UP

    Create time : 2013-04-27 18:13:50 UTC-08:00

    Last change time : 2013-04-27 18:30:33 UTC-08:00

[LSW2]disp vrrp 1

  Vlanif3 | Virtual Router 1

    State : Backup

    Virtual IP : 192.168.1.1

    Master IP : 192.168.1.100

    PriorityRun : 120

    PriorityConfig : 120

    MasterPriority : 200

    Preempt : YES   Delay Time : 5 s

    TimerRun : 1 s

    TimerConfig : 1 s

    Auth type : NONE

    Virtual MAC : 0000-5e00-0101

    Check TTL : YES

    Config type : normal-vrrp

    Create time : 2013-04-27 18:17:01 UTC-08:00

Last change time : 2013-04-27 18:55:32 UTC-08:00

 

将LSW1连接路由器的接口关闭再观察vrrp状态

[LSW1]disp vrrp 1

  Vlanif3 | Virtual Router 1

    State : Backup

    Virtual IP : 192.168.1.1

    Master IP : 192.168.1.200

    PriorityRun : 100

    PriorityConfig : 200

    MasterPriority : 120

    Preempt : YES   Delay Time : 5 s

    TimerRun : 1 s

    TimerConfig : 1 s

    Auth type : NONE

    Virtual MAC : 0000-5e00-0101

    Check TTL : YES

    Config type : normal-vrrp

    Track IF : Ethernet0/0/2   Priority reduced : 100

    IF state : DOWN

    Create time : 2013-04-27 18:13:50 UTC-08:00

    Last change time : 2013-04-27 19:03:03 UTC-08:00

 

[LSW2]disp vrrp 1

  Vlanif3 | Virtual Router 1

    State : Master

    Virtual IP : 192.168.1.1

    Master IP : 192.168.1.200

    PriorityRun : 120

    PriorityConfig : 120

    MasterPriority : 120

    Preempt : YES   Delay Time : 5 s

    TimerRun : 1 s

    TimerConfig : 1 s

    Auth type : NONE

    Virtual MAC : 0000-5e00-0101

    Check TTL : YES

    Config type : normal-vrrp

    Create time : 2013-04-27 18:17:01 UTC-08:00

    Last change time : 2013-04-27 19:03:02 UTC-08:00

 

切换期间客户端之间的通信丢了一个数据包

 

此结果说明，VRRP工作基本正常。