2台虚拟一台机器技术简述:
[HN--Center-SWA]dis c
sysname HN-ZJJCZJ-Center-SWA
#
local-server nas-ip 127.0.0.1 key huawei
#
domain default enable system
#
temperature-limit 0 10 70
temperature-limit 2 10 70
temperature-limit 5 10 70
temperature-limit 6 10 70
#
poe power max-value 2400
#
link-aggregation group 1 mode manual
#
vrrp ping-enable
#
mirroring-group 1 inbound GigabitEthernet5/0/1 to GigabitEthernet5/0/5 mirrored-to GigabitEthernet5/0/8
mirroring-group 2 outbound GigabitEthernet5/0/1 to GigabitEthernet5/0/5 mirrored-to GigabitEthernet5/0/8
#
radius scheme system
primary authentication 127.0.0.1 1645
primary accounting 127.0.0.1 1646
user-name-format without-domain
#
domain system
vlan-assignment-mode integer
access-limit disable
state active
idle-cut disable
self-service-url disable
messenger time disable
#
local-user admin
password simple boco123
service-type telnet
level 3
#
stp mode stp
stp instance 0 root primary
stp TC-protection enable
stp enable
#
vlan 1
#
vlan 100
#
vlan 101
#
vlan 102
#
vlan 103
#
vlan 104
#
vlan 200
description ToSERVERS(Feishui)
#
vlan 201
description ToSERVERS(Guoku)
#
vlan 202
description ToSERVERS(SheBao)
#
vlan 203
description ToSERVERS(NongShui)
#
vlan 204
description ToSERVERS(Guanli)
#
vlan 301
description ToAR46-40(Yinhang)
#
vlan 302
description DanWeiJieRu
#
interface Vlan-interface1
ip address 10.104.190.189 255.255.255.192
vrrp vrid 1 virtual-ip 10.104.190.190
vrrp vrid 1 priority 120
vrrp vrid 1 timer advertise 2
#
interface Vlan-interface100
ip address 10.104.160.253 255.255.255.0
vrrp vrid 100 virtual-ip 10.104.160.254
vrrp vrid 100 priority 120
vrrp vrid 100 timer advertise 2
#
interface Vlan-interface101
ip address 10.104.161.253 255.255.255.0
vrrp vrid 101 virtual-ip 10.104.161.254
vrrp vrid 101 priority 120
vrrp vrid 101 timer advertise 2
#
interface Vlan-interface102
ip address 10.104.162.253 255.255.255.0
vrrp vrid 102 virtual-ip 10.104.162.254
vrrp vrid 102 priority 120
vrrp vrid 102 timer advertise 2
#
interface Vlan-interface103
ip address 10.104.163.253 255.255.255.0
vrrp vrid 103 virtual-ip 10.104.163.254
vrrp vrid 103 priority 120
vrrp vrid 103 timer advertise 2
#
interface Vlan-interface104
ip address 10.104.164.253 255.255.255.0
vrrp vrid 104 virtual-ip 10.104.164.254
vrrp vrid 104 priority 120
vrrp vrid 104 timer advertise 2
#
interface Vlan-interface200
ip address 10.104.180.253 255.255.255.0
vrrp vrid 200 virtual-ip 10.104.180.254
vrrp vrid 200 priority 120
vrrp vrid 200 timer advertise 2
#
interface Vlan-interface201
ip address 10.104.181.253 255.255.255.0
vrrp vrid 201 virtual-ip 10.104.181.254
vrrp vrid 201 priority 120
vrrp vrid 201 timer advertise 2
#
interface Vlan-interface202
ip address 10.104.182.253 255.255.255.0
vrrp vrid 202 virtual-ip 10.104.182.254
vrrp vrid 202 priority 120
vrrp vrid 202 timer advertise 2
#
interface Vlan-interface203
ip address 10.104.183.253 255.255.255.0
vrrp vrid 203 virtual-ip 10.104.183.254
vrrp vrid 203 priority 120
vrrp vrid 203 timer advertise 2
#
interface Vlan-interface204
ip address 10.104.184.253 255.255.255.0
vrrp vrid 204 virtual-ip 10.104.184.254
vrrp vrid 204 priority 120
vrrp vrid 204 timer advertise 2
#
interface Vlan-interface301
ip address 10.104.190.253 255.255.255.224
vrrp vrid 30 virtual-ip 10.104.190.254
vrrp vrid 30 priority 120
vrrp vrid 30 timer advertise 2
#
interface Vlan-interface302
ip address 172.16.233.253 255.255.254.0
vrrp vrid 31 virtual-ip 172.16.233.254
vrrp vrid 31 priority 120
vrrp vrid 31 timer advertise 2
#
interface Aux0/0/0
#
interface M-Ethernet0/0/0
#
interface GigabitEthernet0/0/1
duplex full
speed 1000
port link-type trunk
port trunk permit vlan all
port link-aggregation group 1
#
interface GigabitEthernet0/0/2
duplex full
speed 1000
port link-type trunk
port trunk permit vlan all
port link-aggregation group 1
#
interface GigabitEthernet0/0/3
#
interface GigabitEthernet0/0/4
#
interface GigabitEthernet2/0/1
description To SW_1_S3928TP-SI
duplex full
speed 1000
port link-type trunk
port trunk permit vlan all
#
interface GigabitEthernet2/0/2
description To SW_2_S3928TP-SI
duplex full
speed 1000
port link-type trunk
port trunk permit vlan all
#
interface GigabitEthernet2/0/3
description To SW_3_S3928TP-SI
duplex full
speed 1000
port link-type trunk
port trunk permit vlan all
#
interface GigabitEthernet2/0/4
description To SW_4_S3928TP-SI
duplex full
speed 1000
port link-type trunk
port trunk permit vlan all
#
interface GigabitEthernet2/0/5
description DanWeiJieRu3928
duplex full
speed 1000
port link-type trunk
port trunk permit vlan all
#
interface GigabitEthernet2/0/6
description DanWeiJieRu3952
duplex full
speed 1000
port link-type trunk
port trunk permit vlan all
#
interface GigabitEthernet2/0/7
#
interface GigabitEthernet2/0/8
#
interface GigabitEthernet5/0/1
port access vlan 201
#
interface GigabitEthernet5/0/2
port access vlan 201
#
interface GigabitEthernet5/0/3
port access vlan 201
#
interface GigabitEthernet5/0/4
port access vlan 201
#
interface GigabitEthernet5/0/5
port access vlan 201
#
interface GigabitEthernet5/0/6
#
interface GigabitEthernet5/0/7
port access vlan 204
#
interface GigabitEthernet5/0/8
port access vlan 204
#
interface GigabitEthernet6/0/1
port access vlan 200
#
interface GigabitEthernet6/0/2
port access vlan 200
#
interface GigabitEthernet6/0/3
port access vlan 200
#
interface GigabitEthernet6/0/4
port access vlan 204
#
interface GigabitEthernet6/0/5
port access vlan 204
#
interface GigabitEthernet6/0/6
port access vlan 200
#
interface GigabitEthernet6/0/7
port access vlan 204
#
interface GigabitEthernet6/0/8
port access vlan 301
#
interface NULL0
#
arp timer aging 1
#
ip route-static 10.104.190.0 255.255.255.252 10.104.190.250 preference 60
ip route-static 10.104.190.4 255.255.255.252 10.104.190.250 preference 60
ip route-static 10.104.190.8 255.255.255.252 10.104.190.250 preference 60
ip route-static 10.104.190.12 255.255.255.252 10.104.190.250 preference 60
ip route-static 10.104.190.16 255.255.255.252 10.104.190.250 preference 60
ip route-static 10.104.190.20 255.255.255.252 10.104.190.250 preference 60
ip route-static 10.104.191.0 255.255.255.0 10.104.192.250 preference 60
ip route-static 10.104.191.0 255.255.255.224 10.104.190.250 preference 60
ip route-static 10.104.191.32 255.255.255.224 10.104.190.250 preference 60
ip route-static 10.104.191.64 255.255.255.224 10.104.190.250 preference 60
ip route-static 10.104.191.96 255.255.255.224 10.104.190.250 preference 60
ip route-static 10.104.191.160 255.255.255.224 10.104.190.250 preference 60
ip route-static 172.16.232.0 255.255.254.0 172.16.233.254 preference 60
#
snmp-agent
snmp-agent local-engineid 800007DB000FE218FE3D6877
snmp-agent community read zjjczjr
snmp-agent community write zjjczjw
snmp-agent sys-info location zhangjiajie
snmp-agent sys-info version all
snmp-agent target-host trap address udp-domain 10.104.170.11 udp-port 5000 params securityname public
snmp-agent trap enable standard
snmp-agent trap enable vrrp
snmp-agent trap enable bgp
#
user-interface aux 0
user-interface vty 0 4
authentication-mode scheme
#
return
#
sysname HN-Center-SWB
#
local-server nas-ip 127.0.0.1 key huawei
#
domain default enable system
#
temperature-limit 0 10 70
temperature-limit 2 10 70
temperature-limit 5 10 70
temperature-limit 6 10 70
#
poe power max-value 2400
#
link-aggregation group 1 mode manual
#
vrrp ping-enable
#
radius scheme system
primary authentication 127.0.0.1 1645
primary accounting 127.0.0.1 1646
user-name-format without-domain
#
---- More ----[42D [42Ddomain system
vlan-assignment-mode integer
access-limit disable
state active
idle-cut disable
self-service-url disable
messenger time disable
#
local-user admin
password simple boco123
service-type telnet
level 3
#
stp mode stp
stp instance 0 root secondary
stp TC-protection enable
stp enable
#
vlan 1
#
vlan 100
#
---- More ----[42D [42Dvlan 101
#
vlan 102
#
vlan 103
#
vlan 104
#
vlan 200
description ToSERVERS(Feishui)
#
vlan 201
description ToSERVERS(Guoku)
#
vlan 202
description ToSERVERS(SheBao)
#
vlan 203
description ToSERVERS(NongShui)
#
vlan 204
description ToSERVERS(Guanli)
#
---- More ----[42D [42Dvlan 301
description ToAR46-40(Yinhang)
#
vlan 302
description DanWeiJieRu
#
interface Vlan-interface1
ip address 10.104.190.188 255.255.255.192
vrrp vrid 1 virtual-ip 10.104.190.190
vrrp vrid 1 timer advertise 2
#
interface Vlan-interface100
ip address 10.104.160.252 255.255.255.0
vrrp vrid 100 virtual-ip 10.104.160.254
vrrp vrid 100 timer advertise 2
#
interface Vlan-interface101
ip address 10.104.161.252 255.255.255.0
vrrp vrid 101 virtual-ip 10.104.161.254
vrrp vrid 101 timer advertise 2
#
interface Vlan-interface102
ip address 10.104.162.252 255.255.255.0
---- More ----[42D [42D vrrp vrid 102 virtual-ip 10.104.162.254
vrrp vrid 102 timer advertise 2
#
interface Vlan-interface103
ip address 10.104.163.252 255.255.255.0
vrrp vrid 103 virtual-ip 10.104.163.254
vrrp vrid 103 timer advertise 2
#
interface Vlan-interface104
ip address 10.104.164.252 255.255.255.0
vrrp vrid 104 virtual-ip 10.104.164.254
vrrp vrid 104 timer advertise 2
#
interface Vlan-interface200
ip address 10.104.180.252 255.255.255.0
vrrp vrid 200 virtual-ip 10.104.180.254
vrrp vrid 200 timer advertise 2
#
interface Vlan-interface201
ip address 10.104.181.252 255.255.255.0
vrrp vrid 201 virtual-ip 10.104.181.254
vrrp vrid 201 timer advertise 2
---- More ----[42D [42D#
interface Vlan-interface202
ip address 10.104.182.252 255.255.255.0
vrrp vrid 202 virtual-ip 10.104.182.254
vrrp vrid 202 timer advertise 2
#
interface Vlan-interface203
ip address 10.104.183.252 255.255.255.0
vrrp vrid 203 virtual-ip 10.104.183.254
vrrp vrid 203 timer advertise 2
#
interface Vlan-interface204
ip address 10.104.184.252 255.255.255.0
vrrp vrid 204 virtual-ip 10.104.184.254
vrrp vrid 204 timer advertise 2
#
interface Vlan-interface301
ip address 10.104.190.252 255.255.255.224
vrrp vrid 30 virtual-ip 10.104.190.254
vrrp vrid 30 timer advertise 2
#
interface Vlan-interface302
---- More ----[42D [42D ip address 172.16.233.252 255.255.254.0
vrrp vrid 31 virtual-ip 172.16.233.254
vrrp vrid 31 timer advertise 2
#
interface Aux0/0/0
#
interface M-Ethernet0/0/0
#
interface GigabitEthernet0/0/1
duplex full
speed 1000
port link-type trunk
port trunk permit vlan all
port link-aggregation group 1
#
interface GigabitEthernet0/0/2
duplex full
speed 1000
port link-type trunk
port trunk permit vlan all
port link-aggregation group 1
#
---- More ----[42D [42Dinterface GigabitEthernet0/0/3
#
interface GigabitEthernet0/0/4
#
interface GigabitEthernet2/0/1
description To SW_1_S3928TP-SI
duplex full
speed 1000
port link-type trunk
port trunk permit vlan all
#
interface GigabitEthernet2/0/2
description To SW_2_S3928TP-SI
duplex full
speed 1000
port link-type trunk
port trunk permit vlan all
#
interface GigabitEthernet2/0/3
description To SW_3_S3928TP-SI
duplex full
speed 1000
---- More ----[42D [42D port link-type trunk
port trunk permit vlan all
#
interface GigabitEthernet2/0/4
description To SW_4_S3928TP-SI
duplex full
speed 1000
port link-type trunk
port trunk permit vlan all
#
interface GigabitEthernet2/0/5
description ToDanWeiJieRu3928
duplex full
speed 1000
port link-type trunk
port trunk permit vlan all
#
interface GigabitEthernet2/0/6
description ToDanWeiJieRu3952
duplex full
speed 1000
port link-type trunk
port trunk permit vlan all
---- More ----[42D [42D#
interface GigabitEthernet2/0/7
#
interface GigabitEthernet2/0/8
#
interface GigabitEthernet5/0/1
port access vlan 201
#
interface GigabitEthernet5/0/2
port access vlan 201
#
interface GigabitEthernet5/0/3
port access vlan 201
#
interface GigabitEthernet5/0/4
port access vlan 201
#
interface GigabitEthernet5/0/5
port access vlan 201
#
interface GigabitEthernet5/0/6
#
---- More ----[42D [42Dinterface GigabitEthernet5/0/7
#
interface GigabitEthernet5/0/8
port access vlan 301
#
interface GigabitEthernet6/0/1
port access vlan 200
#
interface GigabitEthernet6/0/2
port access vlan 200
#
interface GigabitEthernet6/0/3
port access vlan 200
#
interface GigabitEthernet6/0/4
port access vlan 201
#
interface GigabitEthernet6/0/5
port access vlan 201
#
interface GigabitEthernet6/0/6
port access vlan 200
---- More ----[42D [42D#
interface GigabitEthernet6/0/7
port access vlan 204
#
interface GigabitEthernet6/0/8
port access vlan 204
#
interface NULL0
#
arp timer aging 1
#
ip route-static 10.104.190.0 255.255.255.252 10.104.190.250 preference 60
ip route-static 10.104.190.4 255.255.255.252 10.104.190.250 preference 60
ip route-static 10.104.190.8 255.255.255.252 10.104.190.250 preference 60
ip route-static 10.104.190.12 255.255.255.252 10.104.190.250 preference 60
ip route-static 10.104.190.16 255.255.255.252 10.104.190.250 preference 60
ip route-static 10.104.190.20 255.255.255.252 10.104.190.250 preference 60
ip route-static 10.104.191.0 255.255.255.224 10.104.190.250 preference 60
ip route-static 10.104.191.32 255.255.255.224 10.104.190.250 preference 60
ip route-static 10.104.191.64 255.255.255.224 10.104.190.250 preference 60
ip route-static 10.104.191.96 255.255.255.224 10.104.190.250 preference 60
ip route-static 10.104.191.160 255.255.255.224 10.104.190.250 preference 60
---- More ----[42D [42D#
snmp-agent
snmp-agent local-engineid 800007DB000FE21903EC6877
snmp-agent community read zjjczjr
snmp-agent community write zjjczjw
snmp-agent sys-info location zhangjiajie
snmp-agent sys-info version all
snmp-agent target-host trap address udp-domain 10.10.184.1 udp-port 5000 params securityname public
snmp-agent trap enable standard
snmp-agent trap enable vrrp
snmp-agent trap enable bgp
#
user-interface aux 0
user-interface vty 0 4
authentication-mode scheme
#
return
注释:在内网核心交换机上做了VRRP,即实现了两台交换机对外虚拟成一台交换机的技术。
这个技术的实现细节是两边的路由配置相同,
只是VLAN的IP不一样,但是VLAN的VRRP VIRTUAL-IP 相同。
FOR EXAMPLE:
交换机SWB的VLAN配置如下;
interface Vlan-interface1
ip address 10.104.190.188 255.255.255.192
vrrp vrid 1 virtual-ip 10.104.190.190
vrrp vrid 1 timer advertise 2
#
interface Vlan-interface100
ip address 10.104.160.252 255.255.255.0
vrrp vrid 100 virtual-ip 10.104.160.254
vrrp vrid 100 timer advertise 2
#
interface Vlan-interface101
ip address 10.104.161.252 255.255.255.0
vrrp vrid 101 virtual-ip 10.104.161.254
vrrp vrid 101 timer advertise 2
#
interface Vlan-interface102
ip address 10.104.162.252 255.255.255.0
---- More ----[42D [42D vrrp vrid 102 virtual-ip 10.104.162.254
vrrp vrid 102 timer advertise 2
#
interface Vlan-interface103
ip address 10.104.163.252 255.255.255.0
vrrp vrid 103 virtual-ip 10.104.163.254
vrrp vrid 103 timer advertise 2
#
interface Vlan-interface104
ip address 10.104.164.252 255.255.255.0
vrrp vrid 104 virtual-ip 10.104.164.254
vrrp vrid 104 timer advertise 2
#
interface Vlan-interface200
ip address 10.104.180.252 255.255.255.0
vrrp vrid 200 virtual-ip 10.104.180.254
vrrp vrid 200 timer advertise 2
#
interface Vlan-interface201
ip address 10.104.181.252 255.255.255.0
vrrp vrid 201 virtual-ip 10.104.181.254
vrrp vrid 201 timer advertise 2
---- More ----[42D [42D#
interface Vlan-interface202
ip address 10.104.182.252 255.255.255.0
vrrp vrid 202 virtual-ip 10.104.182.254
vrrp vrid 202 timer advertise 2
#
interface Vlan-interface203
ip address 10.104.183.252 255.255.255.0
vrrp vrid 203 virtual-ip 10.104.183.254
vrrp vrid 203 timer advertise 2
#
interface Vlan-interface204
ip address 10.104.184.252 255.255.255.0
vrrp vrid 204 virtual-ip 10.104.184.254
vrrp vrid 204 timer advertise 2
#
interface Vlan-interface301
ip address 10.104.190.252 255.255.255.224
vrrp vrid 30 virtual-ip 10.104.190.254
vrrp vrid 30 timer advertise 2
#
交换机SWA上对应的配置为:
interface Vlan-interface1
ip address 10.104.190.189 255.255.255.192
vrrp vrid 1 virtual-ip 10.104.190.190
vrrp vrid 1 priority 120
vrrp vrid 1 timer advertise 2
#
interface Vlan-interface100
ip address 10.104.160.253 255.255.255.0
vrrp vrid 100 virtual-ip 10.104.160.254
vrrp vrid 100 priority 120
vrrp vrid 100 timer advertise 2
#
interface Vlan-interface101
ip address 10.104.161.253 255.255.255.0
vrrp vrid 101 virtual-ip 10.104.161.254
vrrp vrid 101 priority 120
vrrp vrid 101 timer advertise 2
#
interface Vlan-interface102
ip address 10.104.162.253 255.255.255.0
vrrp vrid 102 virtual-ip 10.104.162.254
vrrp vrid 102 priority 120
vrrp vrid 102 timer advertise 2
#
interface Vlan-interface103
ip address 10.104.163.253 255.255.255.0
vrrp vrid 103 virtual-ip 10.104.163.254
vrrp vrid 103 priority 120
vrrp vrid 103 timer advertise 2
#
interface Vlan-interface104
ip address 10.104.164.253 255.255.255.0
vrrp vrid 104 virtual-ip 10.104.164.254
vrrp vrid 104 priority 120
vrrp vrid 104 timer advertise 2
#
interface Vlan-interface200
ip address 10.104.180.253 255.255.255.0
vrrp vrid 200 virtual-ip 10.104.180.254
vrrp vrid 200 priority 120
vrrp vrid 200 timer advertise 2
#
interface Vlan-interface201
ip address 10.104.181.253 255.255.255.0
vrrp vrid 201 virtual-ip 10.104.181.254
vrrp vrid 201 priority 120
vrrp vrid 201 timer advertise 2
#
interface Vlan-interface202
ip address 10.104.182.253 255.255.255.0
vrrp vrid 202 virtual-ip 10.104.182.254
vrrp vrid 202 priority 120
vrrp vrid 202 timer advertise 2
#
interface Vlan-interface203
ip address 10.104.183.253 255.255.255.0
vrrp vrid 203 virtual-ip 10.104.183.254
vrrp vrid 203 priority 120
vrrp vrid 203 timer advertise 2
#
interface Vlan-interface204
ip address 10.104.184.253 255.255.255.0
vrrp vrid 204 virtual-ip 10.104.184.254
vrrp vrid 204 priority 120
vrrp vrid 204 timer advertise 2
#
interface Vlan-interface301
ip address 10.104.190.253 255.255.255.224
vrrp vrid 30 virtual-ip 10.104.190.254
vrrp vrid 30 priority 120
vrrp vrid 30 timer advertise 2
#
可以看出他们相同的VLAN的 VRRP 虚拟IP是一样的,只不过VLAN IP不同。