Cisco VRRP配置:我能否在VLAN子接口上使用/30

Question

我找不到任何使用/30在思科路由器上配置VRRP接口的文档或示例。这是可能的吗?如果是这样的话，谁有一个例子？

interface GigabitEthernet0/0.1507
description CUSTOMER WAN
encapsulation dot1Q 1507
ip address X.X.X.X 255.255.255.252        // I don't have an extra IP
vrrp 150 address 10.102.32.210
vrrp 150 description VLAN 1507
vrrp 150 priority 150
vrrp 150 timers advertise 110
vrrp 150 timers learn
vrrp 150 track 100 decrement 60
vrrp 150 authentication text mypass
no shut

我知道这是正确的语法，但显然，当我必须使用/30广域网时，我没有额外的IP用于备用路由器的接口。

interface GigabitEthernet0/1.77
description INTERNAL VLAN
encapsulation dot1Q 77 native
ip address 10.40.77.2 255.255.255.0         // 77.3 on Standby
vrrp 77 description VLAN 77
vrrp 77 ip 10.40.77.1
vrrp 77 priority 150
vrrp 77 timers advertise 110
vrrp 77 timers learn
vrrp 77 track 100 decrement 60
vrrp 77 authentication text mypass
no shut

提前谢谢你！

添加接口配置

    redundancy
!
track 100 interface GigabitEthernet0/1 ip routing
!
interface GigabitEthernet0/0
 no ip address
 no shutdown
 duplex auto
 speed auto
!
interface GigabitEthernet0/0.75
    encapsulation dot1Q 75
    ip address 75.124.154.2 255.255.255.252
    vrrp 75 description VLAN 75
    vrrp 75 priority 150
    vrrp 75 timers advertise 110
    vrrp 75 timers learn
    vrrp 75 track 100 decrement 60
    vrrp 75 authentication text vrrp75!
    no shut
!
interface GigabitEthernet0/0.76
    encapsulation dot1Q 76
    ip address 75.124.154.6 255.255.255.252
    vrrp 76 description VLAN 76
    vrrp 76 priority 150
    vrrp 76 timers advertise 110
    vrrp 76 timers learn
    vrrp 76 track 100 decrement 60
    vrrp 76 authentication text vrrp76!
    no shut
!
interface GigabitEthernet0/0.104
    encapsulation dot1Q 104
    ip address 10.40.1.5 255.255.255.252
    vrrp 104 description VLAN 104
    vrrp 104 priority 150
    vrrp 104 timers advertise 110
    vrrp 104 timers learn
    vrrp 104 track 100 decrement 60
    vrrp 104 authentication text vrrp104!
    no shut
!
interface GigabitEthernet0/0.105
    descriptio
    encapsulation dot1Q 105
    ip address 10.40.1.9 255.255.255.252
    vrrp 105 description VLAN 105
    vrrp 105 priority 150
    vrrp 105 timers advertise 110
    vrrp 105 timers learn
    vrrp 105 track 100 decrement 60
    vrrp 105 authentication text vrrp105!
    no shut
!
interface GigabitEthernet0/0.149
    encapsulation dot1Q 149
    ip address 149.6.154.70 255.255.255.240
    vrrp 149 description VLAN 149
    vrrp 149 priority 150
    vrrp 149 timers advertise 110
    vrrp 149 timers learn
    vrrp 149 track 100 decrement 60
    vrrp 149 authentication text vrrp149!
    crypto map VPN_Tunnel
    no shut
!
interface GigabitEthernet0/0.165
    encapsulation dot1Q 165
    ip address 165.42.149.206 255.255.255.252
    vrrp 165 description VLAN 165
    vrrp 165 priority 150
    vrrp 165 timers advertise 110
    vrrp 165 timers learn
    vrrp 165 track 100 decrement 60
    vrrp 165 authentication text vrrp165!
    no shut
!
interface GigabitEthernet0/0.166
    encapsulation dot1Q 166
    ip address 165.43.149.86 255.255.255.252
    vrrp 166 description VLAN 166
    vrrp 166 priority 150
    vrrp 166 timers advertise 110
    vrrp 166 timers learn
    vrrp 166 track 100 decrement 60
    vrrp 166 authentication text vrrp166!
    no shut
!
interface GigabitEthernet0/0.194
    encapsulation dot1Q 194
    ip address 209.198.218.1 255.255.255.128
    ip nat outside
    vrrp 194 description VLAN 194
    vrrp 194 priority 150
    vrrp 194 timers advertise 110
    vrrp 194 timers learn
    vrrp 194 track 100 decrement 60
    vrrp 194 authentication text vrrp194!
    no shut
!
interface GigabitEthernet0/0.1507
    encapsulation dot1Q 1507
    ip address 10.102.32.210 255.255.255.252
    vrrp 150 description VLAN 1507
    vrrp 150 priority 150
    vrrp 150 timers advertise 110
    vrrp 150 timers learn
    vrrp 150 track 100 decrement 60
    vrrp 150 authentication text vrrp150!
    no shut
!
interface GigabitEthernet0/0.2149
    encapsulation dot1Q 2149
    ip address 149.84.6.129 255.255.255.128
    vrrp 214 description VLAN 2149
    vrrp 214 priority 150
    vrrp 214 timers advertise 110
    vrrp 214 timers learn
    vrrp 214 track 100 decrement 60
    vrrp 214 authentication text vr!
    no shut
!
!
!
!
!
interface GigabitEthernet0/1
 no ip address
 no shutdown
 duplex auto
 speed auto
!
interface GigabitEthernet0/1.77
    encapsulation dot1Q 77 native
    ip address 10.40.77.2 255.255.255.0
    ip nat inside
    vrrp 77 description VLAN 77
    vrrp 77 ip 10.40.77.1
    vrrp 77 priority 150
    vrrp 77 timers advertise 110
    vrrp 77 timers learn
    vrrp 77 track 100 decrement 60
    vrrp 77 authentication text vrrp77!
    no shut
!
interface GigabitEthernet0/2
 no ip address
 shutdown
 duplex auto
 speed auto
!

Answer 1

根据标准，这种配置是不可能的。您需要有/29子网掩码。两台vrrp路由器三个IP地址，每个客户端一个IP地址。它在以下问题中得到了回答。

https://networkengineering.stackexchange.com/questions/25171/vrrp-sharing-master-routers-ip

现在，一些人已经尝试了一种变通办法，通过为/30子网掩码分配辅助ip地址，但是如果您可以选择控制远程端，那么它的目的就会落空。您可以只使用/29掩码。这是一个使用辅助地址的链接。

https://lathiat.livejournal.com/36658.html

Router1：

接口FastEthernet1/0

ip地址192.168.1.1 255.255.255.0

vrrp 1 ip 192.168.1.10

vrrp 1 ip 192.168.100.1辅助

好了！

ip路由192.168.100.0 255.255.255.252 FastEthernet1/0

Router2：

接口FastEthernet1/0

ip地址192.168.1.2 255.255.255.0

vrrp 1 ip 192.168.1.10

vrrp 1 ip 192.168.100.1辅助

好了！

ip路由192.168.100.0 255.255.255.252 FastEthernet1/0