文档建议反馈控制台
首页
学习
活动
专区
圈层
工具
MCP广场
文章/答案/技术大牛
发布
社区首页 >问答首页 >HSRP仅适用于三个VLAN中的一个

问HSRP仅适用于三个VLAN中的一个
EN

Network Engineering用户
提问于 2018-03-04 20:50:48
回答 2查看 369关注 0票数 1

我有两个L3开关为3个VLAN执行HSRP (64,65,66)。

当查看“显示备用简要”命令的输出时，我可以看到两个交换机仅为一个vlan (65)形成了一个虚拟路由器。

这是我的拓扑结构：

这是Core1上的配置：

代码语言：javascript
复制
    en
     conf t
     no ip domain-lookup
     ipv6 unicast-routing
     ip routing

     int loopback 0
      ip add 2.2.2.3 255.255.255.255
      exit

     vlan 64
      exit
     vlan 65
      exit
     vlan 66
      exit

     ipv6 router ospf 1
      auto-cost reference-bandwidth 100000
      router-id 2.2.2.3
      area 64 range 2001:db8:18:6400::/58
      area 65 range 2001:db8:18:6500::/58
      area 66 range 2001:db8:18:6600::/58
      passive-interface g0/1
      passive-interface g0/2
      exit

     router ospf 1
      auto-cost reference-bandwidth 100000
      area 64 range 10.0.64.0 255.255.255.0
      area 65 range 10.0.65.0 255.255.255.0
      area 66 range 10.0.66.0 255.255.255.0
      passive-interface g0/1
      passive-interface g0/2
      exit

     int vlan 64
      ip add 10.0.64.3 255.255.255.0
      ipv6 add 2001:db8:18:6400::3/64
      ipv6 ospf 1 area 0
      ip ospf 1 area 0
      no sh

     int vlan 65
      ip add 10.0.65.3 255.255.255.0
      ipv6 add 2001:db8:18:6500::3/64
      ipv6 ospf 1 area 0
      ip ospf 1 area 0
      no sh

     int vlan 66
      ip add 10.0.66.3 255.255.255.0
      ipv6 add 2001:db8:18:6600::3/64
      ipv6 ospf 1 area 0
      ip ospf 1 area 0
      no sh

     int fa0/5
      switchport mode trunk
      switchport trunk enc dot1q
      switchport native vlan 99
      exit

     int f0/4
      switchport mode trunk
      switchport trunk enc dot1q
      switchport native vlan 99
      exit

     int g0/1
      switchport mode trunk
      switchport trunk enc dot1q

     int g0/2
      switchport mode trunk
      switchport trunk enc dot1q

     int f0/24
      no switchport
      ip add 10.0.0.45 255.255.255.252
      ipv6 add 2001:db8:18:0010::1/64
      ipv6 ospf 1 area 0
      ip ospf 1 area 0
      ip ospf hello-interval 3
      ipv6 ospf hello-interval 3
      no sh
      exit 

     int fa0/1
      no switchport
      ip add 10.0.0.26 255.255.255.252
      ipv6 add 2001:db8:18:0006::2/64
      ipv6 ospf 1 area 0
      ip ospf hello-interval 3
      ipv6 ospf hello-interval 3
      no sh
      exit

     int fa0/2
      no switchport
      ip add 10.0.0.18 255.255.255.252
      ipv6 add 2001:db8:18:0005::2/64
      ipv6 ospf 1 area 0
      ip ospf hello-interval 3
      ipv6 ospf hello-interval 3
      no sh
      exit

     int vlan 64
      standby 64 priority 100
      standby 64 ip 10.0.64.2
      exit

     int vlan 65
      standby 65 priority 100
      standby 65 ip 10.0.65.2
      exit

     int vlan 66
      standby 66 priority 100
      standby 66 ip 10.0.66.2
      exit

     router ospf 1
      passive-interface Vlan 64
      passive-interface Vlan 65
      passive-interface Vlan 66
      exit

     ip access-list extended VLAN64 
      deny ip 10.0.0.0 0.255.255.255 any
      exit
     ip access-list extended  VLAN65
      deny ip 10.0.0.0 0.255.255.255 any
      exit
     ip access-list extended  VLAN66
      permit tcp 10.0.0.0 0.255.255.255 host 10.0.66.101 eq 80
      permit tcp 10.0.0.0 0.255.255.255 host 10.0.66.101 eq 443
      permit tcp 10.0.0.0 0.255.255.255 host 10.0.66.101 eq 139
      permit tcp 10.0.0.0 0.255.255.255 host 10.0.66.101 eq 445
      deny ip 10.0.0.0 0.255.255.255 any
      exit

     ipv6 access-list VLAN64IPv6
      deny ipv6 any any
      exit
     ipv6 access-list VLAN65IPv6
      deny ipv6 any any
      exit
     ipv6 access-list VLAN66IPv6
      permit tcp 2001:db8:18::/48 host 2001:db8:18:6600::0010 eq 80
      permit tcp 2001:db8:18::/48 host 2001:db8:18:6600::0010 eq 443
      permit tcp 2001:db8:18::/48 host 2001:db8:18:6600::0010 eq 139
      permit tcp 2001:db8:18::/48 host 2001:db8:18:6600::0010 eq 445
      deny ipv6 any any
      exit

     int vlan 64
      ip access-group VLAN64 out
      ipv6 traffic-filter VLAN64IPv6 out
      exit

     int vlan 65
      ip access-group VLAN65 out
      ipv6 traffic-filter VLAN65IPv6  out
      exit

     int vlan 66
      ip access-group VLAN66 out
      ipv6 traffic-filter VLAN66IPv6  out
     end

这就是Core0上的配置：

代码语言：javascript
复制
    en
 conf t
 no ip domain-lookup
 ipv6 unicast-routing
 ip routing

 int loopback 0
  ip add 2.2.2.1 255.255.255.255
  exit

 vlan 64
  exit
 vlan 65
  exit
 vlan 66
  exit

 ipv6 router ospf 1
  auto-cost reference-bandwidth 100000
  router-id 2.2.2.1
  area 64 range 2001:db8:18:6400::/58
  area 65 range 2001:db8:18:6500::/58
  area 66 range 2001:db8:18:6600::/58
  passive-interface g0/1
  passive-interface g0/2
  exit

 router ospf 1
  auto-cost reference-bandwidth 100000
  area 64 range 10.0.64.0 255.255.255.0
  area 65 range 10.0.65.0 255.255.255.0
  area 66 range 10.0.66.0 255.255.255.0
  passive-interface g0/1
  passive-interface g0/2

 int vlan 64
  ip add 10.0.64.1 255.255.255.0
  ipv6 add 2001:db8:18:6400::1/64
  ipv6 ospf 1 area 0
  ip ospf 1 area 0
  no sh

 int vlan 65
  ip add 10.0.65.1 255.255.255.0
  ipv6 add 2001:db8:18:6500::1/64
  ipv6 ospf 1 area 0
  ip ospf 1 area 0
  no sh

 int vlan 66
  ip add 10.0.66.1 255.255.255.0
  ipv6 add 2001:db8:18:6600::1/64
  ipv6 ospf 1 area 0
  ip ospf 1 area 0
  no sh

 int fa0/5
  switchport mode trunk
  switchport trunk enc dot1q
  switchport native vlan 99
  exit

 int f0/4
  switchport mode trunk
  switchport trunk enc dot1q
  switchport native vlan 99
  exit

 int g0/1
  switchport mode trunk
  switchport trunk enc dot1q

 int g0/2
  switchport mode trunk
  switchport trunk enc dot1q

 int f0/24
  no switchport
  ip add 10.0.0.41 255.255.255.252
  ipv6 add 2001:db8:18:0009::1/64
  ipv6 ospf 1 area 0
  ip ospf 1 area 0
  ip ospf hello-interval 3
  ipv6 ospf hello-interval 3
  no sh
  exit

 int fa0/1
  no switchport
  ip add 10.0.0.30 255.255.255.252
  ipv6 add 2001:db8:18:0008::2/64
  ipv6 ospf 1 area 0
  ip ospf 1 area 0
  ip ospf hello-interval 3
  ipv6 ospf hello-interval 3
  no sh
  exit

 int fa0/2
  no switchport
  ip add 10.0.0.22 255.255.255.252
  ipv6 add 2001:db8:18:0007::2/64
  ipv6 ospf 1 area 0
  ip ospf 1 area 0
  ip ospf hello-interval 3
  ipv6 ospf hello-interval 3
  no sh
  exit

 router ospf 1
  passive-interface Vlan 64
  passive-interface Vlan 65
  passive-interface Vlan 66
  exit

 int vlan 64
  standby 64 priority 200
  standby 64 ip 10.0.64.2
  exit

 int vlan 65
  standby 65 priority 200
  standby 65 ip 10.0.65.2
  exit

 int vlan 66
  standby 66 priority 200
  standby 66 ip 10.0.66.2
  exit

 ip access-list extended VLAN64 
  deny ip 10.0.0.0 0.255.255.255 any

  exit
 ip access-list extended  VLAN65
  deny ip 10.0.0.0 0.255.255.255 any
  exit
 ip access-list extended  VLAN66
  permit tcp 10.0.0.0 0.255.255.255 host 10.0.66.101 eq 80
  permit tcp 10.0.0.0 0.255.255.255 host 10.0.66.101 eq 443
  permit tcp 10.0.0.0 0.255.255.255 host 10.0.66.101 eq 139
  permit tcp 10.0.0.0 0.255.255.255 host 10.0.66.101 eq 445
  deny ip 10.0.0.0 0.255.255.255 any
  exit

 ipv6 access-list VLAN64IPv6
  deny ipv6 any any
  exit
 ipv6 access-list VLAN65IPv6
  deny ipv6 any any
  exit
 ipv6 access-list VLAN66IPv6
  permit tcp 2001:db8:18::/48 host 2001:db8:18:6600::0010 eq 80
  permit tcp 2001:db8:18::/48 host 2001:db8:18:6600::0010 eq 443
  permit tcp 2001:db8:18::/48 host 2001:db8:18:6600::0010 eq 139
  permit tcp 2001:db8:18::/48 host 2001:db8:18:6600::0010 eq 445
  deny ipv6 any any
  exit

 int vlan 64
  ip access-group VLAN64 out
  ipv6 traffic-filter VLAN64IPv6 out
  exit

 int vlan 65
  ip access-group VLAN65 out
  ipv6 traffic-filter VLAN65IPv6  out
  exit

 int vlan 66
  ip access-group VLAN66 out
  ipv6 traffic-filter VLAN66IPv6  out
 exit
exit

core1上的“显示待机简报”

cisco
vlan
hsrp
EN

回答 2

Network Engineering用户

回答已采纳

发布于 2018-03-04 22:07:06

假设Core0是所有三个VLAN的根桥和HSRP主站，并且上行链路是FastEthernet0/1和FastEthernet0/2，那么您应该这样做：

Core0：

代码语言：javascript
复制
spanning-tree vlan 64 priority root primary
spanning-tree vlan 65 priority root primary
spanning-tree vlan 66 priority root primary
!
interface Vlan64
 ip address 10.0.64.2 255.255.255.0
 ip ospf 1 area 0
 standby version 2
 standby 64 ip 10.0.64.1
 standby 64 priority 110
 standby 64 preempt delay 30
 standby 64 track FastEthernet0/1 8
 standby 64 track FastEthernet0/2 8
!
interface Vlan65
 ip address 10.0.65.2 255.255.255.0
 ip ospf 1 area 0
 standby version 2
 standby 65 ip 10.0.65.1
 standby 65 priority 110
 standby 65 preempt delay 30
 standby 65 track FastEthernet0/1 8
 standby 65 track FastEthernet0/2 8
!
interface Vlan66
 ip address 10.0.66.2 255.255.255.0
 ip ospf 1 area 0
 standby version 2
 standby 66 ip 10.0.66.1
 standby 66 priority 110
 standby 66 preempt delay 30
 standby 66 track FastEthernet0/1 8
 standby 66 track FastEthernet0/2 8
!

Core1：

代码语言：javascript
复制
spanning-tree vlan 64 priority root secondary
spanning-tree vlan 65 priority root secondary
spanning-tree vlan 66 priority root secondary
!
interface Vlan64
 ip address 10.0.64.3 255.255.255.0
 ip ospf 1 area 0
 standby version 2
 standby 64 ip 10.0.64.1
 standby 64 priority 100
 standby 64 preempt delay 30
 standby 64 track FastEthernet0/1 8
 standby 64 track FastEthernet0/2 8
!
interface Vlan65
 ip address 10.0.65.3 255.255.255.0
 ip ospf 1 area 0
 standby version 2
 standby 65 ip 10.0.65.1
 standby 65 priority 100
 standby 65 preempt delay 30
 standby 65 track FastEthernet0/1 8
 standby 65 track FastEthernet0/2 8
!
interface Vlan66
 ip address 10.0.66.3 255.255.255.0
 ip ospf 1 area 0
 standby version 2
 standby 66 ip 10.0.66.1
 standby 66 priority 100
 standby 66 preempt delay 30
 standby 66 track FastEthernet0/1 8
 standby 66 track FastEthernet0/2 8
!

这将为根桥和HSRP主节点将HSRP优先级设置为Core0。当一个上行链路下降时，它将减少8的HSRP优先级(不足以切换)，如果另一个上行链路下降，它将HSRP主节点切换到Core1。我在抢占位置上延迟了一下，这样连接就不会导致HSRP不断反弹。

票数 1
EN

Network Engineering用户

发布于 2018-03-04 20:58:03

嗯，在我没有设置两个交换机的优先级之后，他们成功地形成了一个虚拟路由器。

票数 0
EN
页面原文内容由Network Engineering提供。腾讯云小微IT领域专用引擎提供翻译支持
原文链接：

https://networkengineering.stackexchange.com/questions/48832

复制
相关文章

相似问题

领券

腾讯云开发者

扫码关注腾讯云开发者

扫码关注腾讯云开发者

领取腾讯云代金券

热门产品

热门推荐

更多推荐

Copyright © 2013 - 2026 Tencent Cloud. All Rights Reserved. 腾讯云 版权所有 

深圳市腾讯计算机系统有限公司 ICP备案/许可证号：粤B2-20090059 粤公网安备44030502008569号

腾讯云计算（北京）有限责任公司 京ICP证150476号 |  京ICP备11018762号

问题归档专栏文章快讯文章归档关键词归档开发者手册归档开发者手册 Section 归档