核心sw1:(作为vlan 10 用户的主路由器) interface Vlanif10 ip address 192.168.10.254 255.255.255.0 vrrp vrid 1 virtual-ip vrrp vrid 1 priority 105 核心sw2: interface Vlanif10 ip address 192.168.10.253 255.255.255.0 vrrp vrid 1 virtual-ip 192.168.10.1 核心sw1: interface Vlanif20 ip address 192.168.20.254 255.255.255.0 vrrp vrid 2 virtual-ip 192.168.20.1 核心sw2:(SW2将成为vlan 20的主路由器) interface Vlanif20 ip address 192.168.20.253 255.255.255.0 vrrp vrid 2 virtual-ip
interface Vlanif20 ip address 192.168.20.252 24 vrrp vrid 2 virtual-ip 192.168.20.254 vrrp vrid SW1: [SW1]int vlan 10 [SW1-vlanif10]vrrp vrid 1 virtual-ip 192.168.10.254 [SW1-vlanif10]vrrp vrid 1 priority 120 [SW1]int vlan 20 [SW1-vlanif20]vrrp vrid 2 virtual-ip 192.168.20.254 [SW1]int vlan 30 [SW1-vlanif30]vrrp vrid 3 virtual-ip 192.168.30.254 [SW1-vlanif30]vrrp vrid 3 priority 120 [SW1 ]vrrp vrid 1 virtual-ip 192.168.10.254 [SW2]int vlan 20 [SW2-vlanif20]vrrp vrid 2 virtual-ip 192.168.20.254
# interface NULL0 # interface Vlan-interface10 ip address 10.1.1.1 255.255.255.0 vrrp vrid 1 virtual-ip vrrp vrid 2 virtual-ip 10.1.1.112 vrrp vrid 2 priority 110 vrrp vrid 2 preempt-mode timer delay 10 # interface NULL0 # interface Vlan-interface10 ip address 10.1.1.2 255.255.255.0 vrrp vrid 1 virtual-ip vrrp vrid 2 virtual-ip 10.1.1.112 vrrp vrid 2 priority 200 vrrp vrid 2 preempt-mode timer delay 10
Vrrp vrid 1 virtual-ip表明组1的虚拟路由器的地址(PC1的网关) vrrp 1 proirity 120设置优先级,成为组1的master。 192.168.1.1 255.255.255.0 # interface GigabitEthernet0/0/0 ip address 10.1.1.1 255.255.255.0 vrrp vrid 1 virtual-ip 10.1.1.111 vrrp vrid 1 priority 120 vrrp vrid 1 preempt-mode timer delay 20 vrrp vrid 2 virtual-ip 10.1.1.112 192.168.2.1 255.255.255.0 # interface GigabitEthernet0/0/0 ip address 10.1.1.2 255.255.255.0 vrrp vrid 1 virtual-ip 10.1.1.111 vrrp vrid 2 virtual-ip 10.1.1.112 vrrp vrid 2 priority 120 vrrp vrid 2 preempt-mode timer
vrrp vrid 1 virtual-ip x VRRP也可以实现为负载均衡的配置,实现两个路由器同时转发流量。 1、VRRP配置 R1的配置: # interface GigabitEthernet0/0/1 ip address 192.168.0.10 255.255.255.0 vrrp vrid 1 virtual-ip 192.168.0.1 # R2的配置: # interface GigabitEthernet0/0/2 ip address 192.168.0.20 255.255.255.0 vrrp vrid 1 virtual-ip
Vlanif100]un sh [SW2]ip route-static 0.0.0.0 0.0.0.0 11.0.0.1 [SW2]int vlanif 10 [SW2-Vlanif10]vrrp vrid 1 virtual-ip Vlanif10]vrrp vrid 1 track interface g0/0/2 [SW2-Vlanif10]int vlanif 20 [SW2-Vlanif20]vrrp vrid 2 virtual-ip [SW3-Vlanif100]ip add 12.0.0.2 30 [SW3-Vlanif100]un sh [SW3]int vlanif 10 [SW3-Vlanif10]vrrp vrid 1 virtual-ip 192.168.10.1 [SW3-Vlanif10]vrrp vrid 1 priority 115 [SW3-Vlanif10]int vlanif 20 [SW3-Vlanif20]vrrp vrid 2 virtual-ip
PING通(在配置VRRP组前,要先配置接口IP) [FW1]interface GigabitEthernet 0/0/1 [FW1-GigabitEthernet0/0/1] vrrp vrid 1 virtual-ip vrrp virtual-mac enable [FW1]interface GigabitEthernet 0/0/3 [FW1-GigabitEthernet0/0/3] vrrp vrid 2 virtual-ip vrrp virtual-mac enable [FW1]interface GigabitEthernet 0/0/2 [FW1-GigabitEthernet0/0/2] vrrp vrid 3 virtual-ip 通(在配置VRRP组前,要先配置接口IP) [FW2]interface GigabitEthernet 0/0/1 [FW2-GigabitEthernet0 / 0/1] vrrp vrid 1 virtual-ip vrrp virtual-mac enable [FW2]inerface GigabitEthernet 0/0/2 [FW2-GigabitEthernet0 / 0/2] vrrp vrid 3 virtual-ip
防火墙A interface GigabitEthernet1/0/1 undo shutdown ip address 10.2.0.2 255.255.255.0 vrrp vrid 1 virtual-ip active # interface GigabitEthernet1/0/2 undo shutdown ip address 10.3.0.2 255.255.255.0 vrrp vrid 2 virtual-ip 防火墙B interface GigabitEthernet1/0/1 undo shutdown ip address 10.2.0.2 255.255.255.0 vrrp vrid 1 virtual-ip standby # interface GigabitEthernet1/0/2 undo shutdown ip address 10.3.0.2 255.255.255.0 vrrp vrid 2 virtual-ip
int vlan 30 ip add 192.168.30.1 24 int vlan 40 ip add 192.168.40.1 24 ④配置VRRP: int vlan10 vrrp vrid 1 virtual-ip g0/0/5 reduced 30 vrrp vrid 3 track interface GigabitEthernet0/0/3 reduced 30 int vlan20 vrrp vrid 2 virtual-ip 192.168.20.254 vrrp vrid 2 authentication-mode md5 hc int vlan40 vrrp vrid 4 virtual-ip 192.168.40.254 192.168.10.254 vrrp vrid 1 authentication-mode md5 hc int vlan30 vrrp vrid 3 virtual-ip 192.168.30.254 vrrp vrid 3 authentication-mode md5 hc int vlan20 vrrp vrid 2 virtual-ip 192.168.20.254 vrrp vrid 2
aggregate-vlan access-vlan 165 to 180 305 # interface Vlanif11 ip address 10.1.1.2 255.255.255.0 vrrp vrid 1 virtual-ip 目的同上 vrrp advertise send-mode 301 # interface Vlanif12 ip address 10.1.2.2 255.255.255.0 vrrp vrid 2 virtual-ip 100 vrrp advertise send-mode 302 # interface Vlanif13 ip address 10.1.3.2 255.255.255.0 vrrp vrid 3 virtual-ip 100 vrrp advertise send-mode 303 # interface Vlanif14 ip address 10.1.4.2 255.255.255.0 vrrp vrid 4 virtual-ip 100 vrrp advertise send-mode 304 # interface Vlanif15 ip address 10.1.5.2 255.255.255.0 vrrp vrid 5 virtual-ip
g1/0/0 03 步骤三 配置VRRP备份组 主设备:FW1 [USG6000V1]int g1/0/0[USG6000V1-GigabitEthernet1/0/0]vrrp vrid 1 virtual-ip 192.168.1.254 active [USG6000V1-GigabitEthernet1/0/0]int g1/0/2[USG6000V1-GigabitEthernet1/0/2]vrrp vrid 2 virtual-ip 10.0.0.254 active [USG6000V1-GigabitEthernet1/0/2]int g1/0/1[USG6000V1-GigabitEthernet1/0/1]vrrp vrid 3 virtual-ip 202.196.1.254 active 备份设备:FW2 [USG6000V1]int g1/0/0[USG6000V1-GigabitEthernet1/0/0]vrrp vrid 2 virtual-ip 10.0.0.254 standby [USG6000V1-GigabitEthernet1/0/0]int g1/0/1[USG6000V1-GigabitEthernet1/0/1]vrrp vrid 1 virtual-ip
根据网关来定)优先级值越高,越优先 HJ-A: interface Vlanif10 ip address 192.168.10.253 255.255.255.0 vrrp vrid 10 virtual-ip reduced(减少)100 来配置降低的值 interface Vlanif20 ip address 192.168.20.253 255.255.255.0 vrrp vrid 20 virtual-ip 如果先配置了优先级,就无法配置上行接口的跟踪) HJ-B: interface Vlanif10 ip address 192.168.10.252 255.255.255.0 vrrp vrid 10 virtual-ip GigabitEthernet0/0/24 interface Vlanif20 ip address 192.168.20.252 255.255.255.0 vrrp vrid 20 virtual-ip
g1/0/0 03 步骤三 配置VRRP备份组 主设备:FW1 [USG6000V1]int g1/0/0[USG6000V1-GigabitEthernet1/0/0]vrrp vrid 1 virtual-ip 192.168.1.254 active [USG6000V1-GigabitEthernet1/0/0]int g1/0/2[USG6000V1-GigabitEthernet1/0/2]vrrp vrid 2 virtual-ip 10.0.0.254 active [USG6000V1-GigabitEthernet1/0/2]int g1/0/1[USG6000V1-GigabitEthernet1/0/1]vrrp vrid 3 virtual-ip 202.196.1.254 active 备份设备:FW2 [USG6000V1]int g1/0/0[USG6000V1-GigabitEthernet1/0/0]vrrp vrid 2 virtual-ip 10.0.0.254 standby [USG6000V1-GigabitEthernet1/0/0]int g1/0/1[USG6000V1-GigabitEthernet1/0/1]vrrp vrid 1 virtual-ip
基础配置: 核心的ip地址 接入层交换机无需配置 用户网关 10.1 vrrp 配置: 核心1: int gi 0/0/0 (下联用户的接口) vrrp vrid 1 virtual-ip 192.168.10.1 核心2:(主路由器) int gi0/0/0 vrrp vrid 1 virtual-ip 192.168.10.1 vrrp vrid 1 priority 105 将优先级改为105 作为主路由器,
时配置开销值 default-route originate 在RIP进程中发布默认路由 17 vrrp(虚拟路由器冗余协议)基本配置 int g0/0/0 vrrp vrid 1 virtual-ip display vrrp brief display vrrp interface g0/0/0 查看VRRP的工作状态 18 配置VRRP多备份组 int g0/0/0 vrrp vrid 1 virtual-ip 172.16.1.254 创建VRRP备份组,备份组号为1,配置虚拟IP为172.16.1.254 vrrp vrid 1 priority 120 修改优先级为120 vrrp vrid 2 virtual-ip 172.16.1.253 创建VRRP备份组,备份组号为2,配置虚拟IP为172.16.1.253 int g0/0/0 vrrp vrid 1 virtual-ip 172.16.1.254 创建VRRP备份组,备份组号为1,配置虚拟IP为172.16.1.254 vrrp vrid 2 virtual-ip 172.16.1.253 创建VRRP备份组,备份组号为2
增加路由器后的拓扑图如下: 一、防火墙修改配置 interface Vlanif10 ip address 192.168.10.1 255.255.255.0 vrrp vrid 1 virtual-ip service-manage ping permit # interface Vlanif20 //vlan20配置同理 ip address 192.168.20.1 255.255.255.0 vrrp vrid 2 virtual-ip outbound 3000 //出口绑定ACL3000,允许用户上网 interface Vlanif10 ip address 192.168.10.2 255.255.255.0 vrrp vrid 1 virtual-ip preempt-mode timer delay 10 //抢占延时10秒 # interface Vlanif20 ip address 192.168.20.2 255.255.255.0 vrrp vrid 2 virtual-ip
114.114.114.114 # interface Vlanif8 //为VLAN8配置VRRP ip address 192.168.8.1 255.255.255.0 vrrp vrid 1 virtual-ip dhcp select global # interface Vlanif9 //为VLAN8配置VRRP ip address 192.168.9.1 255.255.255.0 vrrp vrid 2 virtual-ip 0Rb{DzN4zg# dhcp select global # interface Vlanif10 ip address 192.168.10.1 255.255.255.0 vrrp vrid 3 virtual-ip md5 9FW}IH{@o4y~t+Byca8Yizh# # interface Vlanif11 ip address 192.168.11.1 255.255.255.0 vrrp vrid 4 virtual-ip
1 root primary # interface Vlanif9 description ith ip address 192.168.9.1 255.255.255.0 vrrp vrid 1 virtual-ip interface GE1/0/0 reduce 40 # interface Vlanif10 ip address 192.168.10.1 255.255.255.0 vrrp vrid 2 virtual-ip stp instance 1 root secondary # interface Vlanif9 ip address 192.168.9.2 255.255.255.0 vrrp vrid 1 virtual-ip 192.168.9.254 # interface Vlanif10 ip address 192.168.10.2 255.255.255.0 vrrp vrid 2 virtual-ip 192.168.10.254
[H3C-Ethernet1/0/0] vrrp vrid 1 virtual-ip 202.38.160.111 # 设置备份组的优先级。 [H3C-Ethernet1/0/0] vrrp vrid 1 virtual-ip 202.38.160.111 # 设置备份组的认证字。 [H3C-Ethernet1/0/0] vrrp vrid 1 virtual-ip 202.38.160.111 # 设置备份组的优先级。 [H3C-Ethernet1/0/0] vrrp vrid 1 virtual-ip 202.38.160.111 # 创建一个备份组2。 [H3C-Ethernet1/0/0] vrrp vrid 2 virtual-ip 202.38.160.112 # 设置备份组2的优先级。
|udp}sour h3c:rule {normal|special}{permit|deny}{tcp|udp}sour 配置HSRP组 思科:standby group-number ip virtual-ip 华为:vrrp vrid number virtual-ip h3c:vrrp vrid number virtual-ip 配置HSRP优先级 思科:standby group-number