• VRRP配置案例（路由走向分析，端口切换）

    以下配置图为例

    PC1的配置

    acsw下行为access口，上行为trunk口， 将g0/0/3划分到vlan100中

    1. <Huawei>sys
    2. Enter system view, return user view with Ctrl+Z.
    3. [Huawei]sysname acsw
    4. [acsw]
    5. Sep 11 2023 18:15:48-08:00 acsw DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.2
    6. 5.191.3.1 configurations have been changed. The current change number is 4, the 
    7. change loop count is 0, and the maximum number of records is 4095.
    8. [acsw]undo info-center enable
    9. Info: Information center is disabled.
    10. [acsw]vlan 10
    11.  
    12. [acsw-vlan100]int g0/0/3
    13. [acsw-GigabitEthernet0/0/3]port link-type access
    14.  
    15. [acsw-GigabitEthernet0/0/3]port default vlan 10
    16. [acsw-GigabitEthernet0/0/3]qu
    17.  
    18. [acsw]int g0/0/1
    19. [acsw-GigabitEthernet0/0/1]port link-type trunk
    20. [acsw-GigabitEthernet0/0/1]port trunk allow-pass vlan all
    21.  
    22. [acsw-GigabitEthernet0/0/1]int g0/0/2
    23. [acsw-GigabitEthernet0/0/2]port link-type trunk
    24. [acsw-GigabitEthernet0/0/2]port trunk allow-pass vlan all
    25.  
    26. [acsw-GigabitEthernet0/0/2]qu
    27. [acsw]

     核心交换机1的配置

    1. <Huawei>sys
    2. Enter system view, return user view with Ctrl+Z.
    3. [Huawei]sysname coresw1
    4. [coresw1]
    5. Sep 11 2023 21:33:29-08:00 coresw1 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.
    6. 5.25.191.3.1 configurations have been changed. The current change number is 4, t
    7. he change loop count is 0, and the maximum number of records is 4095.
    8. [coresw1]undo info-center enable
    9. Info: Information center is disabled.
    10. [coresw1]interface g0/0/1
    11. [coresw1-GigabitEthernet0/0/1]port link-type trunk
    12. [coresw1-GigabitEthernet0/0/1]port trunk allow-pass vlan all
    13.  
    14. [coresw1-GigabitEthernet0/0/1]int g0/0/3
    15. [coresw1-GigabitEthernet0/0/3]port link-type trunk
    16. [coresw1-GigabitEthernet0/0/3]port trunk allow-pass vlan all
    17. [coresw1-GigabitEthernet0/0/3]q
    18.  
    19. [coresw1]vlan 10
    20. [coresw1-vlan10]q
    21. [coresw1]vlan 100
    22. [coresw1-vlan100]q
    23. [coresw1]int g0/0/2
    24. [coresw1-GigabitEthernet0/0/2]port link-type access
    25. [coresw1-GigabitEthernet0/0/2]port default vlan 100
    26. [coresw1-GigabitEthernet0/0/2]q
    27.  
    28. [coresw1]interface vlanif 10
    29. [coresw1-Vlanif10]ip address 192.168.10.252 24
    30. [coresw1-Vlanif10]qu
    31.  
    32. [coresw1]interface vlanif 100
    33. [coresw1-Vlanif100]ip add 192.168.100.1 30
    34. [coresw1-Vlanif100]qu
    35.  
    36. <coresw1>sys
    37. Enter system view, return user view with Ctrl+Z.
    38. [coresw1]interface vlanif 10
    39. #必配
    40. [coresw1-Vlanif10]vrrp vrid 10 virtual-ip 192.168.10.254
    41. #选配
    42. [coresw1-Vlanif10]vrrp vrid 10 priority 120
    43. [coresw1-Vlanif10]vrrp vrid 10 preempt-mode time delay 20
    44. [coresw1-Vlanif10]qu
    45. [coresw1]
    46. [coresw1]display vrrp
    47.   Vlanif10 | Virtual Router 10
    48.     State : Master
    49.     Virtual IP : 192.168.10.254
    50.     Master IP : 192.168.10.252
    51.     PriorityRun : 120
    52.     PriorityConfig : 120
    53.     MasterPriority : 120
    54.     Preempt : YES   Delay Time : 20 s
    55.     TimerRun : 1 s
    56.     TimerConfig : 1 s
    57.     Auth type : NONE
    58.     Virtual MAC : 0000-5e00-010a
    59.     Check TTL : YES
    60.     Config type : normal-vrrp
    61.     Create time : 2023-09-11 21:57:31 UTC-08:00
    62.     Last change time : 2023-09-11 21:57:35 UTC-08:00
    63.  
    64. #抢占延迟20秒的作用
    65. 这里我们先将coresw1
    66. vrrp vrid 10 priority 90
    67. 在变为
    68. vrrp vrid 10 priority 120
    69. 我们通过tracert路径可以看见，还是走coresw2,这就是因为有抢占延迟

    核心交换机2的配置

    1. <Huawei>
    2. <Huawei>sys
    3. Enter system view, return user view with Ctrl+Z.
    4. [Huawei]sysname coresw2
    5. [coresw2]
    6. Sep 11 2023 21:48:13-08:00 coresw2 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.
    7. 5.25.191.3.1 configurations have been changed. The current change number is 4, t
    8. he change loop count is 0, and the maximum number of records is 4095.
    9. [coresw2]undo info-center enable
    10. Info: Information center is disabled.
    11. [coresw2]interface g0/0/1
    12. [coresw2-GigabitEthernet0/0/1]port trunk allow-pass vlan all
    13. [coresw2-GigabitEthernet0/0/1]int g0/0/3
    14. [coresw2-GigabitEthernet0/0/3]p l t
    15. [coresw2-GigabitEthernet0/0/3]port trunk allow vlan all
    16. [coresw2-GigabitEthernet0/0/3]qu
    17. [coresw2]vlan 10
    18. [coresw2-vlan10]vlan 200
    19. [coresw2-vlan200]qu
    20. [coresw2]interface g0/0/2
    21. [coresw2-GigabitEthernet0/0/2]port link-type access
    22. [coresw2-GigabitEthernet0/0/2]port default vlan 200
    23. [coresw2-GigabitEthernet0/0/2]qu
    24. [coresw2]int vlanif 10
    25. [coresw2-Vlanif10]ip add 192.168.10.253 24
    26. [coresw2-Vlanif10]interface vlan 200
    27. [coresw2-Vlanif200]ip address 192.168.200.1 30
    28. [coresw2-Vlanif200]
    29. [coresw2-Vlanif200]ping 192.168.10.252
    30.   PING 192.168.10.252: 56  data bytes, press CTRL_C to break
    31.     Reply from 192.168.10.252: bytes=56 Sequence=1 ttl=255 time=130 ms
    32.     Reply from 192.168.10.252: bytes=56 Sequence=2 ttl=255 time=60 ms
    33.     Reply from 192.168.10.252: bytes=56 Sequence=3 ttl=255 time=70 ms
    34.     Reply from 192.168.10.252: bytes=56 Sequence=4 ttl=255 time=60 ms
    35.     Reply from 192.168.10.252: bytes=56 Sequence=5 ttl=255 time=70 ms
    36.  
    37. [coresw2]  
    38. [coresw2]int vlanif 10
    39. #必选
    40. [coresw2-Vlanif10]vrrp vrid 10 virtual-ip 192.168.10.254
    41. [coresw2-Vlanif10]
    42. #默认优先级是100,但是第一个核心交换机为120,所以第一个是master
    43. [coresw2-Vlanif10]qu
    44.  
    45. [coresw2]display vrrp
    46.   Vlanif10 | Virtual Router 10
    47.     State : Backup
    48.     Virtual IP : 192.168.10.254
    49.     Master IP : 192.168.10.252
    50.     PriorityRun : 100
    51.     PriorityConfig : 100
    52.     MasterPriority : 120
    53.     Preempt : YES   Delay Time : 0 s
    54.     TimerRun : 1 s
    55.     TimerConfig : 1 s
    56.     Auth type : NONE
    57.     Virtual MAC : 0000-5e00-010a
    58.     Check TTL : YES
    59.     Config type : normal-vrrp
    60.     Create time : 2023-09-11 22:05:51 UTC-08:00
    61.     Last change time : 2023-09-11 22:05:51 UTC-08:00
    62.  
    63. [coresw2]

    ping 网关，是master,即coresw1进行回应

    1. PC>ping 192.168.10.254
    2.  
    3. Ping 192.168.10.254: 32 data bytes, Press Ctrl_C to break
    4. From 192.168.10.254: bytes=32 seq=1 ttl=255 time=31 ms
    5. From 192.168.10.254: bytes=32 seq=2 ttl=255 time=31 ms
    6. From 192.168.10.254: bytes=32 seq=3 ttl=255 time=47 ms
    7. From 192.168.10.254: bytes=32 seq=4 ttl=255 time=47 ms
    8. From 192.168.10.254: bytes=32 seq=5 ttl=255 time=31 ms
    9.  
    10. --- 192.168.10.254 ping statistics ---
    11.   5 packet(s) transmitted
    12.   5 packet(s) received
    13.   0.00% packet loss
    14.   round-trip min/avg/max = 31/37/47 ms

    AR1的配置

    1. <Huawei>sys
    2. Enter system view, return user view with Ctrl+Z.
    3. [Huawei]sysname AR1
    4. [AR1]interface g0/0/1
    5. [AR1-GigabitEthernet0/0/1]ip add 192.168.100.2 30
    6. Sep 11 2023 22:16:34-08:00 AR1 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP
    7.  on the interface GigabitEthernet0/0/1 has entered the UP state. 
    8. [AR1-GigabitEthernet0/0/1]int g0/0/2
    9. [AR1-GigabitEthernet0/0/2]ip add 192.168.200.2 30
    10. [AR1-GigabitEthernet0/0/2]
    11. Sep 11 2023 22:17:17-08:00 AR1 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP
    12.  on the interface GigabitEthernet0/0/2 has entered the UP state. 
    13. [AR1-GigabitEthernet0/0/2]int g0/0/0 
    14. [AR1-GigabitEthernet0/0/0]ip add 100.1.1.2 30
    15. [AR1-GigabitEthernet0/0/0]
    16. Sep 11 2023 22:17:39-08:00 AR1 %%01IFNET/4/LINK_STATE(l)[2]:The line protocol IP
    17.  on the interface GigabitEthernet0/0/0 has entered the UP state. 
    18. [AR1-GigabitEthernet0/0/0]q
    19. #ping直连
    20. [AR1]ping 192.168.100.1
    21.   PING 192.168.100.1: 56  data bytes, press CTRL_C to break
    22.     Reply from 192.168.100.1: bytes=56 Sequence=1 ttl=255 time=50 ms
    23.     Reply from 192.168.100.1: bytes=56 Sequence=2 ttl=255 time=10 ms
    24.     Reply from 192.168.100.1: bytes=56 Sequence=3 ttl=255 time=10 ms
    25.     Reply from 192.168.100.1: bytes=56 Sequence=4 ttl=255 time=30 ms
    26.     Reply from 192.168.100.1: bytes=56 Sequence=5 ttl=255 time=20 ms
    27.  
    28.   --- 192.168.100.1 ping statistics ---
    29.     5 packet(s) transmitted
    30.     5 packet(s) received
    31.     0.00% packet loss
    32.     round-trip min/avg/max = 10/24/50 ms
    33.  
    34. [AR1]ping 192.168.200.1
    35.   PING 192.168.200.1: 56  data bytes, press CTRL_C to break
    36.     Reply from 192.168.200.1: bytes=56 Sequence=1 ttl=255 time=50 ms
    37.     Reply from 192.168.200.1: bytes=56 Sequence=2 ttl=255 time=20 ms
    38.     Reply from 192.168.200.1: bytes=56 Sequence=3 ttl=255 time=10 ms
    39.     Reply from 192.168.200.1: bytes=56 Sequence=4 ttl=255 time=30 ms
    40.     Reply from 192.168.200.1: bytes=56 Sequence=5 ttl=255 time=10 ms
    41.  
    42.   --- 192.168.200.1 ping statistics ---
    43.     5 packet(s) transmitted
    44.     5 packet(s) received
    45.     0.00% packet loss
    46.     round-trip min/avg/max = 10/24/50 ms
    47.

     互联网的配置

    1. sys
    2. int g0/0/0
    3. ip add 100.1.1.1 30

     到这里PC1仍然ping不通互联网，PC1与互联网并不在一个网段，就到达网关（coresw1）

    1. <coresw1>display ip routing-table
    2. Route Flags: R - relay, D - download to fib
    3. ------------------------------------------------------------------------------
    4. Routing Tables: Public
    5.          Destinations : 7        Routes : 7        
    6.  
    7. Destination/Mask    Proto   Pre  Cost      Flags NextHop         Interface
    8.  
    9.       127.0.0.0/8   Direct  0    0           D   127.0.0.1       InLoopBack0
    10.       127.0.0.1/32  Direct  0    0           D   127.0.0.1       InLoopBack0
    11.    192.168.10.0/24  Direct  0    0           D   192.168.10.252  Vlanif10
    12.  192.168.10.252/32  Direct  0    0           D   127.0.0.1       Vlanif10
    13.  192.168.10.254/32  Direct  0    0           D   127.0.0.1       Vlanif10
    14.   192.168.100.0/30  Direct  0    0           D   192.168.100.1   Vlanif100
    15.   192.168.100.1/32  Direct  0    0           D   127.0.0.1       Vlanif100

    重要的一步

    1. #配置默认路由,5个0，8个0都可以
    2. [coresw1]ip route-static 0.0.0.0 0.0.0.0 192.168.100.2
    3.  
    4. [coresw2]ip route-static 0.0.0.0 0 192.168.200.2

    到达这一步，再配置互联网的回程路由
    这里可以写静态路由，也可以写默认路由

    1. #静态ip
    2. ip route-static 192.168.10.0 24 100.1.1.2
    3.  
    4. #默认路由
    5. ip route-static 0.0.0.0 0 100.1.1.2

     这里AR1没有目的地址：192.168.10.1的路由 

    1. [AR1]display ip routing-table
    2. Route Flags: R - relay, D - download to fib
    3. ------------------------------------------------------------------------------
    4. Routing Tables: Public
    5.          Destinations : 13       Routes : 13       
    6.  
    7. Destination/Mask    Proto   Pre  Cost      Flags NextHop         Interface
    8.  
    9.       100.1.1.0/30  Direct  0    0           D   100.1.1.2       GigabitEthernet
    10. 0/0/0
    11.       100.1.1.2/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
    12. 0/0/0
    13.       100.1.1.3/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
    14. 0/0/0
    15.       127.0.0.0/8   Direct  0    0           D   127.0.0.1       InLoopBack0
    16.       127.0.0.1/32  Direct  0    0           D   127.0.0.1       InLoopBack0
    17. 127.255.255.255/32  Direct  0    0           D   127.0.0.1       InLoopBack0
    18.   192.168.100.0/30  Direct  0    0           D   192.168.100.2   GigabitEthernet
    19. 0/0/1
    20.   192.168.100.2/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
    21. 0/0/1
    22.   192.168.100.3/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
    23. 0/0/1
    24.   192.168.200.0/30  Direct  0    0           D   192.168.200.2   GigabitEthernet
    25. 0/0/2
    26.   192.168.200.2/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
    27. 0/0/2
    28.   192.168.200.3/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
    29. 0/0/2
    30. 255.255.255.255/32  Direct  0    0           D   127.0.0.1       InLoopBack0
    31.

     所以AR1还需要配静态路由

    1. [AR1]ip route-static 192.168.10.0 24 192.168.100.1
    2. [AR1]ip route-static 192.168.10.0 24 192.168.200.1

     现在终于可以ping通啦！！

    注：

    可以用tracert观察路径

     最后一个问题：端口的切换

    1. #如果g0/0/2接口down了,那么其优先级变为120-30=90,那么master会变为coresw2
    2. [coresw1]interface vlanif 10
    3. [coresw1-Vlanif10]vrrp vrid 10 track interface g0/0/2
    4. [coresw1-Vlanif10]vrrp vrid 10 track interface g0/0/2 reduced 30

    可以自己试试

    1. [coresw1]int g0/0/2
    2. [coresw1-GigabitEthernet0/0/2]shutdown
    3. [coresw1-GigabitEthernet0/0/2]qu
    4. [coresw1]display vrrp
    5.   Vlanif10 | Virtual Router 10
    6.     State : Master
    7.     Virtual IP : 192.168.10.254
    8.     Master IP : 192.168.10.252
    9.     PriorityRun : 90
    10.     PriorityConfig : 120
    11.     MasterPriority : 90
    12.     Preempt : YES   Delay Time : 20 s
    13.     TimerRun : 1 s
    14.     TimerConfig : 1 s
    15.     Auth type : NONE
    16.     Virtual MAC : 0000-5e00-010a
    17.     Check TTL : YES
    18.     Config type : normal-vrrp
    19.     Track IF : GigabitEthernet0/0/2   Priority reduced : 30
    20.     IF state : DOWN
    21.     Create time : 2023-09-11 21:57:31 UTC-08:00
    22.     Last change time : 2023-09-11 21:57:35 UTC-08:00
    23.  
    24.  
    25.  
    26. [coresw2]display vrrp
    27.   Vlanif10 | Virtual Router 10
    28.     State : Master
    29.     Virtual IP : 192.168.10.254
    30.     Master IP : 192.168.10.253
    31.     PriorityRun : 120
    32.     PriorityConfig : 120
    33.     MasterPriority : 120
    34.     Preempt : YES   Delay Time : 20 s
    35.     TimerRun : 1 s
    36.     TimerConfig : 1 s
    37.     Auth type : NONE
    38.     Virtual MAC : 0000-5e00-010a
    39.     Check TTL : YES
    40.     Config type : normal-vrrp
    41.     Create time : 2023-09-11 22:05:51 UTC-08:00
    42.     Last change time : 2023-09-11 22:56:50 UTC-08:00
  • 相关阅读:
    Spark集群中一个Worker节点启动失败的排错记录
    实现一个极简的字节数组对象池
    扰动算法（哈希函数）
    Java项目：SSH的自动排课系统-遗传算法
    frp内网穿透ssh，tcp经过服务器慢速和p2p模式实现高速吃满上传带宽
    2个比较经典的PHP加密解密函数分享
    HTML静态网页成品作业(HTML+CSS)——贵州美食介绍设计制作(1个页面)
    项目管理——评审中的误区
    C++多态(2)
    【JavaScript】一文了解定时器的使用
  • 原文地址：https://blog.csdn.net/weixin_69884785/article/details/132814583