H3C-IRF堆叠-VRRP双机热备-IPSecvpan

第一部分： VRRP双机热备

1:链路聚合

[H3C]sys Sw1
[Sw1]int GigabitEthernet 1/0/6
[Sw1-GigabitEthernet1/0/6]port link-mode route
[Sw1-GigabitEthernet1/0/6]ip address 192.168.100.2 24

[H3C]sys R1
[R1]int GigabitEthernet 0/0
[R1-GigabitEthernet0/0]ip address 192.168.100.1 24

[R1]int GigabitEthernet 0/1
[R1-GigabitEthernet0/1]ip address 192.168.101.1 24
[R1-GigabitEthernet0/1]quit
[R1]int GigabitEthernet 0/2
[R1-GigabitEthernet0/2]ip address 12.1.1.1 24
 

[H3C]sys Sw2
[Sw2]int GigabitEthernet 1/0/6
[Sw2-GigabitEthernet1/0/6]port link-mode route
[Sw2-GigabitEthernet1/0/6]ip address 192.168.101.2 24
 

[R2]undo in en
[R2]sys R2
[R2]int GigabitEthernet 0/0
[R2-GigabitEthernet0/0]ip add 12.1.1.2 24
[R2-GigabitEthernet0/0]int gi 0/1
[R2-GigabitEthernet0/1]ip add 23.1.1.2 24
[R2-GigabitEthernet0/1]quit
[R2]int LoopBack 0
[R2-LoopBack0]ip address 2.2.2.2 24

[H3C]undo in en
[H3C]sys R3
[R3]int gi 0/0
[R3-GigabitEthernet0/0]ip add 23.1.1.3 24
[R3-GigabitEthernet0/0]int gi 5/0
[R3-GigabitEthernet5/0]ip address 13.1.1.3 24
 

[Sw1]int Bridge-Aggregation 1
[Sw1-Bridge-Aggregation1]quit
[Sw1]int range GigabitEthernet 1/0/1 GigabitEthernet 1/0/2
[Sw1-if-range]port link-aggregation group 1
[Sw1-if-range]quit
[Sw1]dis link-aggregation verbose  (查看链路聚合)

[Sw2]int Bridge-Aggregation 1
[Sw2-Bridge-Aggregation1]quit
[Sw2]int range GigabitEthernet 1/0/1 GigabitEthernet 1/0/2
[Sw2-if-range]port link-aggregation group 1
 

[H3C]undo in en
[H3C]sys SW3
[SW3]vlan 2
[SW3-vlan2]vlan 999
[SW3]int range GigabitEthernet 1/0/3 GigabitEthernet 1/0/4
[SW3-if-range]port access vlan 2
[SW3-if-range]quit
[SW3]int range GigabitEthernet 1/0/1 GigabitEthernet 1/0/2
[SW3-if-range]port link-type trunk
[SW3-if-range]port trunk permit vlan 2 999
 

[SW4]undo in en
[SW4]vlan 3
[SW4-vlan3]vlan 999
[SW4-vlan999]quit
[SW4]int GigabitEthernet 1/0/4
[SW4-GigabitEthernet1/0/4]port access vlan 3
[SW4-GigabitEthernet1/0/4]quit
[SW4]int range GigabitEthernet 1/0/2 GigabitEthernet 1/0/1
[SW4-if-range]port link-type trunk
[SW4-if-range]port trunk permit vlan 3 999
 

[Sw1]vlan 2
[Sw1-vlan2]vlan 3
[Sw1-vlan3]vlan 999
[Sw1-vlan999]quit
[Sw1]int GigabitEthernet 1/0/3
[Sw1-GigabitEthernet1/0/3]port link-type trunk
[Sw1-GigabitEthernet1/0/3]port trunk permit vlan 2 999
[Sw1-GigabitEthernet1/0/3]quit
[Sw1]int GigabitEthernet 1/0/4
[Sw1-GigabitEthernet1/0/4]port link-type trunk
[Sw1-GigabitEthernet1/0/4]port trunk permit vlan 3 999
[Sw1-GigabitEthernet1/0/4]quit
[Sw1]int Bridge-Aggregation 1
[Sw1-Bridge-Aggregation1]port link-type trunk
Configuring GigabitEthernet1/0/1 done.
Configuring GigabitEthernet1/0/2 done.
[Sw1-Bridge-Aggregation1]port trunk permit vlan 2 3 999
Configuring GigabitEthernet1/0/1 done.
Configuring GigabitEthernet1/0/2 done.
 

[Sw2]vlan 2
[Sw2-vlan2]vlan 3
[Sw2-vlan3]vlan 999
[Sw2-vlan999]quit
[Sw2]int GigabitEthernet 1/0/3
[Sw2-GigabitEthernet1/0/3]port link-type trunk
[Sw2-GigabitEthernet1/0/3]port trunk permit vlan 3 999
[Sw2-GigabitEthernet1/0/3]quit
[Sw2]int GigabitEthernet 1/0/4
[Sw2-GigabitEthernet1/0/4]port link-type trunk
[Sw2-GigabitEthernet1/0/4]port trunk permit vlan 2 999