VRRP技术实例(某市级单位核心交换机VRRP配置)


2台虚拟一台机器技术简述:

[HN--Center-SWA]dis c
 sysname HN-ZJJCZJ-Center-SWA
#
 local-server nas-ip 127.0.0.1 key huawei
#
 domain default enable system
#
 temperature-limit 0 10 70
 temperature-limit 2 10 70
 temperature-limit 5 10 70
 temperature-limit 6 10 70
#
 poe power max-value 2400
#
 link-aggregation group 1 mode manual
#
 vrrp ping-enable
#
 mirroring-group 1 inbound GigabitEthernet5/0/1 to GigabitEthernet5/0/5 mirrored-to GigabitEthernet5/0/8
 mirroring-group 2 outbound GigabitEthernet5/0/1 to GigabitEthernet5/0/5 mirrored-to GigabitEthernet5/0/8
#
radius scheme system
 primary authentication 127.0.0.1 1645
 primary accounting 127.0.0.1 1646       
 user-name-format without-domain
#
domain system
 vlan-assignment-mode integer
 access-limit disable
 state active
 idle-cut disable
 self-service-url disable
 messenger time disable
#
local-user admin
 password simple boco123
 service-type telnet
 level 3
#
 stp mode stp
 stp instance 0 root primary
 stp TC-protection enable
 stp enable
#
vlan 1
#
vlan 100                                 
#
vlan 101
#
vlan 102
#
vlan 103
#
vlan 104
#
vlan 200
 description ToSERVERS(Feishui)
#
vlan 201
 description ToSERVERS(Guoku)
#
vlan 202
 description ToSERVERS(SheBao)
#
vlan 203
 description ToSERVERS(NongShui)
#
vlan 204
 description ToSERVERS(Guanli)           
#
vlan 301
 description ToAR46-40(Yinhang)
#
vlan 302
 description DanWeiJieRu
#
interface Vlan-interface1
 ip address 10.104.190.189 255.255.255.192
 vrrp vrid 1 virtual-ip 10.104.190.190
 vrrp vrid 1 priority 120
 vrrp vrid 1 timer advertise 2
#
interface Vlan-interface100
 ip address 10.104.160.253 255.255.255.0
 vrrp vrid 100 virtual-ip 10.104.160.254
 vrrp vrid 100 priority 120
 vrrp vrid 100 timer advertise 2
#
interface Vlan-interface101
 ip address 10.104.161.253 255.255.255.0
 vrrp vrid 101 virtual-ip 10.104.161.254
 vrrp vrid 101 priority 120              
 vrrp vrid 101 timer advertise 2
#
interface Vlan-interface102
 ip address 10.104.162.253 255.255.255.0
 vrrp vrid 102 virtual-ip 10.104.162.254
 vrrp vrid 102 priority 120
 vrrp vrid 102 timer advertise 2
#
interface Vlan-interface103
 ip address 10.104.163.253 255.255.255.0
 vrrp vrid 103 virtual-ip 10.104.163.254
 vrrp vrid 103 priority 120
 vrrp vrid 103 timer advertise 2
#
interface Vlan-interface104
 ip address 10.104.164.253 255.255.255.0
 vrrp vrid 104 virtual-ip 10.104.164.254
 vrrp vrid 104 priority 120
 vrrp vrid 104 timer advertise 2
#
interface Vlan-interface200
 ip address 10.104.180.253 255.255.255.0
 vrrp vrid 200 virtual-ip 10.104.180.254 
 vrrp vrid 200 priority 120
 vrrp vrid 200 timer advertise 2
#
interface Vlan-interface201
 ip address 10.104.181.253 255.255.255.0
 vrrp vrid 201 virtual-ip 10.104.181.254
 vrrp vrid 201 priority 120
 vrrp vrid 201 timer advertise 2
#
interface Vlan-interface202
 ip address 10.104.182.253 255.255.255.0
 vrrp vrid 202 virtual-ip 10.104.182.254
 vrrp vrid 202 priority 120
 vrrp vrid 202 timer advertise 2
#
interface Vlan-interface203
 ip address 10.104.183.253 255.255.255.0
 vrrp vrid 203 virtual-ip 10.104.183.254
 vrrp vrid 203 priority 120
 vrrp vrid 203 timer advertise 2
#
interface Vlan-interface204              
 ip address 10.104.184.253 255.255.255.0
 vrrp vrid 204 virtual-ip 10.104.184.254
 vrrp vrid 204 priority 120
 vrrp vrid 204 timer advertise 2
#
interface Vlan-interface301
 ip address 10.104.190.253 255.255.255.224
 vrrp vrid 30 virtual-ip 10.104.190.254
 vrrp vrid 30 priority 120
 vrrp vrid 30 timer advertise 2
#
interface Vlan-interface302
 ip address 172.16.233.253 255.255.254.0
 vrrp vrid 31 virtual-ip 172.16.233.254
 vrrp vrid 31 priority 120
 vrrp vrid 31 timer advertise 2
#
interface Aux0/0/0
#
interface M-Ethernet0/0/0
#
interface GigabitEthernet0/0/1           
 duplex full
 speed 1000
 port link-type trunk
 port trunk permit vlan all
 port link-aggregation group 1
#
interface GigabitEthernet0/0/2
 duplex full
 speed 1000
 port link-type trunk
 port trunk permit vlan all
 port link-aggregation group 1
#
interface GigabitEthernet0/0/3
#
interface GigabitEthernet0/0/4
#
interface GigabitEthernet2/0/1
 description To SW_1_S3928TP-SI
 duplex full
 speed 1000
 port link-type trunk                    
 port trunk permit vlan all
#
interface GigabitEthernet2/0/2
 description To SW_2_S3928TP-SI
 duplex full
 speed 1000
 port link-type trunk
 port trunk permit vlan all
#
interface GigabitEthernet2/0/3
 description To SW_3_S3928TP-SI
 duplex full
 speed 1000
 port link-type trunk
 port trunk permit vlan all
#
interface GigabitEthernet2/0/4
 description To SW_4_S3928TP-SI
 duplex full
 speed 1000
 port link-type trunk
 port trunk permit vlan all
#                                        
interface GigabitEthernet2/0/5
 description DanWeiJieRu3928
 duplex full
 speed 1000
 port link-type trunk
 port trunk permit vlan all
#
interface GigabitEthernet2/0/6
 description DanWeiJieRu3952
 duplex full
 speed 1000
 port link-type trunk
 port trunk permit vlan all
#
interface GigabitEthernet2/0/7
#
interface GigabitEthernet2/0/8
#
interface GigabitEthernet5/0/1
 port access vlan 201
#
interface GigabitEthernet5/0/2           
 port access vlan 201
#
interface GigabitEthernet5/0/3
 port access vlan 201
#
interface GigabitEthernet5/0/4
 port access vlan 201
#
interface GigabitEthernet5/0/5
 port access vlan 201
#
interface GigabitEthernet5/0/6
#
interface GigabitEthernet5/0/7
 port access vlan 204
#
interface GigabitEthernet5/0/8
 port access vlan 204
#
interface GigabitEthernet6/0/1
 port access vlan 200
#                                        
interface GigabitEthernet6/0/2
 port access vlan 200
#
interface GigabitEthernet6/0/3
 port access vlan 200
#
interface GigabitEthernet6/0/4
 port access vlan 204
#
interface GigabitEthernet6/0/5
 port access vlan 204
#
interface GigabitEthernet6/0/6
 port access vlan 200
#
interface GigabitEthernet6/0/7
 port access vlan 204
#
interface GigabitEthernet6/0/8
 port access vlan 301
#
interface NULL0                          
#
 arp timer aging 1
#
 ip route-static 10.104.190.0 255.255.255.252 10.104.190.250 preference 60
 ip route-static 10.104.190.4 255.255.255.252 10.104.190.250 preference 60
 ip route-static 10.104.190.8 255.255.255.252 10.104.190.250 preference 60
 ip route-static 10.104.190.12 255.255.255.252 10.104.190.250 preference 60
 ip route-static 10.104.190.16 255.255.255.252 10.104.190.250 preference 60
 ip route-static 10.104.190.20 255.255.255.252 10.104.190.250 preference 60
 ip route-static 10.104.191.0 255.255.255.0 10.104.192.250 preference 60
 ip route-static 10.104.191.0 255.255.255.224 10.104.190.250 preference 60
 ip route-static 10.104.191.32 255.255.255.224 10.104.190.250 preference 60
 ip route-static 10.104.191.64 255.255.255.224 10.104.190.250 preference 60
 ip route-static 10.104.191.96 255.255.255.224 10.104.190.250 preference 60
 ip route-static 10.104.191.160 255.255.255.224 10.104.190.250 preference 60
 ip route-static 172.16.232.0 255.255.254.0 172.16.233.254 preference 60
#
 snmp-agent
 snmp-agent local-engineid 800007DB000FE218FE3D6877
 snmp-agent community read zjjczjr
 snmp-agent community write zjjczjw
 snmp-agent sys-info location zhangjiajie
 snmp-agent sys-info version all
 snmp-agent target-host trap address udp-domain 10.104.170.11 udp-port 5000 params securityname public
 snmp-agent trap enable standard
 snmp-agent trap enable vrrp
 snmp-agent trap enable bgp
#
user-interface aux 0
user-interface vty 0 4
 authentication-mode scheme
#
return

 


#
 sysname HN-Center-SWB
#
 local-server nas-ip 127.0.0.1 key huawei
#
 domain default enable system
#
 temperature-limit 0 10 70
 temperature-limit 2 10 70
 temperature-limit 5 10 70
 temperature-limit 6 10 70
#
 poe power max-value 2400
#
 link-aggregation group 1 mode manual
#
 vrrp ping-enable
#
radius scheme system
 primary authentication 127.0.0.1 1645
 primary accounting 127.0.0.1 1646
 user-name-format without-domain
#
  ---- More ----[42D                                          [42Ddomain system
 vlan-assignment-mode integer
 access-limit disable
 state active
 idle-cut disable
 self-service-url disable
 messenger time disable
#
local-user admin
 password simple boco123
 service-type telnet
 level 3
#
 stp mode stp
 stp instance 0 root secondary
 stp TC-protection enable
 stp enable
#
vlan 1
#
vlan 100
#
  ---- More ----[42D                                          [42Dvlan 101
#
vlan 102
#
vlan 103
#
vlan 104
#
vlan 200
 description ToSERVERS(Feishui)
#
vlan 201
 description ToSERVERS(Guoku)
#
vlan 202
 description ToSERVERS(SheBao)
#
vlan 203
 description ToSERVERS(NongShui)
#
vlan 204
 description ToSERVERS(Guanli)
#
  ---- More ----[42D                                          [42Dvlan 301
 description ToAR46-40(Yinhang)
#
vlan 302
 description DanWeiJieRu
#
interface Vlan-interface1
 ip address 10.104.190.188 255.255.255.192
 vrrp vrid 1 virtual-ip 10.104.190.190
 vrrp vrid 1 timer advertise 2
#
interface Vlan-interface100
 ip address 10.104.160.252 255.255.255.0
 vrrp vrid 100 virtual-ip 10.104.160.254
 vrrp vrid 100 timer advertise 2
#
interface Vlan-interface101
 ip address 10.104.161.252 255.255.255.0
 vrrp vrid 101 virtual-ip 10.104.161.254
 vrrp vrid 101 timer advertise 2
#
interface Vlan-interface102
 ip address 10.104.162.252 255.255.255.0
  ---- More ----[42D                                          [42D vrrp vrid 102 virtual-ip 10.104.162.254
 vrrp vrid 102 timer advertise 2
#
interface Vlan-interface103
 ip address 10.104.163.252 255.255.255.0
 vrrp vrid 103 virtual-ip 10.104.163.254
 vrrp vrid 103 timer advertise 2
#
interface Vlan-interface104
 ip address 10.104.164.252 255.255.255.0
 vrrp vrid 104 virtual-ip 10.104.164.254
 vrrp vrid 104 timer advertise 2
#
interface Vlan-interface200
 ip address 10.104.180.252 255.255.255.0
 vrrp vrid 200 virtual-ip 10.104.180.254
 vrrp vrid 200 timer advertise 2
#
interface Vlan-interface201
 ip address 10.104.181.252 255.255.255.0
 vrrp vrid 201 virtual-ip 10.104.181.254
 vrrp vrid 201 timer advertise 2
  ---- More ----[42D                                          [42D#
interface Vlan-interface202
 ip address 10.104.182.252 255.255.255.0
 vrrp vrid 202 virtual-ip 10.104.182.254
 vrrp vrid 202 timer advertise 2
#
interface Vlan-interface203
 ip address 10.104.183.252 255.255.255.0
 vrrp vrid 203 virtual-ip 10.104.183.254
 vrrp vrid 203 timer advertise 2
#
interface Vlan-interface204
 ip address 10.104.184.252 255.255.255.0
 vrrp vrid 204 virtual-ip 10.104.184.254
 vrrp vrid 204 timer advertise 2
#
interface Vlan-interface301
 ip address 10.104.190.252 255.255.255.224
 vrrp vrid 30 virtual-ip 10.104.190.254
 vrrp vrid 30 timer advertise 2
#
interface Vlan-interface302
  ---- More ----[42D                                          [42D ip address 172.16.233.252 255.255.254.0
 vrrp vrid 31 virtual-ip 172.16.233.254
 vrrp vrid 31 timer advertise 2
#
interface Aux0/0/0
#
interface M-Ethernet0/0/0
#
interface GigabitEthernet0/0/1
 duplex full
 speed 1000
 port link-type trunk
 port trunk permit vlan all
 port link-aggregation group 1
#
interface GigabitEthernet0/0/2
 duplex full
 speed 1000
 port link-type trunk
 port trunk permit vlan all
 port link-aggregation group 1
#
  ---- More ----[42D                                          [42Dinterface GigabitEthernet0/0/3
#
interface GigabitEthernet0/0/4
#
interface GigabitEthernet2/0/1
 description To SW_1_S3928TP-SI
 duplex full
 speed 1000
 port link-type trunk
 port trunk permit vlan all
#
interface GigabitEthernet2/0/2
 description To SW_2_S3928TP-SI
 duplex full
 speed 1000
 port link-type trunk
 port trunk permit vlan all
#
interface GigabitEthernet2/0/3
 description To SW_3_S3928TP-SI
 duplex full
 speed 1000
  ---- More ----[42D                                          [42D port link-type trunk
 port trunk permit vlan all
#
interface GigabitEthernet2/0/4
 description To SW_4_S3928TP-SI
 duplex full
 speed 1000
 port link-type trunk
 port trunk permit vlan all
#
interface GigabitEthernet2/0/5
 description ToDanWeiJieRu3928
 duplex full
 speed 1000
 port link-type trunk
 port trunk permit vlan all
#
interface GigabitEthernet2/0/6
 description ToDanWeiJieRu3952
 duplex full
 speed 1000
 port link-type trunk
 port trunk permit vlan all
  ---- More ----[42D                                          [42D#
interface GigabitEthernet2/0/7
#
interface GigabitEthernet2/0/8
#
interface GigabitEthernet5/0/1
 port access vlan 201
#
interface GigabitEthernet5/0/2
 port access vlan 201
#
interface GigabitEthernet5/0/3
 port access vlan 201
#
interface GigabitEthernet5/0/4
 port access vlan 201
#
interface GigabitEthernet5/0/5
 port access vlan 201
#
interface GigabitEthernet5/0/6
#
  ---- More ----[42D                                          [42Dinterface GigabitEthernet5/0/7
#
interface GigabitEthernet5/0/8
 port access vlan 301
#
interface GigabitEthernet6/0/1
 port access vlan 200
#
interface GigabitEthernet6/0/2
 port access vlan 200
#
interface GigabitEthernet6/0/3
 port access vlan 200
#
interface GigabitEthernet6/0/4
 port access vlan 201
#
interface GigabitEthernet6/0/5
 port access vlan 201
#
interface GigabitEthernet6/0/6
 port access vlan 200
  ---- More ----[42D                                          [42D#
interface GigabitEthernet6/0/7
 port access vlan 204
#
interface GigabitEthernet6/0/8
 port access vlan 204
#
interface NULL0
#
 arp timer aging 1
#
 ip route-static 10.104.190.0 255.255.255.252 10.104.190.250 preference 60
 ip route-static 10.104.190.4 255.255.255.252 10.104.190.250 preference 60
 ip route-static 10.104.190.8 255.255.255.252 10.104.190.250 preference 60
 ip route-static 10.104.190.12 255.255.255.252 10.104.190.250 preference 60
 ip route-static 10.104.190.16 255.255.255.252 10.104.190.250 preference 60
 ip route-static 10.104.190.20 255.255.255.252 10.104.190.250 preference 60
 ip route-static 10.104.191.0 255.255.255.224 10.104.190.250 preference 60
 ip route-static 10.104.191.32 255.255.255.224 10.104.190.250 preference 60
 ip route-static 10.104.191.64 255.255.255.224 10.104.190.250 preference 60
 ip route-static 10.104.191.96 255.255.255.224 10.104.190.250 preference 60
 ip route-static 10.104.191.160 255.255.255.224 10.104.190.250 preference 60
  ---- More ----[42D                                          [42D#
 snmp-agent
 snmp-agent local-engineid 800007DB000FE21903EC6877
 snmp-agent community read zjjczjr
 snmp-agent community write zjjczjw
 snmp-agent sys-info location zhangjiajie
 snmp-agent sys-info version all
 snmp-agent target-host trap address udp-domain 10.10.184.1 udp-port 5000 params securityname public
 snmp-agent trap enable standard
 snmp-agent trap enable vrrp
 snmp-agent trap enable bgp
#
user-interface aux 0
user-interface vty 0 4
 authentication-mode scheme
#
return

 

注释:在内网核心交换机上做了VRRP,即实现了两台交换机对外虚拟成一台交换机的技术。
这个技术的实现细节是两边的路由配置相同,
只是VLAN的IP不一样,但是VLAN的VRRP  VIRTUAL-IP 相同。
FOR EXAMPLE:
交换机SWB的VLAN配置如下;
interface Vlan-interface1
 ip address 10.104.190.188 255.255.255.192
 vrrp vrid 1 virtual-ip 10.104.190.190
 vrrp vrid 1 timer advertise 2
#
interface Vlan-interface100
 ip address 10.104.160.252 255.255.255.0
 vrrp vrid 100 virtual-ip 10.104.160.254
 vrrp vrid 100 timer advertise 2
#
interface Vlan-interface101
 ip address 10.104.161.252 255.255.255.0
 vrrp vrid 101 virtual-ip 10.104.161.254
 vrrp vrid 101 timer advertise 2
#
interface Vlan-interface102
 ip address 10.104.162.252 255.255.255.0
  ---- More ----[42D                                          [42D vrrp vrid 102 virtual-ip 10.104.162.254
 vrrp vrid 102 timer advertise 2
#
interface Vlan-interface103
 ip address 10.104.163.252 255.255.255.0
 vrrp vrid 103 virtual-ip 10.104.163.254
 vrrp vrid 103 timer advertise 2
#
interface Vlan-interface104
 ip address 10.104.164.252 255.255.255.0
 vrrp vrid 104 virtual-ip 10.104.164.254
 vrrp vrid 104 timer advertise 2
#
interface Vlan-interface200
 ip address 10.104.180.252 255.255.255.0
 vrrp vrid 200 virtual-ip 10.104.180.254
 vrrp vrid 200 timer advertise 2
#
interface Vlan-interface201
 ip address 10.104.181.252 255.255.255.0
 vrrp vrid 201 virtual-ip 10.104.181.254
 vrrp vrid 201 timer advertise 2
  ---- More ----[42D                                          [42D#
interface Vlan-interface202
 ip address 10.104.182.252 255.255.255.0
 vrrp vrid 202 virtual-ip 10.104.182.254
 vrrp vrid 202 timer advertise 2
#
interface Vlan-interface203
 ip address 10.104.183.252 255.255.255.0
 vrrp vrid 203 virtual-ip 10.104.183.254
 vrrp vrid 203 timer advertise 2
#
interface Vlan-interface204
 ip address 10.104.184.252 255.255.255.0
 vrrp vrid 204 virtual-ip 10.104.184.254
 vrrp vrid 204 timer advertise 2
#
interface Vlan-interface301
 ip address 10.104.190.252 255.255.255.224
 vrrp vrid 30 virtual-ip 10.104.190.254
 vrrp vrid 30 timer advertise 2
#
交换机SWA上对应的配置为:
interface Vlan-interface1
 ip address 10.104.190.189 255.255.255.192
 vrrp vrid 1 virtual-ip 10.104.190.190
 vrrp vrid 1 priority 120
 vrrp vrid 1 timer advertise 2
#
interface Vlan-interface100
 ip address 10.104.160.253 255.255.255.0
 vrrp vrid 100 virtual-ip 10.104.160.254
 vrrp vrid 100 priority 120
 vrrp vrid 100 timer advertise 2
#
interface Vlan-interface101
 ip address 10.104.161.253 255.255.255.0
 vrrp vrid 101 virtual-ip 10.104.161.254
 vrrp vrid 101 priority 120              
 vrrp vrid 101 timer advertise 2
#
interface Vlan-interface102
 ip address 10.104.162.253 255.255.255.0
 vrrp vrid 102 virtual-ip 10.104.162.254
 vrrp vrid 102 priority 120
 vrrp vrid 102 timer advertise 2
#
interface Vlan-interface103
 ip address 10.104.163.253 255.255.255.0
 vrrp vrid 103 virtual-ip 10.104.163.254
 vrrp vrid 103 priority 120
 vrrp vrid 103 timer advertise 2
#
interface Vlan-interface104
 ip address 10.104.164.253 255.255.255.0
 vrrp vrid 104 virtual-ip 10.104.164.254
 vrrp vrid 104 priority 120
 vrrp vrid 104 timer advertise 2
#
interface Vlan-interface200
 ip address 10.104.180.253 255.255.255.0
 vrrp vrid 200 virtual-ip 10.104.180.254 
 vrrp vrid 200 priority 120
 vrrp vrid 200 timer advertise 2
#
interface Vlan-interface201
 ip address 10.104.181.253 255.255.255.0
 vrrp vrid 201 virtual-ip 10.104.181.254
 vrrp vrid 201 priority 120
 vrrp vrid 201 timer advertise 2
#
interface Vlan-interface202
 ip address 10.104.182.253 255.255.255.0
 vrrp vrid 202 virtual-ip 10.104.182.254
 vrrp vrid 202 priority 120
 vrrp vrid 202 timer advertise 2
#
interface Vlan-interface203
 ip address 10.104.183.253 255.255.255.0
 vrrp vrid 203 virtual-ip 10.104.183.254
 vrrp vrid 203 priority 120
 vrrp vrid 203 timer advertise 2
#
interface Vlan-interface204              
 ip address 10.104.184.253 255.255.255.0
 vrrp vrid 204 virtual-ip 10.104.184.254
 vrrp vrid 204 priority 120
 vrrp vrid 204 timer advertise 2
#
interface Vlan-interface301
 ip address 10.104.190.253 255.255.255.224
 vrrp vrid 30 virtual-ip 10.104.190.254
 vrrp vrid 30 priority 120
 vrrp vrid 30 timer advertise 2
#
可以看出他们相同的VLAN的 VRRP 虚拟IP是一样的,只不过VLAN IP不同。 

  • 0
    点赞
  • 2
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值