目录
案列背景与要求
在图所示的某企业网络拓扑中,路由器R1和R2是两台连接企业网关(Gateway,GW)的路由器,GW通过LSP接入Internet(这里我使用Server1代替)
企业网要求管理员使用VRRP实现路由器R1和R2的路由备份,提高外网接入的可靠性。在默认情况下,路由器R1为主用路由器,路由器R2为备用路由器,企业内部用户(见图中的PC10)使用虚拟路由器的IP地址(10.1.1.254)作为网关地址。
案列接口与地址池规划
接口和IP地址规划在拓扑图中已标出
案列配置过程
配置接口
[R1]interface GigabitEthernet 0/0/0 [R1-GigabitEthernet0/0/0]ip address 10.1.1.251 24 [R1-GigabitEthernet0/0/0]int g0/0/1 [R1-GigabitEthernet0/0/1]ip address 1.1.1.1 30
[R2]interface GigabitEthernet 0/0/0 [R2-GigabitEthernet0/0/0]ip address 10.1.1.252 24 [R2-GigabitEthernet0/0/0]int g0/0/1 [R2-GigabitEthernet0/0/1]ip address 2.1.1.1 30
[GW]interface GigabitEthernet 0/0/0 [GW-GigabitEthernet0/0/0]ip address 172.16.1.254 24 [GW-GigabitEthernet0/0/0]int g0/0/1 [GW-GigabitEthernet0/0/1]ip address 1.1.1.2 30 [GW-GigabitEthernet0/0/1]int g0/0/2 [GW-GigabitEthernet0/0/2]ip address 2.1.1.2 30
配置静态路由
[R1]ip route-static 172.16.1.0 24 1.1.1.2
[R2]ip route-static 172.16.1.0 24 2.1.1.2
[GW]ip route-static 10.1.1.0 24 1.1.1.1 [GW]ip route-static 10.1.1.0 24 2.1.1.1
在路由器接口上添加VRRP配置
在本案例中,要求管理员把VRRP的虚拟路由器ID(VRID)设置为10,把虚拟路由器IP地址设为10.1.1.254,并且使路由器R1成为VRRP的主用路由器,路由器R2成为VRRP的备用路由器。
[R1]interface GigabitEthernet 0/0/0 [R1-GigabitEthernet0/0/0]vrrp vrid 10 virtual-ip 10.1.1.254 [R1-GigabitEthernet0/0/0]vrrp vrid 10 priority 150
[R2]interface GigabitEthernet 0/0/0 [R2-GigabitEthernet0/0/0]vrrp vrid 10 virtual-ip 10.1.1.254
检查VRRP状态
[R1]display vrrp brief Total:1 Master:1 Backup:0 Non-active:0 VRID State Interface Type Virtual IP ---------------------------------------------------------------- 10 Master GE0/0/0 Normal 10.1.1.254
[R2]display vrrp brief Total:1 Master:0 Backup:1 Non-active:0 VRID State Interface Type Virtual IP ---------------------------------------------------------------- 10 Backup GE0/0/0 Normal 10.1.1.254
查看VRRP版本
[R1]display vrrp protocol-information
VRRP protocol information is shown as below:
VRRP protocol version : V2
Send advertisement packet mode : send v2 only
检查VRRP连通性及访问路径
PC>ping 172.16.1.1
Ping 172.16.1.1: 32 data bytes, Press Ctrl_C to break
From 172.16.1.1: bytes=32 seq=1 ttl=253 time=31 ms
From 172.16.1.1: bytes=32 seq=2 ttl=253 time=47 ms
From 172.16.1.1: bytes=32 seq=3 ttl=253 time=31 ms
From 172.16.1.1: bytes=32 seq=4 ttl=253 time=31 ms
From 172.16.1.1: bytes=32 seq=5 ttl=253 time=47 ms
--- 172.16.1.1 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 31/37/47 ms
PC>tracert 172.16.1.1
traceroute to 172.16.1.1, 8 hops max
(ICMP), press Ctrl+C to stop
1 10.1.1.251 46 ms 47 ms 32 ms
2 1.1.1.2 63 ms 47 ms 46 ms
3 172.16.1.1 32 ms 47 ms 46 ms
PC>
从[tracert]命令的输出结果可以确认数据包传输的路径是PC10→R1→GW
配置VRRP追踪上行端口
[R1]interface GigabitEthernet 0/0/0
[R1-GigabitEthernet0/0/0]vrrp vrid 10 track interface GigabitEthernet 0/0/1 reduced 100
从配置命令可以看出:路由器R1要在VRRP VRID 10中追踪接口GE0/0/1的的状态,当GE0/0/1的状态变为Down时,把VRRP VRID 10的优先级减少100(此时路由器R1接口GE0/0/0的优先级为50,低于路由器R2接口GE0/0/0的优先级100),这样路由器R2就可以通过优先级抢占主用角色。
手动关闭路由器R1的接口GE0/0/1
[R1]interface GigabitEthernet 0/0/1
[R1-GigabitEthernet0/0/1]shutdown
验证效果
PC>tracert 172.16.1.1
traceroute to 172.16.1.1, 8 hops max
(ICMP), press Ctrl+C to stop
1 10.1.1.252 47 ms 47 ms 47 ms
2 2.1.1.2 47 ms 31 ms 47 ms
3 172.16.1.1 47 ms 46 ms 47 ms
PC>
从路径跟踪回显信息可以清楚知道,当前PC10已经开始通过路由器R2的GE0/0/0接口来访问Internet,因此,VRRP的主/备用路由器切换成功。
总结
以上就是我整理的VRRP基本配置,如果有误,还望指出交流(*本篇文章是第一次创作)