1、HSRP不支持将真实的接口地址，设置为虚拟的网关地址，而VRRP支持
在功能上,VRRP和HSRP非常相似,但是就安全而言,VRRP对 HSRP的一个主要优势:它允许参与VRRP组的设备间建立认证机制.并且,不像HSRP那样要求虚拟路由器不能是其中一个路由器的ip地址,但是 VRRP允许这种情况发生(如果”拥有”虚拟路由器地址的路由器被建立并且正在运行,那么应该总是由这个虚拟路由器管理—等价于HSRP中的活动路由器),但是为了确保万一失效发生的时候终端主机不必重新学习MAC地址,它指定使用的MAC地址00-00-5e-00-01-VRID,这里的VRID 是虚拟路由器的ID(等价于一个HSRP的组标识符).
2.另外一个不同是VRRP不使用HSRP中的政变或者一个等价消息,VRRP的状态机比HSRP的要简单,HSRP有6个状态(初始(Initial) 状态，学习(Learn)状态，监听(Listen)状态，对话(Speak)状态，备份(Standby)状态，活动(Active)状态)和8个事件, VRRP只有3个状态(初始状态(Initialize)、主状态(Master)、备份状态(Backup))和5个事件.
3. HSRP有三种报文，而且有三种状态可以发送报文
呼叫(Hello)报文，告辞(Resign)报文，突变(Coup)报文
VRRP有一种报文
VRRP广播报文：由主路由器定时发出来通告它的存在，使用这些报文可以检测虚拟路由器各种参数，还可以用于主路由器的选举。
4. HSRP将报文承载在UDP报文上，而VRRP承载在TCP报文上(HSRP 使用UDP 1985端口，向组播地址224.0.0.2 发送hello消息。)
5.VRRP的安全:VRRP协议包括三种主要的认证方式:无认证,简单的明文密码和使用 MD5 HMAC ip认证的强认证.
强认证方法使用IP认证头(AH)协议.AH是与用在IPSEC中相同的协议,AH为认证VRRP分组中的内容和分组头提供了一个方法. MD5 HMAC 的使用表明使用一个共享的密钥用于产生hash值.路由器发送一个VRRP分组产生MD5 hash值,并将它置于要发送的通告中, 在接收时,接受方使用相同的密钥和MD5值,重新计算分组内容和分组头的hash值,如果结果相同,这个消息就是真正来自于一个可信赖的主机,如果不相同,它必须丢弃,这可以防止***者通过访问LAN而发出能影响选择过程的通告消息或者其他一些方法中断网络.
另外,VRRP包括一个保护VRRP分组不会被另外一个远程网络添加内容的机制(设置TTL值=255,并在接受时检查),这限制了可以进行本地***的大部分缺陷.而另一方面,HSRP在它的消息中使用的TTL值是1.
6.VRRP的崩溃间隔时间:3*通告间隔+时滞时间(skew-time)以上是网上搜索出来的东东，下面通过实验来验证看看，拓扑如下：
下面我们通过实验来做一些验证
hos R1
in e1/0
ip add 172.16.12.1 255.255.255.0
no sh
int e1/1
ip add 172.16.13.1 255.255.255.0
no sh
hos R2
in e1/0
ip add 172.16.23.1 255.255.255.0
no sh
int e1/1
ip add 172.16.12.2 255.255.255.0
no sh
hos R3
in e1/0
ip add 172.16.13.2 255.255.255.0
no sh
int e1/1
ip add 172.16.23.2 255.255.255.0
no sh-----然后在每个路由器上开起debug ip pa de 和 debug stand event
OK，下面开始，首先验证下HSRP是否支持真实IP设为虚拟路由器的IP，
R2上E1/0接口下打入:
R2(config-if)#standby 23 ip 172.16.23.1
% address cannot equal interface IP address,显然不支持，OK，接下来就来看看hsrp的工作过程，
R2(config-if)#standby 23 ip 172.16.23.254
*Mar 1 00:50:01.431: HSRP: Et1/0 Grp 23 Disabled -> Init
*Mar 1 00:50:01.431: HSRP: Et1/0 Grp 23 Redundancy "hsrp-Et1/0-23" state Disabled -> Init
*Mar 1 00:50:11.439: HSRP: Et1/0 Interface up
*Mar 1 00:50:11.439: HSRP: Et1/0 Starting minimum interface delay (1 secs)
*Mar 1 00:50:12.471: HSRP: Et1/0 Interface min delay expired
*Mar 1 00:50:12.471: HSRP: Et1/0 Grp 23 Init: a/HSRP enabled
*Mar 1 00:50:12.471: HSRP: Et1/0 Grp 23 Init -> Listen
*Mar 1 00:50:12.471: HSRP: Et1/0 Grp 23 Redundancy "hsrp-Et1/0-23" state Init -> Backup
*Mar 1 00:50:12.471: IP: s=172.16.23.1 (local), d=224.0.0.2 (Ethernet1/0), len 44, sending broad/multicast--------------说明HSRP通过组播的方式来通讯，
*Mar 1 00:50:12.471: UDP src=1985, dst=1985---------------承载在UDP包上，端口1985
*Mar 1 00:50:22.471: HSRP: Et1/0 Grp 23 Listen: c/Active timer expired (unknown)
*Mar 1 00:50:22.471: HSRP: Et1/0 Grp 23 Listen -> Speak
*Mar 1 00:50:22.475: HSRP: Et1/0 Grp 23 Redundancy "hsrp-Et1/0-23" state Backup -> Speak
*Mar 1 00:50:32.471: HSRP: Et1/0 Grp 23 Speak: d/Standby timer expired (unknown)
*Mar 1 00:50:32.471: HSRP: Et1/0 Grp 23 Standby router is local
*Mar 1 00:50:32.471: HSRP: Et1/0 Grp 23 Speak -> Standby
*Mar 1 00:50:32.471: HSRP: Et1/0 Grp 23 Redundancy "hsrp-Et1/0-23" state Speak -> Standby
*Mar 1 00:50:32.471: HSRP: Et1/0 Grp 23 Standby: c/Active timer expired (unknown)
*Mar 1 00:50:32.471: HSRP: Et1/0 Grp 23 Active router is local
*Mar 1 00:50:32.471: HSRP: Et1/0 Grp 23 Standby router is unknown, was local
*Mar 1 00:50:32.471: HSRP: Et1/0 Grp 23 Standby -> Active
*Mar 1 00:50:32.471: %HSRP-6-STATECHANGE: Ethernet1/0 Grp 23 state Standby -> Active
*Mar 1 00:50:32.471: HSRP: Et1/0 Grp 23 Redundancy "hsrp-Et1/0-23" state Standby -> Active
*Mar 1 00:50:35.471: HSRP: Et1/0 Grp 23 Redundancy group hsrp-Et1/0-23 state Active -> Active
*Mar 1 00:50:38.471: HSRP: Et1/0 Grp 23 Redundancy group hsrp-Et1/0-23 state Active ->
小插曲，我此时在R2和R3上都无法ping通172.16.23.254,大家猜猜是为什么？呵呵。
R2(config-if)#standby 23 preempt
R2(config-if)#standby 23 track ethernet 1/1,此时的debug 信息输出如下：
*Mar 1 01:09:10.979: HSRP: Et1/0 Grp 23 Track "Ethernet1/1" create interface object
*Mar 1 01:09:10.979: HSRP: Et1/0 Grp 23 Track 1 add, decrement 10------------这个decrement value可调，默认10
*Mar 1 01:09:10.979: HSRP: Et1/0 Grp 23 Track 1 Start tracking
*Mar 1 01:09:10.979: HSRP: Et1/0 Grp 23 Track 1 link id 1
*Mar 1 01:09:11.627: HSRP: Et1/0 Grp 23 Hello out 172.16.23.1 Active pri 100 vIP 172.16.23.254
*Mar 1 01:09:14.631: HSRP: Et1/0 Grp 23 Hello out 172.16.23.1 Active pri 100 vIP 172.16.23.254
*Mar 1 01:09:17.635: HSRP: Et1/0 Grp 23 Hello out 172.16.23.1 Active pri 100 vIP 172.16.23.254
*Mar 1 01:09:20.639: HSRP: Et1/0 Grp 23 Hello out 172.16.23.1 Active pri 100 vIP 172.16.23.254
*Mar 1 01:09:23.639: HSRP: Et1/0 Grp 23 Hello out 172.16.23.1 Active pri 100 vIP 172.16.23.254-----怎么是3秒？记得是2秒啊
我在R3上R3(config-if)# standby 23 ip 172.16.23.254
*Mar 1 01:16:12.387: HSRP: Et1/1 API MAC address update
*Mar 1 01:16:12.391: HSRP: Et1/1 Grp 23 Disabled -> Init
*Mar 1 01:16:12.391: HSRP: Et1/1 Grp 23 Redundancy "hsrp-Et1/1-23" state Disabled -> Init
*Mar 1 01:16:22.395: HSRP: Et1/1 Grp 23 Hello in 172.16.23.1 Active pri 100 vIP 172.16.23.254
*Mar 1 01:16:22.399: HSRP: Et1/1 Grp 23 Active router is 172.16.23.1
*Mar 1 01:16:22.399: HSRP: Et1/1 Grp 23 Hello in 172.16.23.1 Active pri 100 vIP 172.16.23.254
*Mar 1 01:16:22.403: HSRP: Et1/1 Grp 23 Hello in 172.16.23.1 Active pri 100 vIP 172.16.23.254
*Mar 1 01:16:22.407: HSRP: Et1/1 Grp 23 Hello in 172.16.23.1 Active pri 100 vIP 172.16.23.254
*Mar 1 01:16:22.411: HSRP: Et1/1 Interface up
*Mar 1 01:16:22.411: HSRP: Et1/1 Starting minimum interface delay (1 secs)
*Mar 1 01:16:23.411: HSRP: Et1/1 Interface min delay expired
*Mar 1 01:16:23.411: HSRP: Et1/1 Grp 23 Init: a/HSRP enabled
*Mar 1 01:16:23.411: HSRP: Et1/1 Grp 23 Init -> Listen
*Mar 1 01:16:23.411: HSRP: Et1/1 Grp 23 Redundancy "hsrp-Et1/1-23" state Init -> Backup
*Mar 1 01:16:23.411: HSRP: Et1/1 Redirect adv out, Passive, active 0 passive 1
*Mar 1 01:16:25.315: HSRP: Et1/1 Grp 23 Hello in 172.16.23.1 Active pri 100 vIP 172.16.23.254
*Mar 1 01:16:28.335: HSRP: Et1/1 Grp 23 Hello in 172.16.23.1 Active pri 100 vIP 172.16.23.254
*Mar 1 01:16:31.315: HSRP: Et1/1 Grp 23 Hello in 172.16.23.1 Active pri 100 vIP 172.16.23.254
*Mar 1 01:16:33.411: HSRP: Et1/1 Grp 23 Listen: d/Standby timer expired (unknown)
*Mar 1 01:16:33.411: HSRP: Et1/1 Grp 23 Listen -> Speak
*Mar 1 01:16:33.415: HSRP: Et1/1 Grp 23 Redundancy "hsrp-Et1/1-23" state Backup -> Speak
*Mar 1 01:16:33.415: HSRP: Et1/1 Grp 23 Hello out 172.16.23.2 Speak pri 100 vIP 172.16.23.254
*Mar 1 01:16:34.315: HSRP: Et1/1 Grp 23 Hello in 172.16.23.1 Active pri 100 vIP 172.16.23.254
*Mar 1 01:16:36.419: HSRP: Et1/1 Grp 23 Hello out 172.16.23.2 Speak pri 100 vIP 172.16.23.254
*Mar 1 01:16:37.315: HSRP: Et1/1 Grp 23 Hello in 172.16.23.1 Active pri 100 vIP 172.16.23.254
*Mar 1 01:16:39.423: HSRP: Et1/1 Grp 23 Hello out 172.16.23.2 Speak pri 100 vIP 172.16.23.254
*Mar 1 01:16:40.395: HSRP: Et1/1 Grp 23 Hello in 172.16.23.1 Active pri 100 vIP 172.16.23.254
*Mar 1 01:16:42.427: HSRP: Et1/1 Grp 23 Hello out 172.16.23.2 Speak pri 100 vIP 172.16.23.254
*Mar 1 01:16:43.355: HSRP: Et1/1 Grp 23 Hello in 172.16.23.1 Active pri 100 vIP 172.16.23.254
*Mar 1 01:16:43.411: HSRP: Et1/1 Grp 23 Speak: d/Standby timer expired (unknown)
*Mar 1 01:16:43.411: HSRP: Et1/1 Grp 23 Standby router is local
*Mar 1 01:16:43.415: HSRP: Et1/1 Grp 23 Speak -> Standby
*Mar 1 01:16:43.415: HSRP: Et1/1 Grp 23 Redundancy "hsrp-Et1/1-23" state Speak -> Standby
调低R3的pri值为95，下面来试试track功能好不好用，R2的先，shut掉E1/1
*Mar 1 01:29:12.435: HSRP: Et1/0 Grp 23 Track 1 object changed, state Up -> Down
*Mar 1 01:29:12.439: HSRP: Et1/0 Grp 23 Priority 100 -> 90--------------不会吧 难道down掉了仅仅是把pri降低10吗？
*Mar 1 01:29:12.663: HSRP: Et1/0 Grp 23 Hello in 172.16.23.2 Standby pri 150 vIP 172.16.23.254
*Mar 1 01:29:12.791: HSRP: Et1/0 Grp 23 Hello out 172.16.23.1 Active pri 90 vIP 172.16.23.254
-----------晕死，发现问题，只在R2上打了preemt,没在R3上打，加上后debug 信息马上输出
R3(config-if)#
*Mar 1 01:51:44.359: HSRP: Et1/1 Grp 23 Hello in 172.16.23.1 Active pri 90 vIP 172.16.23.254
*Mar 1 01:51:44.363: HSRP: Et1/1 Grp 23 Standby: h/Hello rcvd from lower pri Active router (90/172.16.23.1)
*Mar 1 01:51:44.367: HSRP: Et1/1 Grp 23 Active router is local, was 172.16.23.1
*Mar 1 01:51:44.367: HSRP: Et1/1 Grp 23 Standby router is unknown, was local
*Mar 1 01:51:44.371: HSRP: Et1/1 Redirect adv out, Active, active 1 passive 2
*Mar 1 01:51:44.371: HSRP: Et1/1 Grp 23 Coup out 172.16.23.2 Standby pri 95 vIP 172.16.23.254
*Mar 1 01:51:44.375: HSRP: Et1/1 Grp 23 Standby -> Active
*Mar 1 01:51:44.375: %HSRP-6-STATECHANGE: Ethernet1/1 Grp 23 state Standby -> Active
*Mar 1 01:51:44.375: HSRP: Et1/1 Grp 23 Redundancy "hsrp-Et1/1-23" state Standby -> Active
再把被track的口no sh,R2上debug 信息输出如下
R2(config-if)#
*Mar 1 01:55:43.075: HSRP: Et1/0 Grp 23 Hello in 172.16.23.2 Active pri 95 vIP 172.16.23.254
*Mar 1 01:55:43.259: HSRP: Et1/0 API 172.16.12.2 is not an HSRP address
*Mar 1 01:55:43.259: HSRP: Et1/1 API 172.16.12.2 is not an HSRP address
*Mar 1 01:55:43.267: HSRP: Et1/1 API MAC address update
*Mar 1 01:55:43.271: HSRP: Et1/1 API Software interface coming up
*Mar 1 01:55:43.275: HSRP: Et1/1 Interface up
*Mar 1 01:55:43.275: HSRP: Et1/1 Starting minimum interface delay (1 secs)
*Mar 1 01:55:43.279: HSRP: Et1/1 API Software interface coming up
*Mar 1 01:55:43.691: HSRP: Et1/0 Grp 23 Track 1 object changed, state Down -> Up
*Mar 1 01:55:43.695: HSRP: Et1/0 Grp 23 Priority 90 -> 100
*Mar 1 01:55:43.695: HSRP: Et1/1 Grp 0 Track 1 object changed, state Down -> Up
*Mar 1 01:55:43.699: HSRP: Et1/1 Grp 0 Priority 90 -> 100
*Mar 1 01:55:43.955: HSRP: Et1/0 Grp 23 Hello out 172.16.23.1 Standby pri 100 vIP 172.16.23.254
*Mar 1 01:55:44.275: HSRP: Et1/1 Interface min delay expired
*Mar 1 01:55:45.263: %LINK-3-UPDOWN: Interface Ethernet1/1, changed state to up
*Mar 1 01:55:45.267: HSRP: API Hardware state change
*Mar 1 01:55:46.075: HSRP: Et1/0 Grp 23 Hello in 172.16.23.2 Active pri 95 vIP 172.16.23.254
*Mar 1 01:55:46.079: HSRP: Et1/0 Grp 23 Standby: h/Hello rcvd from lower pri Active router (95/172.16.23.2)
*Mar 1 01:55:46.083: HSRP: Et1/0 Grp 23 Active router is local, was 172.16.23.2
*Mar 1 01:55:46.083: HSRP: Et1/0 Grp 23 Standby router is unknown, was local
*Mar 1 01:55:46.087: HSRP: Et1/0 Redirect adv out, Active, active 1 passive 2
*Mar 1 01:55:46.087: HSRP: Et1/0 Grp 23 Coup out 172.16.23.1 Standby pri 100 vIP 172.16.23.254
*Mar 1 01:55:46.091: HSRP: Et1/0 Grp 23 Standby -> Active
*Mar 1 01:55:46.095: %HSRP-6-STATECHANGE: Ethernet1/0 Grp 23 state Standby -> Active
*Mar 1 01:55:46.095: HSRP: Et1/0 Grp 23 Redundancy "hsrp-Et1/0-23" state Standby -> Active
*Mar 1 01:55:46.099: HSRP: Et1/0 Redirect adv out, Active, active 1 passive 1
*Mar 1 01:55:46.099: HSRP: Et1/0 Grp 23 Hello out 172.16.23.1 Active pri 100 vIP 172.16.23.254
*Mar 1 01:55:46.135: HSRP: Et1/0 Grp 23 Hello in 172.16.23.2 Speak pri 95 vIP 172.16.23.254
再把R2与R3互联的接口down掉，debug输出如下：
R2(config-if)#
*Mar 1 02:03:16.167: HSRP: Et1/0 Grp 23 Hello out 172.16.23.1 Active pri 100 vIP 172.16.23.254
*Mar 1 02:03:16.647: HSRP: Et1/0 API Software interface going down
*Mar 1 02:03:16.651: HSRP: Et1/0 API Software interface going down
*Mar 1 02:03:16.651: HSRP: Et1/0 Interface down
*Mar 1 02:03:16.651: HSRP: Et1/0 Grp 23 Active: b/HSRP disabled
*Mar 1 02:03:16.655: HSRP: Et1/0 Grp 23 Active router is unknown, was local
*Mar 1 02:03:16.655: HSRP: Et1/0 Grp 23 Standby router is unknown, was 172.16.23.2
*Mar 1 02:03:16.659: HSRP: Et1/0 Grp 23 Resign out 172.16.23.1 Active pri 100 vIP 172.16.23.254
*Mar 1 02:03:16.663: HSRP: Et1/0 Grp 23 Active -> Init
*Mar 1 02:03:16.663: %HSRP-6-STATECHANGE: Ethernet1/0 Grp 23 state Active -> Init
*Mar 1 02:03:16.667: HSRP: Et1/0 Grp 23 Redundancy "hsrp-Et1/0-23" state Active -> Init
*Mar 1 02:03:16.667: HSRP: Et1/0 Redirect adv out, Passive, active 0 passive 1
*Mar 1 02:03:16.671: HSRP: Et1/0 Grp 23 Resign out 172.16.23.1 Init pri 100 vIP 172.16.23.254
*Mar 1 02:03:16.679: %OSPF-5-ADJCHG: Process 100, Nbr 172.16.23.2 on Ethernet1/0 from FULL to DOWN, Neighbor Down: Interface down or detached
*Mar 1 02:03:16.679: HSRP: Et1/0 API Add active HSRP addresses to ARP table
*Mar 1 02:03:18.647: %LINK-5-CHANGED: Interface Ethernet1/0, changed state to administratively down
*Mar 1 02:03:18.647: HSRP: API Hardware state change
*Mar 1 02:03:19.647: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet1/0, changed state to down
*Mar 1 02:03:45.147: HSRP: Et1/0 Redirect adv out, Passive, active 0 passive 1
此时，R3，*Mar 1 02:03:21.655: %HSRP-6-STATECHANGE: Ethernet1/1 Grp 23 state Standby -> Active
下面我对VRRP的一些特性进行验证还是同样的拓扑和初试配置，
R2上开起 do debug ip pa de 和do debug vrrp
R2(config-if)#
*Mar 1 03:16:36.579: %LINK-3-UPDOWN: Interface Ethernet1/0, changed state to up
*Mar 1 03:16:36.611: VRRP: Grp 23 Event - Interface UP
*Mar 1 03:16:36.611: %VRRP-6-STATECHANGE: Et1/0 Grp 23 state Init -> Backup
*Mar 1 03:16:37.579: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet1/0, changed state to up
*Mar 1 03:16:40.223: VRRP: Grp 23 Event - Master down timer expired
*Mar 1 03:16:40.223: %VRRP-6-STATECHANGE: Et1/0 Grp 23 state Backup -> Master
*Mar 1 03:16:40.227: VRRP: tbridge_smf_update failed
*Mar 1 03:16:40.231: VRRP: Grp 23 sending Advertisement checksum B6D7
*Mar 1 03:16:40.231: IP: s=172.16.23.1 (local), d=224.0.0.18 (Ethernet1/0), len 40, sending broad/multicast, proto=112
*Mar 1 03:16:41.235: VRRP: Grp 23 sending Advertisement checksum B6D7
*Mar 1 03:16:41.235: IP: s=172.16.23.1 (local), d=224.0.0.18 (Ethernet1/0), len 40, sending broad/multicast, proto=112
*Mar 1 03:16:42.239: VRRP: Grp 23 sending Advertisement checksum B6D7
*Mar 1 03:16:42.239: IP: s=172.16.23.1 (local), d=224.0.0.18 (Ethernet1/0), len 40, sending broad/multicast, proto=112
------------------记得否：
1、HSRP在此处的debug ip pa de 输出显示用UDP传输，此处却无，但怎么确认是TCP传输呢？
2、HSRP时的debug信息输出显示是向224.0.0.2输出HELLO
3、HSRP报文没有自己的协议号，VRRP的advertisement有自己的协议号，112；
4、HSRP经过了init--listen--backup--speak--standy(active),而VRRP却只有inite-master(standby)
---------------------------------继续
R3(config-if)# vrrp 23 ip 172.16.23.253
R3(config-if)#
*Mar 1 03:19:17.227: %VRRP-6-STATECHANGE: Et1/1 Grp 23 state Create -> Disable
*Mar 1 03:19:17.227: VRRP: Grp 23 Event - primary IP configured
*Mar 1 03:19:17.227: %VRRP-6-STATECHANGE: Et1/1 Grp 23 state Disable -> Init
*Mar 1 03:19:17.911: VRRP: Grp 23 Advertisement Primary address 172.16.23.254
different from our's 172.16.23.253
*Mar 1 03:19:18.851: VRRP: Grp 23 Advertisement Primary address 172.16.23.254
different from our's 172.16.23.253
*Mar 1 03:19:19.227: VRRP: Grp 23 Event - Interface UP
*Mar 1 03:19:19.227: %VRRP-6-STATECHANGE: Et1/1 Grp 23 state Init -> Backup
*Mar 1 03:19:19.891: VRRP: Grp 23 Advertisement Primary address 172.16.23.254
different from our's 172.16.23.253
*Mar 1 03:19:20.831: VRRP: Grp 23 Advertisement Primary address 172.16.23.254
different from our's 172.16.23.253
*Mar 1 03:19:21.895: VRRP: Grp 23 Advertisement Primary address 172.16.23.254
different from our's 172.16.23.253
*Mar 1 03:19:22.839: VRRP: Grp 23 Event - Master down timer expired
*Mar 1 03:19:22.839: %VRRP-6-STATECHANGE: Et1/1 Grp 23 state Backup -> Master
*Mar 1 03:19:22.843: VRRP: tbridge_smf_update failed
*Mar 1 03:19:22.847: VRRP: Grp 23 sending Advertisement checksum B6D8
*Mar 1 03:19:22.875: VRRP: Grp 23 Advertisement Primary address 172.16.23.254
different from our's 172.16.23.253-------------嘿嘿，当2端配置的vr-ip不一样时的结果。
--------------------------------------继续，
R3(config-if)#vrrp 23 ip 172.16.23.2
R3(config-if)#
*Mar 1 03:21:52.683: %VRRP-6-STATECHANGE: Et1/1 Grp 23 state Create -> Disable
*Mar 1 03:21:52.683: VRRP: Grp 23 Event - primary IP configured
*Mar 1 03:21:52.687: %VRRP-6-STATECHANGE: Et1/1 Grp 23 state Disable -> Init
*Mar 1 03:21:52.971: VRRP: Grp 23 Advertisement Primary address 172.16.23.254
different from our's 172.16.23.2
*Mar 1 03:21:53.991: VRRP: Grp 23 Advertisement Primary address 172.16.23.254
different from our's 172.16.23.2
*Mar 1 03:21:54.683: VRRP: Grp 23 Event - Interface UP
*Mar 1 03:21:54.683: %VRRP-6-STATECHANGE: Et1/1 Grp 23 state Init -> Master
*Mar 1 03:21:54.687: VRRP: tbridge_smf_update failed
*Mar 1 03:21:54.687: VRRP: Grp 23 sending Advertisement checksum 1CD3
*Mar 1 03:21:54.991: VRRP: Grp 23 Advertisement Primary address 172.16.23.254
different from our's 172.16.23.2-------------VRRP能配置为本机接口IP，HSRP不行噢
现在改变R3的pri,并给加上preemt属性，
R3(config-if)#vrr 23 pri 105
*Mar 1 03:32:31.335: VRRP: Grp 23 Advertisement priority 100, ipaddr 172.16.23.1
*Mar 1 03:32:31.339: VRRP: Grp 23 Event - Advert higher or equal priority
*Mar 1 03:32:32.355: VRRP: Grp 23 Advertisement priority 100, ipaddr 172.16.23.1
*Mar 1 03:32:33.295: VRRP: Grp 23 Advertisement priority 100, ipaddr 172.16.23.1
*Mar 1 03:32:34.395: VRRP: Grp 23 Advertisement priority 100, ipaddr 172.16.23.1
*Mar 1 03:32:34.951: VRRP: Grp 23 Event - Master down timer expired
*Mar 1 03:32:34.951: %VRRP-6-STATECHANGE: Et1/1 Grp 23 state Backup -> Master
*Mar 1 03:32:34.951: VRRP: tbridge_smf_update failed
*Mar 1 03:32:34.951: VRRP: Grp 23 sending Advertisement checksum B1D7
*Mar 1 03:32:35.951: VRRP: Grp 23 sending Advertisement checksum B1D7
*Mar 1 03:32:36.955: VRRP: Grp 23 sending Advertisement checksum B1D7
*Mar 1 03:32:37.955: VRRP: Grp 23 sending Advertisement checksum B1D7
继续-------------
R2(config-if)#vrrp 23 ?
authentication Authentication string
description Group specific description
ip Enable Virtual Router Redundancy Protocol (VRRP) for IP
preempt Enable preemption of lower priority Master
priority Priority of this VRRP group
timers Set the VRRP timers
R2(config-if)#vrrp 23 没有track,不知道后续版本会不会有
再看看cisco的HSRP，功能多多了
R2(config-if)#standby ?
<0-255> group number
authentication Authentication
delay HSRP initialisation delay
ip Enable HSRP and set the virtual IP address
mac-address Virtual MAC address
name Redundancy name string
preempt Overthrow lower priority Active routers
priority Priority level
redirects Configure sending of ICMP Redirect messages with an HSRP
virtual IP address as the gateway IP address
timers Hello and hold timers
track Priority tracking
use-bia HSRP uses interface's burned in address
==================================================================================
切换时间的对比，对比思路如下
1、初始时间的对比
2、主设备down掉，备设备状态的切换时间的对比
3、切换时丢几个包
如果相差比较大，再把HSRP 的hello interval改成1s,注意虽然主设备能影响备设备，但备设备也可能切换成主设备，所以为了测试公平，应该在2个地方都设成1s
原文地址
[url]http://hi.baidu.com/gotoccie/blog/item/c1585782cbad56a20cf4d2e3.html[/url]
在功能上,VRRP和HSRP非常相似,但是就安全而言,VRRP对 HSRP的一个主要优势:它允许参与VRRP组的设备间建立认证机制.并且,不像HSRP那样要求虚拟路由器不能是其中一个路由器的ip地址,但是 VRRP允许这种情况发生(如果”拥有”虚拟路由器地址的路由器被建立并且正在运行,那么应该总是由这个虚拟路由器管理—等价于HSRP中的活动路由器),但是为了确保万一失效发生的时候终端主机不必重新学习MAC地址,它指定使用的MAC地址00-00-5e-00-01-VRID,这里的VRID 是虚拟路由器的ID(等价于一个HSRP的组标识符).
2.另外一个不同是VRRP不使用HSRP中的政变或者一个等价消息,VRRP的状态机比HSRP的要简单,HSRP有6个状态(初始(Initial) 状态，学习(Learn)状态，监听(Listen)状态，对话(Speak)状态，备份(Standby)状态，活动(Active)状态)和8个事件, VRRP只有3个状态(初始状态(Initialize)、主状态(Master)、备份状态(Backup))和5个事件.
3. HSRP有三种报文，而且有三种状态可以发送报文
呼叫(Hello)报文，告辞(Resign)报文，突变(Coup)报文
VRRP有一种报文
VRRP广播报文：由主路由器定时发出来通告它的存在，使用这些报文可以检测虚拟路由器各种参数，还可以用于主路由器的选举。
4. HSRP将报文承载在UDP报文上，而VRRP承载在TCP报文上(HSRP 使用UDP 1985端口，向组播地址224.0.0.2 发送hello消息。)
5.VRRP的安全:VRRP协议包括三种主要的认证方式:无认证,简单的明文密码和使用 MD5 HMAC ip认证的强认证.
强认证方法使用IP认证头(AH)协议.AH是与用在IPSEC中相同的协议,AH为认证VRRP分组中的内容和分组头提供了一个方法. MD5 HMAC 的使用表明使用一个共享的密钥用于产生hash值.路由器发送一个VRRP分组产生MD5 hash值,并将它置于要发送的通告中, 在接收时,接受方使用相同的密钥和MD5值,重新计算分组内容和分组头的hash值,如果结果相同,这个消息就是真正来自于一个可信赖的主机,如果不相同,它必须丢弃,这可以防止***者通过访问LAN而发出能影响选择过程的通告消息或者其他一些方法中断网络.
另外,VRRP包括一个保护VRRP分组不会被另外一个远程网络添加内容的机制(设置TTL值=255,并在接受时检查),这限制了可以进行本地***的大部分缺陷.而另一方面,HSRP在它的消息中使用的TTL值是1.
6.VRRP的崩溃间隔时间:3*通告间隔+时滞时间(skew-time)以上是网上搜索出来的东东，下面通过实验来验证看看，拓扑如下：
下面我们通过实验来做一些验证
hos R1
in e1/0
ip add 172.16.12.1 255.255.255.0
no sh
int e1/1
ip add 172.16.13.1 255.255.255.0
no sh
hos R2
in e1/0
ip add 172.16.23.1 255.255.255.0
no sh
int e1/1
ip add 172.16.12.2 255.255.255.0
no sh
hos R3
in e1/0
ip add 172.16.13.2 255.255.255.0
no sh
int e1/1
ip add 172.16.23.2 255.255.255.0
no sh-----然后在每个路由器上开起debug ip pa de 和 debug stand event
OK，下面开始，首先验证下HSRP是否支持真实IP设为虚拟路由器的IP，
R2上E1/0接口下打入:
R2(config-if)#standby 23 ip 172.16.23.1
% address cannot equal interface IP address,显然不支持，OK，接下来就来看看hsrp的工作过程，
R2(config-if)#standby 23 ip 172.16.23.254
*Mar 1 00:50:01.431: HSRP: Et1/0 Grp 23 Disabled -> Init
*Mar 1 00:50:01.431: HSRP: Et1/0 Grp 23 Redundancy "hsrp-Et1/0-23" state Disabled -> Init
*Mar 1 00:50:11.439: HSRP: Et1/0 Interface up
*Mar 1 00:50:11.439: HSRP: Et1/0 Starting minimum interface delay (1 secs)
*Mar 1 00:50:12.471: HSRP: Et1/0 Interface min delay expired
*Mar 1 00:50:12.471: HSRP: Et1/0 Grp 23 Init: a/HSRP enabled
*Mar 1 00:50:12.471: HSRP: Et1/0 Grp 23 Init -> Listen
*Mar 1 00:50:12.471: HSRP: Et1/0 Grp 23 Redundancy "hsrp-Et1/0-23" state Init -> Backup
*Mar 1 00:50:12.471: IP: s=172.16.23.1 (local), d=224.0.0.2 (Ethernet1/0), len 44, sending broad/multicast--------------说明HSRP通过组播的方式来通讯，
*Mar 1 00:50:12.471: UDP src=1985, dst=1985---------------承载在UDP包上，端口1985
*Mar 1 00:50:22.471: HSRP: Et1/0 Grp 23 Listen: c/Active timer expired (unknown)
*Mar 1 00:50:22.471: HSRP: Et1/0 Grp 23 Listen -> Speak
*Mar 1 00:50:22.475: HSRP: Et1/0 Grp 23 Redundancy "hsrp-Et1/0-23" state Backup -> Speak
*Mar 1 00:50:32.471: HSRP: Et1/0 Grp 23 Speak: d/Standby timer expired (unknown)
*Mar 1 00:50:32.471: HSRP: Et1/0 Grp 23 Standby router is local
*Mar 1 00:50:32.471: HSRP: Et1/0 Grp 23 Speak -> Standby
*Mar 1 00:50:32.471: HSRP: Et1/0 Grp 23 Redundancy "hsrp-Et1/0-23" state Speak -> Standby
*Mar 1 00:50:32.471: HSRP: Et1/0 Grp 23 Standby: c/Active timer expired (unknown)
*Mar 1 00:50:32.471: HSRP: Et1/0 Grp 23 Active router is local
*Mar 1 00:50:32.471: HSRP: Et1/0 Grp 23 Standby router is unknown, was local
*Mar 1 00:50:32.471: HSRP: Et1/0 Grp 23 Standby -> Active
*Mar 1 00:50:32.471: %HSRP-6-STATECHANGE: Ethernet1/0 Grp 23 state Standby -> Active
*Mar 1 00:50:32.471: HSRP: Et1/0 Grp 23 Redundancy "hsrp-Et1/0-23" state Standby -> Active
*Mar 1 00:50:35.471: HSRP: Et1/0 Grp 23 Redundancy group hsrp-Et1/0-23 state Active -> Active
*Mar 1 00:50:38.471: HSRP: Et1/0 Grp 23 Redundancy group hsrp-Et1/0-23 state Active ->
小插曲，我此时在R2和R3上都无法ping通172.16.23.254,大家猜猜是为什么？呵呵。
R2(config-if)#standby 23 preempt
R2(config-if)#standby 23 track ethernet 1/1,此时的debug 信息输出如下：
*Mar 1 01:09:10.979: HSRP: Et1/0 Grp 23 Track "Ethernet1/1" create interface object
*Mar 1 01:09:10.979: HSRP: Et1/0 Grp 23 Track 1 add, decrement 10------------这个decrement value可调，默认10
*Mar 1 01:09:10.979: HSRP: Et1/0 Grp 23 Track 1 Start tracking
*Mar 1 01:09:10.979: HSRP: Et1/0 Grp 23 Track 1 link id 1
*Mar 1 01:09:11.627: HSRP: Et1/0 Grp 23 Hello out 172.16.23.1 Active pri 100 vIP 172.16.23.254
*Mar 1 01:09:14.631: HSRP: Et1/0 Grp 23 Hello out 172.16.23.1 Active pri 100 vIP 172.16.23.254
*Mar 1 01:09:17.635: HSRP: Et1/0 Grp 23 Hello out 172.16.23.1 Active pri 100 vIP 172.16.23.254
*Mar 1 01:09:20.639: HSRP: Et1/0 Grp 23 Hello out 172.16.23.1 Active pri 100 vIP 172.16.23.254
*Mar 1 01:09:23.639: HSRP: Et1/0 Grp 23 Hello out 172.16.23.1 Active pri 100 vIP 172.16.23.254-----怎么是3秒？记得是2秒啊
我在R3上R3(config-if)# standby 23 ip 172.16.23.254
*Mar 1 01:16:12.387: HSRP: Et1/1 API MAC address update
*Mar 1 01:16:12.391: HSRP: Et1/1 Grp 23 Disabled -> Init
*Mar 1 01:16:12.391: HSRP: Et1/1 Grp 23 Redundancy "hsrp-Et1/1-23" state Disabled -> Init
*Mar 1 01:16:22.395: HSRP: Et1/1 Grp 23 Hello in 172.16.23.1 Active pri 100 vIP 172.16.23.254
*Mar 1 01:16:22.399: HSRP: Et1/1 Grp 23 Active router is 172.16.23.1
*Mar 1 01:16:22.399: HSRP: Et1/1 Grp 23 Hello in 172.16.23.1 Active pri 100 vIP 172.16.23.254
*Mar 1 01:16:22.403: HSRP: Et1/1 Grp 23 Hello in 172.16.23.1 Active pri 100 vIP 172.16.23.254
*Mar 1 01:16:22.407: HSRP: Et1/1 Grp 23 Hello in 172.16.23.1 Active pri 100 vIP 172.16.23.254
*Mar 1 01:16:22.411: HSRP: Et1/1 Interface up
*Mar 1 01:16:22.411: HSRP: Et1/1 Starting minimum interface delay (1 secs)
*Mar 1 01:16:23.411: HSRP: Et1/1 Interface min delay expired
*Mar 1 01:16:23.411: HSRP: Et1/1 Grp 23 Init: a/HSRP enabled
*Mar 1 01:16:23.411: HSRP: Et1/1 Grp 23 Init -> Listen
*Mar 1 01:16:23.411: HSRP: Et1/1 Grp 23 Redundancy "hsrp-Et1/1-23" state Init -> Backup
*Mar 1 01:16:23.411: HSRP: Et1/1 Redirect adv out, Passive, active 0 passive 1
*Mar 1 01:16:25.315: HSRP: Et1/1 Grp 23 Hello in 172.16.23.1 Active pri 100 vIP 172.16.23.254
*Mar 1 01:16:28.335: HSRP: Et1/1 Grp 23 Hello in 172.16.23.1 Active pri 100 vIP 172.16.23.254
*Mar 1 01:16:31.315: HSRP: Et1/1 Grp 23 Hello in 172.16.23.1 Active pri 100 vIP 172.16.23.254
*Mar 1 01:16:33.411: HSRP: Et1/1 Grp 23 Listen: d/Standby timer expired (unknown)
*Mar 1 01:16:33.411: HSRP: Et1/1 Grp 23 Listen -> Speak
*Mar 1 01:16:33.415: HSRP: Et1/1 Grp 23 Redundancy "hsrp-Et1/1-23" state Backup -> Speak
*Mar 1 01:16:33.415: HSRP: Et1/1 Grp 23 Hello out 172.16.23.2 Speak pri 100 vIP 172.16.23.254
*Mar 1 01:16:34.315: HSRP: Et1/1 Grp 23 Hello in 172.16.23.1 Active pri 100 vIP 172.16.23.254
*Mar 1 01:16:36.419: HSRP: Et1/1 Grp 23 Hello out 172.16.23.2 Speak pri 100 vIP 172.16.23.254
*Mar 1 01:16:37.315: HSRP: Et1/1 Grp 23 Hello in 172.16.23.1 Active pri 100 vIP 172.16.23.254
*Mar 1 01:16:39.423: HSRP: Et1/1 Grp 23 Hello out 172.16.23.2 Speak pri 100 vIP 172.16.23.254
*Mar 1 01:16:40.395: HSRP: Et1/1 Grp 23 Hello in 172.16.23.1 Active pri 100 vIP 172.16.23.254
*Mar 1 01:16:42.427: HSRP: Et1/1 Grp 23 Hello out 172.16.23.2 Speak pri 100 vIP 172.16.23.254
*Mar 1 01:16:43.355: HSRP: Et1/1 Grp 23 Hello in 172.16.23.1 Active pri 100 vIP 172.16.23.254
*Mar 1 01:16:43.411: HSRP: Et1/1 Grp 23 Speak: d/Standby timer expired (unknown)
*Mar 1 01:16:43.411: HSRP: Et1/1 Grp 23 Standby router is local
*Mar 1 01:16:43.415: HSRP: Et1/1 Grp 23 Speak -> Standby
*Mar 1 01:16:43.415: HSRP: Et1/1 Grp 23 Redundancy "hsrp-Et1/1-23" state Speak -> Standby
调低R3的pri值为95，下面来试试track功能好不好用，R2的先，shut掉E1/1
*Mar 1 01:29:12.435: HSRP: Et1/0 Grp 23 Track 1 object changed, state Up -> Down
*Mar 1 01:29:12.439: HSRP: Et1/0 Grp 23 Priority 100 -> 90--------------不会吧 难道down掉了仅仅是把pri降低10吗？
*Mar 1 01:29:12.663: HSRP: Et1/0 Grp 23 Hello in 172.16.23.2 Standby pri 150 vIP 172.16.23.254
*Mar 1 01:29:12.791: HSRP: Et1/0 Grp 23 Hello out 172.16.23.1 Active pri 90 vIP 172.16.23.254
-----------晕死，发现问题，只在R2上打了preemt,没在R3上打，加上后debug 信息马上输出
R3(config-if)#
*Mar 1 01:51:44.359: HSRP: Et1/1 Grp 23 Hello in 172.16.23.1 Active pri 90 vIP 172.16.23.254
*Mar 1 01:51:44.363: HSRP: Et1/1 Grp 23 Standby: h/Hello rcvd from lower pri Active router (90/172.16.23.1)
*Mar 1 01:51:44.367: HSRP: Et1/1 Grp 23 Active router is local, was 172.16.23.1
*Mar 1 01:51:44.367: HSRP: Et1/1 Grp 23 Standby router is unknown, was local
*Mar 1 01:51:44.371: HSRP: Et1/1 Redirect adv out, Active, active 1 passive 2
*Mar 1 01:51:44.371: HSRP: Et1/1 Grp 23 Coup out 172.16.23.2 Standby pri 95 vIP 172.16.23.254
*Mar 1 01:51:44.375: HSRP: Et1/1 Grp 23 Standby -> Active
*Mar 1 01:51:44.375: %HSRP-6-STATECHANGE: Ethernet1/1 Grp 23 state Standby -> Active
*Mar 1 01:51:44.375: HSRP: Et1/1 Grp 23 Redundancy "hsrp-Et1/1-23" state Standby -> Active
再把被track的口no sh,R2上debug 信息输出如下
R2(config-if)#
*Mar 1 01:55:43.075: HSRP: Et1/0 Grp 23 Hello in 172.16.23.2 Active pri 95 vIP 172.16.23.254
*Mar 1 01:55:43.259: HSRP: Et1/0 API 172.16.12.2 is not an HSRP address
*Mar 1 01:55:43.259: HSRP: Et1/1 API 172.16.12.2 is not an HSRP address
*Mar 1 01:55:43.267: HSRP: Et1/1 API MAC address update
*Mar 1 01:55:43.271: HSRP: Et1/1 API Software interface coming up
*Mar 1 01:55:43.275: HSRP: Et1/1 Interface up
*Mar 1 01:55:43.275: HSRP: Et1/1 Starting minimum interface delay (1 secs)
*Mar 1 01:55:43.279: HSRP: Et1/1 API Software interface coming up
*Mar 1 01:55:43.691: HSRP: Et1/0 Grp 23 Track 1 object changed, state Down -> Up
*Mar 1 01:55:43.695: HSRP: Et1/0 Grp 23 Priority 90 -> 100
*Mar 1 01:55:43.695: HSRP: Et1/1 Grp 0 Track 1 object changed, state Down -> Up
*Mar 1 01:55:43.699: HSRP: Et1/1 Grp 0 Priority 90 -> 100
*Mar 1 01:55:43.955: HSRP: Et1/0 Grp 23 Hello out 172.16.23.1 Standby pri 100 vIP 172.16.23.254
*Mar 1 01:55:44.275: HSRP: Et1/1 Interface min delay expired
*Mar 1 01:55:45.263: %LINK-3-UPDOWN: Interface Ethernet1/1, changed state to up
*Mar 1 01:55:45.267: HSRP: API Hardware state change
*Mar 1 01:55:46.075: HSRP: Et1/0 Grp 23 Hello in 172.16.23.2 Active pri 95 vIP 172.16.23.254
*Mar 1 01:55:46.079: HSRP: Et1/0 Grp 23 Standby: h/Hello rcvd from lower pri Active router (95/172.16.23.2)
*Mar 1 01:55:46.083: HSRP: Et1/0 Grp 23 Active router is local, was 172.16.23.2
*Mar 1 01:55:46.083: HSRP: Et1/0 Grp 23 Standby router is unknown, was local
*Mar 1 01:55:46.087: HSRP: Et1/0 Redirect adv out, Active, active 1 passive 2
*Mar 1 01:55:46.087: HSRP: Et1/0 Grp 23 Coup out 172.16.23.1 Standby pri 100 vIP 172.16.23.254
*Mar 1 01:55:46.091: HSRP: Et1/0 Grp 23 Standby -> Active
*Mar 1 01:55:46.095: %HSRP-6-STATECHANGE: Ethernet1/0 Grp 23 state Standby -> Active
*Mar 1 01:55:46.095: HSRP: Et1/0 Grp 23 Redundancy "hsrp-Et1/0-23" state Standby -> Active
*Mar 1 01:55:46.099: HSRP: Et1/0 Redirect adv out, Active, active 1 passive 1
*Mar 1 01:55:46.099: HSRP: Et1/0 Grp 23 Hello out 172.16.23.1 Active pri 100 vIP 172.16.23.254
*Mar 1 01:55:46.135: HSRP: Et1/0 Grp 23 Hello in 172.16.23.2 Speak pri 95 vIP 172.16.23.254
再把R2与R3互联的接口down掉，debug输出如下：
R2(config-if)#
*Mar 1 02:03:16.167: HSRP: Et1/0 Grp 23 Hello out 172.16.23.1 Active pri 100 vIP 172.16.23.254
*Mar 1 02:03:16.647: HSRP: Et1/0 API Software interface going down
*Mar 1 02:03:16.651: HSRP: Et1/0 API Software interface going down
*Mar 1 02:03:16.651: HSRP: Et1/0 Interface down
*Mar 1 02:03:16.651: HSRP: Et1/0 Grp 23 Active: b/HSRP disabled
*Mar 1 02:03:16.655: HSRP: Et1/0 Grp 23 Active router is unknown, was local
*Mar 1 02:03:16.655: HSRP: Et1/0 Grp 23 Standby router is unknown, was 172.16.23.2
*Mar 1 02:03:16.659: HSRP: Et1/0 Grp 23 Resign out 172.16.23.1 Active pri 100 vIP 172.16.23.254
*Mar 1 02:03:16.663: HSRP: Et1/0 Grp 23 Active -> Init
*Mar 1 02:03:16.663: %HSRP-6-STATECHANGE: Ethernet1/0 Grp 23 state Active -> Init
*Mar 1 02:03:16.667: HSRP: Et1/0 Grp 23 Redundancy "hsrp-Et1/0-23" state Active -> Init
*Mar 1 02:03:16.667: HSRP: Et1/0 Redirect adv out, Passive, active 0 passive 1
*Mar 1 02:03:16.671: HSRP: Et1/0 Grp 23 Resign out 172.16.23.1 Init pri 100 vIP 172.16.23.254
*Mar 1 02:03:16.679: %OSPF-5-ADJCHG: Process 100, Nbr 172.16.23.2 on Ethernet1/0 from FULL to DOWN, Neighbor Down: Interface down or detached
*Mar 1 02:03:16.679: HSRP: Et1/0 API Add active HSRP addresses to ARP table
*Mar 1 02:03:18.647: %LINK-5-CHANGED: Interface Ethernet1/0, changed state to administratively down
*Mar 1 02:03:18.647: HSRP: API Hardware state change
*Mar 1 02:03:19.647: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet1/0, changed state to down
*Mar 1 02:03:45.147: HSRP: Et1/0 Redirect adv out, Passive, active 0 passive 1
此时，R3，*Mar 1 02:03:21.655: %HSRP-6-STATECHANGE: Ethernet1/1 Grp 23 state Standby -> Active
下面我对VRRP的一些特性进行验证还是同样的拓扑和初试配置，
R2上开起 do debug ip pa de 和do debug vrrp
R2(config-if)#
*Mar 1 03:16:36.579: %LINK-3-UPDOWN: Interface Ethernet1/0, changed state to up
*Mar 1 03:16:36.611: VRRP: Grp 23 Event - Interface UP
*Mar 1 03:16:36.611: %VRRP-6-STATECHANGE: Et1/0 Grp 23 state Init -> Backup
*Mar 1 03:16:37.579: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet1/0, changed state to up
*Mar 1 03:16:40.223: VRRP: Grp 23 Event - Master down timer expired
*Mar 1 03:16:40.223: %VRRP-6-STATECHANGE: Et1/0 Grp 23 state Backup -> Master
*Mar 1 03:16:40.227: VRRP: tbridge_smf_update failed
*Mar 1 03:16:40.231: VRRP: Grp 23 sending Advertisement checksum B6D7
*Mar 1 03:16:40.231: IP: s=172.16.23.1 (local), d=224.0.0.18 (Ethernet1/0), len 40, sending broad/multicast, proto=112
*Mar 1 03:16:41.235: VRRP: Grp 23 sending Advertisement checksum B6D7
*Mar 1 03:16:41.235: IP: s=172.16.23.1 (local), d=224.0.0.18 (Ethernet1/0), len 40, sending broad/multicast, proto=112
*Mar 1 03:16:42.239: VRRP: Grp 23 sending Advertisement checksum B6D7
*Mar 1 03:16:42.239: IP: s=172.16.23.1 (local), d=224.0.0.18 (Ethernet1/0), len 40, sending broad/multicast, proto=112
------------------记得否：
1、HSRP在此处的debug ip pa de 输出显示用UDP传输，此处却无，但怎么确认是TCP传输呢？
2、HSRP时的debug信息输出显示是向224.0.0.2输出HELLO
3、HSRP报文没有自己的协议号，VRRP的advertisement有自己的协议号，112；
4、HSRP经过了init--listen--backup--speak--standy(active),而VRRP却只有inite-master(standby)
---------------------------------继续
R3(config-if)# vrrp 23 ip 172.16.23.253
R3(config-if)#
*Mar 1 03:19:17.227: %VRRP-6-STATECHANGE: Et1/1 Grp 23 state Create -> Disable
*Mar 1 03:19:17.227: VRRP: Grp 23 Event - primary IP configured
*Mar 1 03:19:17.227: %VRRP-6-STATECHANGE: Et1/1 Grp 23 state Disable -> Init
*Mar 1 03:19:17.911: VRRP: Grp 23 Advertisement Primary address 172.16.23.254
different from our's 172.16.23.253
*Mar 1 03:19:18.851: VRRP: Grp 23 Advertisement Primary address 172.16.23.254
different from our's 172.16.23.253
*Mar 1 03:19:19.227: VRRP: Grp 23 Event - Interface UP
*Mar 1 03:19:19.227: %VRRP-6-STATECHANGE: Et1/1 Grp 23 state Init -> Backup
*Mar 1 03:19:19.891: VRRP: Grp 23 Advertisement Primary address 172.16.23.254
different from our's 172.16.23.253
*Mar 1 03:19:20.831: VRRP: Grp 23 Advertisement Primary address 172.16.23.254
different from our's 172.16.23.253
*Mar 1 03:19:21.895: VRRP: Grp 23 Advertisement Primary address 172.16.23.254
different from our's 172.16.23.253
*Mar 1 03:19:22.839: VRRP: Grp 23 Event - Master down timer expired
*Mar 1 03:19:22.839: %VRRP-6-STATECHANGE: Et1/1 Grp 23 state Backup -> Master
*Mar 1 03:19:22.843: VRRP: tbridge_smf_update failed
*Mar 1 03:19:22.847: VRRP: Grp 23 sending Advertisement checksum B6D8
*Mar 1 03:19:22.875: VRRP: Grp 23 Advertisement Primary address 172.16.23.254
different from our's 172.16.23.253-------------嘿嘿，当2端配置的vr-ip不一样时的结果。
--------------------------------------继续，
R3(config-if)#vrrp 23 ip 172.16.23.2
R3(config-if)#
*Mar 1 03:21:52.683: %VRRP-6-STATECHANGE: Et1/1 Grp 23 state Create -> Disable
*Mar 1 03:21:52.683: VRRP: Grp 23 Event - primary IP configured
*Mar 1 03:21:52.687: %VRRP-6-STATECHANGE: Et1/1 Grp 23 state Disable -> Init
*Mar 1 03:21:52.971: VRRP: Grp 23 Advertisement Primary address 172.16.23.254
different from our's 172.16.23.2
*Mar 1 03:21:53.991: VRRP: Grp 23 Advertisement Primary address 172.16.23.254
different from our's 172.16.23.2
*Mar 1 03:21:54.683: VRRP: Grp 23 Event - Interface UP
*Mar 1 03:21:54.683: %VRRP-6-STATECHANGE: Et1/1 Grp 23 state Init -> Master
*Mar 1 03:21:54.687: VRRP: tbridge_smf_update failed
*Mar 1 03:21:54.687: VRRP: Grp 23 sending Advertisement checksum 1CD3
*Mar 1 03:21:54.991: VRRP: Grp 23 Advertisement Primary address 172.16.23.254
different from our's 172.16.23.2-------------VRRP能配置为本机接口IP，HSRP不行噢
现在改变R3的pri,并给加上preemt属性，
R3(config-if)#vrr 23 pri 105
*Mar 1 03:32:31.335: VRRP: Grp 23 Advertisement priority 100, ipaddr 172.16.23.1
*Mar 1 03:32:31.339: VRRP: Grp 23 Event - Advert higher or equal priority
*Mar 1 03:32:32.355: VRRP: Grp 23 Advertisement priority 100, ipaddr 172.16.23.1
*Mar 1 03:32:33.295: VRRP: Grp 23 Advertisement priority 100, ipaddr 172.16.23.1
*Mar 1 03:32:34.395: VRRP: Grp 23 Advertisement priority 100, ipaddr 172.16.23.1
*Mar 1 03:32:34.951: VRRP: Grp 23 Event - Master down timer expired
*Mar 1 03:32:34.951: %VRRP-6-STATECHANGE: Et1/1 Grp 23 state Backup -> Master
*Mar 1 03:32:34.951: VRRP: tbridge_smf_update failed
*Mar 1 03:32:34.951: VRRP: Grp 23 sending Advertisement checksum B1D7
*Mar 1 03:32:35.951: VRRP: Grp 23 sending Advertisement checksum B1D7
*Mar 1 03:32:36.955: VRRP: Grp 23 sending Advertisement checksum B1D7
*Mar 1 03:32:37.955: VRRP: Grp 23 sending Advertisement checksum B1D7
继续-------------
R2(config-if)#vrrp 23 ?
authentication Authentication string
description Group specific description
ip Enable Virtual Router Redundancy Protocol (VRRP) for IP
preempt Enable preemption of lower priority Master
priority Priority of this VRRP group
timers Set the VRRP timers
R2(config-if)#vrrp 23 没有track,不知道后续版本会不会有
再看看cisco的HSRP，功能多多了
R2(config-if)#standby ?
<0-255> group number
authentication Authentication
delay HSRP initialisation delay
ip Enable HSRP and set the virtual IP address
mac-address Virtual MAC address
name Redundancy name string
preempt Overthrow lower priority Active routers
priority Priority level
redirects Configure sending of ICMP Redirect messages with an HSRP
virtual IP address as the gateway IP address
timers Hello and hold timers
track Priority tracking
use-bia HSRP uses interface's burned in address
==================================================================================
切换时间的对比，对比思路如下
1、初始时间的对比
2、主设备down掉，备设备状态的切换时间的对比
3、切换时丢几个包
如果相差比较大，再把HSRP 的hello interval改成1s,注意虽然主设备能影响备设备，但备设备也可能切换成主设备，所以为了测试公平，应该在2个地方都设成1s
转载于:https://blog.51cto.com/sense5/53701
4030
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
