利用vrrp实现路由器之间的分流及备份!(H3C).doc

1. 作业要求：利用vrrp实现路由器之间的备份实现两个路由器之间流量的分流（提高效率）利用通道技术来提高安全性2. 拓扑图3. 设备描述：路由器：H3C Quidway R2621 （R9 R6）交换机：H3C Quidway S2000 (二层交换机S2)H3C Quidway S3526E (三层交换机S1)4. 设备配置4.1 基本配置：路由器R9：Routersysname R9R9int e1.10R9-Ethernet1.10vlan-type dot1q vid 10 /打标签R9-Ethernet1.10ip add 192.168.10.1 255.255.255.0/配ip/这两步顺序不能颠倒！R9-Ethernet1.10int e1.20R9-Ethernet1.20vlan-type dot1q vid 20R9-Ethernet1.20ip add 192.168.20.1 24路由器R6:R6int e1.10R6-Ethernet1.10vlan-type dot1q vid 10 R6-Ethernet1.10ip add 192.168.10.2 24R6-Ethernet1.10int e1.20R6-Ethernet1.20vlan-type dot1q vid 20R6-Ethernet1.20ip add 192.168.20.2 24交换机s1：Quidwaysysname s1s1int e0/24s1-Ethernet0/24port link-type trunk /干道链路s1-Ethernet0/24port trunk permit vlan all /默认只允许vlan1通过，所以这里Please wait. Done.s1-Ethernet0/24vlan 10s1-vlan10port e0/3 to e0/5 /划分端口s1-vlan10vlan 20s1-vlan20port e0/10 to e 0/15s1int e0/1s1-Ethernet0/1port link-type trunk s1-Ethernet0/1port trunk permit vlan alls1-Ethernet0/1dis int e0/1Ethernet0/1 current state : UPIP Sending Frames Format is PKTFMT_ETHNT_2, Hardware address is 00e0-fc0e-b624The Maximum Transmit Unit is 1500Media type is twisted pair, loopback not setPort hardware type is 100_BASE_TX100Mbps-speed mode, full-duplex modeLink speed type is autonegotiation, link duplex type is autonegotiationFlow-control is not enabledPort-flow-constrain has not been configured completelyThe Maximum Frame Length is 1536Broadcast MAX-ratio: 100%PVID: 1Mdi type: autoPort link-type: trunkVLAN passing : 1(default vlan), 10, 20VLAN allowed : 1(default vlan), 2-4094Trunk port encapsulation: IEEE 802.1q交换机s2：s2int e1/0/24s2-Ethernet1/0/24port link-type trunks2-Ethernet1/0/24port trunk permit vlan allPlease wait. Done.s2-Ethernet1/0/24vlan 10s2-vlan10port e1/0/3 to e1/0/5s2-vlan10vlan 20s2-vlan20port e1/0/10 to e1/0/15s2int e1/0/1s2-Ethernet1/0/1port link-type trunks2-Ethernet1/0/1port trunk permit vlan allPlease wait. Done.s2-Ethernet1/0/1dis int e1/0/1Ethernet1/0/1 current state : UPIP Sending Frames Format is PKTFMT_ETHNT_2, Hardware address is 000f-e274-2158Media type is twisted pair, loopback not setPort hardware type is 100_BASE_TX100Mbps-speed mode, full-duplex modeLink speed type is autonegotiation, link duplex type is autonegotiationFlow-control is not enabledThe Maximum Frame Length is 1536Broadcast MAX-ratio: 100%PVID: 1Mdi type: normalPort link-type: trunkVLAN passing : 1(default vlan), 10, 20VLAN permitted: 1(default vlan), 2-4094Trunk port encapsulation: IEEE 802.1q测试是否能通：R9ping 192.168.10.2PING 192.168.10.2: 56 data bytes, press CTRL_C to breakReply from 192.168.10.2: bytes=56 Sequence=0 ttl=255 time = 2 msReply from 192.168.10.2: bytes=56 Sequence=1 ttl=255 time = 2 msR9ping 192.168.20.2PING 192.168.20.2: 56 data bytes, press CTRL_C to breakReply from 192.168.20.2: bytes=56 Sequence=0 ttl=255 time = 2 msReply from 192.168.20.2: bytes=56 Sequence=1 ttl=255 time = 2 ms配通道之前:必须保证两条线路为trunk链路!4.2 通道配置：添加一条链路：s1-Ethernet0/22int e0/2s1-Ethernet0/2port link-type trunks1-Ethernet0/2port trunk permit vlan allPlease wait. Dones2int e1/0/2s2-Ethernet1/0/2port link-type trunks2-Ethernet1/0/2port trunk permit vlan al通道捆绑配置：/s3526Es1link-aggregation eth0/1 to eth0/2 both范围要求 1 9 17 连续能捆绑，其他的不能而且端口要求全双工 ，百兆！/S2000s2link-aggregation group 1 mode manuals2-Ethernet1/0/22int e1/0/1s2-Ethernet1/0/1port link-aggregation group 1s2int e1/0/2s2-Ethernet1/0/2port link-aggregation group 1进接口设置全双工,速率s1int e0/1s1-Ethernet0/1duplex fulls1-Ethernet0/1speed 100s1int e0/2s1-Ethernet0/2duplex ?auto Enable ports duplex negotiation automaticallyfull Full-duplexhalf Half-duplexs1-Ethernet0/2duplex fulls1-Ethernet0/2speed 100s2-Ethernet1/0/1duplex full /这一端可自动协商!s2-Ethernet1/0/1speed 100s2-Ethernet1/0/1int e1/0/2s2-Ethernet1/0/2duplex fulls2-Ethernet1/0/2speed 100测试:拔掉s1与s2 之间的任意一条线路,都不影响正常通信!4.3 vrrp (虚拟冗余路由协议)R6vrrp ping-enable /必须先执行此命令，否则后面不能使用ping命令ping vrrp enableR9int e1.10R9-Ethernet1.10vrrp vrid ?INTEGER Virtual router IDR9-Ethernet1.10vrrp vrid 10 virtual-ip 192.168.10.254 /配虚拟网关指向R9-Ethernet1.10int e1.20R9-Ethernet1.20vrrp vrid 20 virtual-ip 192.168.20.254R6vrrp ping-enableping vrrp enableR6int e1.10R6-Ethernet1.10vrrp vrid 10 virtual-ip 192.168.10.254R6-Ethernet1.10vrrp vrid 10 priority 80R6-Ethernet1.10int e1.20R6-Ethernet1.20vrrp vrid 20 virtual-ip 192.168.20.254R6-Ethernet1.20vrrp vrid 20 priority 80 /调优先级5. 测试：R6dis vrrpEthernet1.20 | Virtual Router 20state : BackupVirtual IP : 192.168.20.254Priority : 80Preempt : YES Delay Time : 0Timer : 1Auth Type : NOEthernet1.10 | Virtual Router 10state : BackupVirtual IP : 192.168.10.254Priority : 80Preempt : YES Delay Time : 0Timer : 1Auth Type : NOR9dis vrrpEthernet1.20 | Virtual Router 20state : MasterVirtual IP : 192.168.20.254Priority : 100Preempt : YES Delay Time : 0Timer : 1Auth Type : NOEthernet1.10 | Virtual Router 10state : MasterVirtual IP : 192.168.10.254Priority : 100Preempt : YES Delay Time : 0Timer : 1Auth Type : NO所有流量都集中在一台路由器上了!即R9 (R6作为备份) 分流的配置：R6int e1.20R6-Ethernet1.20vrrp vrid 20 priority 120R6-Ethernet1.20quitR6dis vrrpEthernet1.20 | Virtual Router 20state : MasterVirtual