双机热备(HRSP).docx

两台路由器+两台三层交换机做冗余最大限度避免单点故障网络拓扑图如下：拓扑说明：1 路由器Internet是一台模拟Internet环境的路由器，为了尽可能真实，我仅在路由器上配置了相应的端口IP没有任何静态或动态路由。2 接入层交换机为傻瓜型设备，仅设置vlan端口划分。随时可以更换，基本不用做任何配置。3 两台交换机互相做备份，配置基本差不多。区别在于VTP Server在MSW上，BSW作为VTP Client存在。4 SPT没有专门配置，有设备自动生成。5 两台路由器互相备份，配置基本差不多。6 该配置环境中只要有一台路由器和一台核心交换机在工作，网络可以正常工作。7 其他详细网络参数基本可以在拓扑图上找到，更详细的参数，请参照最后的配置文件。配置情况：基本配置Internetenableconfigure terminalhostname Internetinterface g0/0ip address 8.8.8.254 255.255.255.0no shutdownexitinterface g0/1ip address 1.1.1.1 255.255.255.0no shutdownexitinterface g0/2ip address 2.2.2.1 255.255.255.0no shutdownexitexitwriteMRenableconfigure terminalhostname MRinterface g0/0ip address 1.1.1.2 255.255.255.0no shutdownexitinterface g0/1ip address 192.168.10.2 255.255.255.0no shutdownexitinterface g0/2ip address 192.168.20.2 255.255.255.0no shutdownexitexitwriteBRenableconfigure terminalhostname BRinterface g0/0ip address 2.2.2.2 255.255.255.0no shutdownexitinterface g0/1ip address 192.168.20.3 255.255.255.0no shutdownexitinterface g0/2ip address 192.168.10.3 255.255.255.0no shutdownexitexitwritemswenableconfigure terminalhostname MSWip routingexitwritebswenableconfigure terminalhostname BSWip routingexitwriteSW1enableconfigure terminalhostname SW1exitwriteSW2enableconfigure terminalhostname SW2exitwrite配置交换机VLANMSWenableconfigure terminalvtp domain avtp password avtp mode servervlan 10vlan 20vlan 100vlan 200interface vlan 10ip address 192.168.10.253 255.255.255.0exitinterface vlan 20ip address 192.168.20.253 255.255.255.0exitinterface vlan 100ip address 192.168.100.253 255.255.255.0exitinterface vlan 200ip address 192.168.200.253 255.255.255.0exitinterface range f0/1-24switchport mode accessswitchport mode trunkswitchport trunk allowed vlan allexitinterface g0/1switchport mode accessswitchport access vlan 10exitinterface g0/2switchport mode accessswitchport access vlan 20exitexitwriteBSWenableconfigure terminalvtp domain avtp password avtp mode clientinterface vlan 10ip address 192.168.10.252 255.255.255.0exitinterface vlan 20ip address 192.168.20.252 255.255.255.0exitinterface vlan 100ip address 192.168.100.253 255.255.255.0exitinterface vlan 200ip address 192.168.200.253 255.255.255.0exitinterface range f0/1-24switchport mode accessswitchport mode trunkswitchport trunk allowed vlan allexitinterface g0/1switchport mode accessswitchport access vlan 20exitinterface g0/2switchport mode accessswitchport access vlan 10exitexitwriteSW1enableconfigure terminalvtp domain avtp password avtp mode clientinterface range f0/21-24switchport mode accessswitchport mode trunkswitchport trunk allowed vlan allexitinterface range f0/1-10switchport mode accessswitchport access vlan 100exitinterface range f0/11-20switchport mode accessswitchport access vlan 200exitexitwriteSW2enableconfigure terminalvtp domain avtp password avtp mode clientinterface range f0/21-24switchport mode accessswitchport mode trunkswitchport trunk allowed vlan allexitinterface range f0/1-10switchport mode accessswitchport access vlan 100exitinterface range f0/11-20switchport mode accessswitchport access vlan 200exitexitwrite配置HRSP（热备份路由协议）MRenableconfigure terminalinterface g0/1standby 11 ip 192.168.10.1standby 11 priority 120standby 11 preemptexitinterface g0/2standby 21 ip 192.168.20.1standby 21 priority 120standby 21 preemptexitexitwriteBRenableconfigure terminalinterface g0/1standby 21 ip 192.168.20.1standby 21 priority 120standby 21 preemptexitinterface g0/2standby 11 ip 192.168.10.1standby 11 priority 120standby 11 preemptexitexitwriteMSWenableconfigure terminalinterface vlan 10standby 10 ip 192.168.10.254standby 10 priority 120standby 10 preemptexitinterface vlan 20standby 20 ip 192.168.20.254standby 20 priority 120standby 20 preemptexitinterface vlan 100standby 100 ip 192.168.100.254standby 100 priority 120standby 100 preemptexitinterface vlan 200standby 200 ip 192.168.200.254standby 200 priority 120standby 200 preemptexitexitwriteBSEenableconfigure terminalinterface vlan 10standby 10 ip 192.168.10.254standby 10 priority 120standby 10 preemptexitinterface vlan 20standby 20 ip 192.168.20.254standby 20 priority 120standby 20 preemptexitinterface vlan 100standby 100 ip 192.168.100.254standby 100 priority 120standby 100 preemptexitinterface vlan 200standby 200 ip 192.168.200.254standby 200 priority 120standby 200 preemptexitexitwrite添加静态路由MRenableconfigure terminalip route 0.0.0.0 0.0.0.0 1.1.1.1ip route 192.168.0.0 255.255.0.0 192.168.10.254exitwriteBRenableconfigure terminalip route 0.0.0.0 0.0.0.0 2.2.2.1ip route 192.168.0.0 255.255.0.0 192.168.10.254exitwriteMSWenableconfigure terminalip route 0.0.0.0 0.0.0.0 192.168.10.1exitwriteBSWenableconfigure terminalip route 0.0.0.0 0.0.0.0 192.168.10.1exitwrite路由器添加NAT转换MRenableconfigure terminalinterface g0/0ip nat outsideexitinterface g0/1ip nat insideexitinterface g0/2ip nat insideexitip nat pool out 1.1.1.3 1.1.1.3 netmask 255.255.255.255access-list 10 permit 192.168.0.0 0.0.255.255ip nat inside source list 10 pool out overloadexitwrite-BRenableconfigure terminalinterface g0/0ip nat outsideexitinterface g0/1ip nat insideexitinterface g0/2ip nat insideexitip nat pool out 2.2.2.3 2.2.2.3 netmask 255.255.255.255access-list 10 permit 192.168.0.0 0.0.255.255ip nat inside source list 10 pool out overloadexitwrite配置清单InternetInternet#sh runnBuilding configuration.Current configuration : 719 bytes!version 15.1no service timestamps log datetime msecno service timestamps debug datetime msecno service password-encryption!hostname Internet!ip cefno ipv6 cef!license udi pid CISCO2911/K9 sn FTX15240M09!spanning-tree mode pvst!interface GigabitEthernet0/0ip address 8.8.8.254 255.255.255.0duplex autospeed auto!interface GigabitEthernet0/1ip address 1.1.1.1 255.255.255.0duplex autospeed auto!interface GigabitEthernet0/2ip address 2.2.2.1 255.255.255.0duplex autospeed auto!interface Vlan1no ip addressshutdown!ip classless!ip flow-export version 9!line con 0!line aux 0!line vty 0 4login!endInternet#MRMRENMR#show runnBuilding configuration.Current configuration : 1183 bytes!version 15.1no service timestamps log datetime msecno service timestamps debug datetime msecno service password-encryption!hostname MR!ip cefno ipv6 cef!license udi pid CISCO2911/K9 sn FTX152483N7!spanning-tree mode pvst!interface GigabitEthernet0/0ip address 1.1.1.2 255.255.255.0ip nat outsideduplex autospeed auto!interface GigabitEthernet0/1ip address 192.168.10.2 255.255.255.0ip nat insideduplex autospeed autostandby version 2standby 11 ip 192.168.10.1standby 11 priority 120standby 11 preempt!interface GigabitEthernet0/2ip address 192.168.20.2 255.255.255.0ip nat insideduplex autospeed autostandby version 2standby 21 ip 192.168.20.1standby 21 priority 120standby 21 preempt!interface Vlan1no ip addressshutdown!ip nat pool out 1.1.1.3 1.1.1.3 netmask 255.255.255.255ip nat inside source list 10 pool out overloadip classlessip route 0.0.0.0 0.0.0.0 1.1.1.1 ip route 192.168.0.0 255.255.0.0 192.168.10.254 !ip flow-export version 9!access-list 10 permit 192.168.0.0 0.0.255.255!line con 0!line aux 0!line vty 0 4login!endMR#BRBRenBR#sh runnBuilding configuration.Current configuration : 1183 bytes!version 15.1no service timestamps log datetime msecno service timestamps debug datetime msecno service password-encryption!hostname BR!ip cefno ipv6 cef!license udi pid CISCO2911/K9 sn FTX15245NTA!spanning-tree mode pvst!interface GigabitEthernet0/0ip address 2.2.2.2 255.255.255.0ip nat outsideduplex autospeed auto!interface GigabitEthernet0/1ip address 192.168.20.3 255.255.255.0ip nat insideduplex autospeed autostandby version 2standby 21 ip 192.168.20.1standby 21 priority 120standby 21 preempt!interface GigabitEthernet0/2ip address 192.168.10.3 255.255.255.0ip nat insideduplex autospeed autostandby version 2standby 11 ip 192.168.10.1standby 11 priority 120standby 11 preempt!interface Vlan1no ip addressshutdown!ip nat pool out 2.2.2.3 2.2.2.3 netmask 255.255.255.255ip nat inside source list 10 pool out overloadip classlessip route 0.0.0.0 0.0.0.0 2.2.2.1 ip route 192.168.0.0 255.255.0.0 192.168.10.254 !ip flow-export version 9!access-list 10 permit 192.168.0.0 0.0.255.255!line con 0!line aux 0!line vty 0 4login!endBR#MSWMSWenMSW#sh runnBuilding configuration.Current configuration : 3368 bytes!version 12.2no service timestamps log datetime msecno service timestamps debug datetime msecno service password-encryption!hostname MSW!ip routing!spanning-tree mode pvst!interface FastEthernet0/1switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/2switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/3switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/4switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/5switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/6switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/7switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/8switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/9switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/10switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/11switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/12switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/13switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/14switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/15switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/16switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/17switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/18switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/19switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/20switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/21switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/22switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/23switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/24switchport trunk encapsulation dot1qswitchport mode trunk!interface GigabitEthernet0/1switchport access vlan 10switchport mode access!interface GigabitEthernet0/2switchport access vlan 20switchport mode access!interface Vlan1no ip addressshutdown!interface Vlan10ip address 192.168.10.253 255.255.255.0standby version 2standby 10 ip 192.168.10.254standby 10 priority 120standby 10 preempt!interface Vlan20ip address 192.168.20.253 255.255.255.0standby version 2standby 20 ip 192.168.20.254standby 20 priority 120standby 20 preempt!interface Vlan100ip address 192.168.100.253 255.255.255.0standby version 2standby 100 ip 192.168.100.254standby 100 priority 120standby 100 preempt!interface Vlan200ip address 192.168.200.253 255.255.255.0standby version 2standby 200 ip 192.168.200.254standby 200 priority 120standby 200 preempt!ip classlessip route 0.0.0.0 0.0.0.0 192.168.10.1 !ip flow-export version 9!line con 0!line aux 0!line vty 0 4login!endMSW#BSWBSW#sh runnBuilding configuration.Current configuration : 3368 bytes!version 12.2no service timestamps log datetime msecno service timestamps debug datetime msecno service password-encryption!hostname BSW!ip routing!spanning-tree mode pvst!interface FastEthernet0/1switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/2switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/3switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/4switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/5switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/6switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/7switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/8switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/9switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/10switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/11switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/12switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/13switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/14switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/15switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/16switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/17switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/18switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/19switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/20switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/21switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/22switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/23switchport trunk encapsulation dot1qswitchport mode trunk!interface FastEthernet0/24switchport trunk encapsulation dot1qswitchport mode trunk!interface GigabitEthernet0/1switchport access vlan 20switchport mode access!interface GigabitEthernet0/2switchport access vlan 10switchport mode access!interface Vlan1no ip addressshutdown!interface Vlan10ip address 192.168.10.252 255.255.255.0standby version 2standby 10 ip 192.168.10.254standby 10 priority 120standby 10 preempt!interface Vlan20ip address 192.168.20.252 255.255.255.0standby version 2standby 20 ip 192.168.20.254standby 20 priority 120standby 20 preempt!interface Vlan100ip address 192.168.100.253 255.255.255.0standby version 2standby 100 ip 192.168.100.254standby 100 priority 120standby 100 preempt!interface Vlan200ip address 192.168.200.253 255.255.255.0standby version 2standby 200 ip 192.168.200.254standby 200 priority 120standby 200 preempt!ip classlessip route 0.0.0.0 0.0.0.0 192.168.10.1 !ip flow-export version 9!line con 0!line aux 0!line vty 0 4login!endBSW#SW1SW1#sh runnBuilding configuration.Current configuration : 2106 bytes!version 12.1no service timestamps log datetime msecno service timestamps debug datetime msecno service password-encryption!hostname SW1!spanning-tree mode pvst!interface FastEthernet0/1switchport access vlan 100switchport mode access!interface FastEthernet0/2switchport access vlan 100switchport mode access!interface FastEthernet0/3switchport access vlan 100switchport mode access!interface FastEthernet0/4switchport access vlan 100switchport mode access!interface FastEthernet0/5switchport access vlan 100switchport mode access!interface FastEthernet0/6switchport access vlan 100switchport mode access!interface FastEthernet0/7switchport access vlan 100switchport mode access!interface FastEthernet0/8switchport access vlan 100switchport mode access!interface FastEthernet0/9switchport access vlan 100switchport mode access!interface FastEthernet0/10switchport access vlan 100switchport m