网关冗余和负载均衡VRRP

1、网关冗余和负载均衡 VRRPR1R316-11利实验2拓扌卜圈、交换机SW1 (R6 )交换机 SW2 (R4)配置R6>e nableR6#co nf tR6(co nfig)#host name SW1SW1 (con fig)#i nt faO/OSW1 (con fig-if)# no shutdow nSW1 (con fig-if)#exitSW1 (con fig)#i nt faO/1SW1 (con fig-if)# no shutdow nSW1 (con fig-if)#exitSW1 (con fig)#i nt fa0/2SW1 (con fig-if)# no

2、 shutdow nSW1 (con fig-if)#exitSW1#vla n databaseSW1 (vla n) #vla n 2VLAN 2 added:Name: VLAN0002SW1 (vlan )#exitSW1#co nf tSW1 (con fig)#i nt range faO/O - 2SW1 (config-if-range)#switchport access vlan 2SW1 (con fig-if-ra nge)#exitSW1 (con fig-if-ra nge)#exitSW1(config)#int vlan 2SW1(config-if)#no s

3、hutdownSW1(co nfig-if)#exitSW1#R4venab-eR4#conf fR4(COMg)#hosf SW2Sw2(config)#in二aoMSw2(confign#no shutdownSw2(confign#e><.fSw2(config)#inffo、oSw2(confign#no shutdownSw2(confign#e><.fSw2(config)#exifSw2#v-an databaseSw2(v_an)#v_an 2VLAN 2 added-Name VLAN0002Sw2(v_an)#exifSW2#conf fSw2(co

4、nfig)#inf range fao.o -1 sw2(configfAange)#swiohport access v-an 2Sw2(configfrange)#endSW2#M>”H>配置 PC1 ( R7 ) PC2 ( R5 )R7>e nableR7#co nf tR7(co nfig)#host PC1PC1(con fig)# no ip routi ngPC1(co nfig)#i nt e0/0PC1(config-if)#no shutdownPC1(co nfig-if)#exitPC1(co nfig)#exitPC1#R5>e nableR

5、5#co nf tR5(co nfig)#host PC2PC2 (config)#no ip routingPC2 (con fig)#i nt e0/0PC2 (con fig-if)# no shutdow nPC2 (con fig-if)#exit三、对路由器进行基本配置R1#co nf tR1(co nfig)#i nt eO/OR1(c on fig-if)# no shutdow nR1(co nfig-if)#exitR1(co nfig)#i nt s1/0R1(c on fig-if)# no shutdow nR1(co nfig-if)#exitR1(co nfig)

6、#R2>e nableR2#co nf tR2(co nfig)#i nt s1/0R2(co nfig-if)#clock rate 128000R2(c on fig-if)# no shutdow nR2(co nfig-if)#exitR2(co nfig)# int s1/1R2(co nfig-if)#clock rate 128000R2(c on fig-if)# no shutdow nR2(co nfig-if)#exitR2(co nfig)#i nt e0/0R2(c on fig-if)# no shutdow nR2(co nfig-if)#exitR2(co

7、 nfig)#exitR2#R3>e nableR3#co nf tR3(co nfig)#i nt s1/0R3(c on fig-if)# no shutdow nR3(co nfig)#i nt e0/0R3(c on fig-if)# no shutdow nR3(co nfig-if)#exitR3(co nfig)#四、配置路由协议R1#co nf tR1(config)#router ripR1(c on fig-router)#passive-i nterface e0/0/把e0/0接口设为被接口，为了防止从该接口发送RIP信息给R3R1(c on fig-router

8、)#exitR1(co nfig)#exitR1#R2#co nf tR2(c on fig)#router ripR2(c on fig-router)#passive-i nterface e0/0R2(c on fig-router)#exitR2(co nfig)#exitR2#R3#co nf tR3(c on fig)#router ripR3(c on fig-router)#passive-i nterface e0/0R3(c on fig-router)#exitR3(co nfig)#exitR3#五、查看路由表R1#sh ip routeCodes: C - conn

9、ected, S - static, R - RIP , M - mobile, B - BGPD - EIGRP , EX - EIGRP external, O - OSPF, IA - OSPF in ter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia

10、 - IS-IS in ter area, * - can didate default, U - per-user static route o - ODR, P - periodic downloaded static routeGateway of last resort is not setC192.168.12.0/24 is directly conn ected, Serial1/0C192.168.13.0/24 is directly conn ected, Ethernet0/0R192.168.20.0/24 120/1 via 192.168.12.2, 00:00:2

11、8,Serial1/0R192.168.23.0/24 120/1 via 192.168.13.3, 00:01:12,Ethernet0/0120/1 via 192.168.12.2, 00:00:06, Serial1/0R1#前后对比R1#sh ip routeCodes: C - conn ected, S - static, R - RIP , M - mobile, B - BGPD - EIGRP , EX - EIGRP external, O - OSPF, IA - OSPF in ter area N1 - OSPF NSSA external type 1, N2

12、- OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS in ter area, * - can didate default, U - per-user static route o - ODR, P - periodic downloaded static routeGateway of last resort is not s

13、etC 192.168.12.0/24 is directly conn ected, Serial1/0C 192.168.13.0/24 is directly conn ected, Ethernet0/0R 192.168.20.0/24 120/1 via 192.168.12.2, 00:00:28, Serial1/0R 192.168.23.0/24 120/1 via 192.168.12.2, 00:00:02, Serial1/0R1#R2#sh ip route,M - mobile, B - BGPCodes: C - conn ected, S - static,

14、R - RIP D - EIGRP , EX - EIGRP external, O - OSPF, IA - OSPF in ter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS in ter area, * - can didate def

15、ault, U - per-user static route o - ODR, P - periodic dow nl oaded static routeGateway of last resort is not setC 192.168.12.0/24 is directly conn ected, Serial1/0R 192.168.13.0/24 120/1 via 192.168.23.3, 00:00:17, Serial1/1120/1 via 192.168.12.1,00:00:14, Serial1/0C192.168.20.0/24 is directly conn

16、ected, Ethernet0/0C192.168.23.0/24 is directly conn ected, Serial1/1R2#R3#sh ip routeCodes: C - conn ected, S - static, R - RIP, M - mobile, B - BGPD - EIGRP , EX - EIGRP external, O - OSPF, IA - OSPF in ter areaN1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2E1 - OSPF external type 1,

17、 E2 - OSPF external type 2i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS in ter area, * - can didate default, U - per-user static route o - ODR, P - periodic downloaded static routeGateway of last resort is not setR 192.168.12.0/24 120/1 via 192.168.23.2, 00:00:16,

18、Serial1/0C 192.168.13.0/24 is directly conn ected, Ethernet。/。R 192.168.20.0/24 120/1 via 192.168.23.2, 00:00:12, Serial1/0C 192.168.23.0/24 is directly conn ected, Serial1/0R3#五、测试Type escape seque nee to abort.Se nding 5, 100-byte ICMP Echos to 192.168.20.100, timeout is 2 seco nds:!Success rate i

19、s 100 perce nt (5/5), roun d-trip min/avg/max = 60/80/120 msR1#六、配置多个VRRP组R1#co nf tR1(config)#track 100 int s1/0 line-protocol/ 定义跟踪目标R1(co nfig-track)#exitR1(co nfig)#i nt e0/0R1(co nfig-if)#vrrp 1 priority 120R1(c on fig-if)#vrrp 1 preempt/命令不存在R1(config-if)#vrrp 1 authentication md5 key-string c

20、iscoR1(co nfig-if)#vrrp 1 track 100 decreme nt 30R1(c on fig-if)#vrrp 2 preemptR1(config-if)#vrrp 2 authentication md5 key-string ciscoR1(co nfig-if)#R3#co nf tR3(co nfig)#track 100 int s1/0 lin e-protocolR3(co nfig-track)#exitR3(co nfig)#i nt e0/0R3(c on fig-if)#vrrp 1 preemptR3(c on fig-if)#vrrp 1

21、 authe nticati on md5 key-stri ng ciscoR3(co nfig-if)#vrrp 2 R3(co nfig-if)#vrrp 2 priority 120R3(c on fig-if)#vrrp 2 preemptR3(c on fig-if)#vrrp 2 authe nticati on md5 key-stri ng ciscoR3(co nfig-if)#vrrp 3 track 100 decreme nt 30R3(co nfig-if)#exitR3(co nfig)#exitR3#七、查看VRRPR1#sh vrrp briefIn terfaceGrp Pri TimeOwn Pre StateMaster addrGroup addrEtO/O11203531Y MasterEt0/021003609Y BackupR1#R3#sh vrrp briefIn terfaceGrp Pri TimeOwn Pre StateMaster addrGroup addrEt0/011003609Y BackupEtO/OR