华为交换机VRRP配置

图3-128

配置VRRP主备备份组网图

配置思路采用VRRP主备备份实现网关冗余备份，配置思路如下：配置各设备接口IP地址及路由协议，使各设备间网络层连通。在SwitchA和SwitchB上配置VRRP备份组。其中，SwitchA上配置较高优先级和20秒抢占延时，作为Master设备承担流量转发；SwitchB上配置较低优先级，作为备用交换机，实现网关冗余备份。操作步骤配置设备间的网络互连#配置设备各接口的IP地址，以SwitchA为例。SwitchB和SwitchC的配置与SwitchA类似，详见配置文件。<HUAWEI>system-view[HUAWEI]sysnameSwitchA[SwitchA]vlanbatch100300[SwitchA]interfacegigabitethernet1/0/1[SwitchA-GigabitEthernet1/0/1]portlink-typehybrid[SwitchA-GigabitEthernet1/0/1]porthybridpvidvlan300[SwitchA-GigabitEthernet1/0/1]porthybriduntaggedvlan300[SwitchA-GigabitEthernet1/0/1]quit[SwitchA]interfacegigabitethernet1/0/2[SwitchA-GigabitEthernet1/0/2]portlink-typehybrid[SwitchA-GigabitEthernet1/0/2]porthybridpvidvlan100[SwitchA-GigabitEthernet1/0/2]porthybriduntaggedvlan100[SwitchA-GigabitEthernet1/0/2]quit[SwitchA]interfacevlanif100[SwitchA-Vlanif100]ipaddress10.1.1.124[SwitchA-Vlanif100]quit[SwitchA]interfacevlanif300[SwitchA-Vlanif300]ipaddress192.168.1.124[SwitchA-Vlanif300]quit#配置Switch的二层转发功能。<HUAWEI>system-view[HUAWEI]sysnameSwitch[Switch]vlan100[Switch-vlan100]quit[Switch]interfacegigabitethernet1/0/1[Switch-GigabitEthernet1/0/1]portlink-typehybrid[Switch-GigabitEthernet1/0/1]porthybridpvidvlan100[Switch-GigabitEthernet1/0/1]porthybriduntaggedvlan100[Switch-GigabitEthernet1/0/1]quit[Switch]interfacegigabitethernet1/0/2[Switch-GigabitEthernet1/0/2]portlink-typehybrid[Switch-GigabitEthernet1/0/2]porthybridpvidvlan100[Switch-GigabitEthernet1/0/2]porthybriduntaggedvlan100[Switch-GigabitEthernet1/0/2]quit#配置SwitchA、SwitchB和SwitchC间采用OSPF协议进行互连。以SwitchA为例，SwitchB和SwitchC的配置与SwitchA类似，详见配置文件。[SwitchA]ospf1[SwitchA-ospf-1]area0[SwitchA-ospf-1-area-0.0.0.0]network10.1.1.00.0.0.255[SwitchA-ospf-1-area-0.0.0.0]network192.168.1.00.0.0.255[SwitchA-ospf-1-area-0.0.0.0]quit[SwitchA-ospf-1]quit配置VRRP备份组#在SwitchA上创建VRRP备份组1，配置SwitchA在该备份组中的优先级为120，并配置抢占时间为20秒。[SwitchA]interfacevlanif100[SwitchA-Vlanif100]vrrpvrid1virtual-ip10.1.1.111Authtype:NONEVirtualMAC:0000-5e00-0101CheckTTL:YESConfigtype:normal-vrrpBackup-forward:disabledCreatetime:2012-01-1220:15:46Lastchangetime:2012-01-1220:18:40#在SwitchA的接口GE1/0/2上执行undoshutdown命令。[SwitchA]interfacegigabitethernet1/0/2[SwitchA-GigabitEthernet1/0/2]undoshutdown[SwitchA-GigabitEthernet1/0/2]quit#等待20秒后，在SwitchA上执行displayvrrp命令查看VRRP状态信息，可以看到SwitchA的状态恢复成Master。[SwitchA]displayvrrpVlanif100|VirtualRouter1State:MasterVirtualIP:10.1.1.111MasterIP:10.1.1.1PriorityRun:120PriorityConfig:120MasterPriority:120Preempt:YESDelayTime:20sTimerRun:1sTimerConfig:1sAuthtype:NONEVirtualMAC:0000-5e00-0101CheckTTL:YESConfigtype:normal-vrrpBackup-forward:disabledCreatetime:2012-01-1220:15:46Lastchangetime:2012-01-1220:20:56配置文件SwitchA的配置文件#sysnameSwitchA#vlanbatch100300#interfaceVlanif100ipaddress10.1.1.1255.255.255.0vrrpvrid1virtual-ip10.1.1.111vrrpvrid1priority120vrrpvrid1preempt-modetimerdelay20#interfaceVlanif300ipaddress192.168.1.1255.255.255.0#interfaceGigabitEthernet1/0/1portlink-typehybridporthybridpvidvlan300porthybriduntaggedvlan300#interfaceGigabitEthernet1/0/2portlink-typehybridporthybridpvidvlan100porthybriduntaggedvlan100#ospf1area0.0.0.0network10.1.1.00.0.0.255network192.168.1.00.0.0.255#returnSwitchB的配置文件#sysnameSwitchB#vlanbatch100200#interfaceVlanif100ipaddress10.1.1.2255.255.255.0vrrpvrid1virtual-ip10.1.1.111#interfaceVlanif200ipaddress192.168.2.1255.255.255.0#interfaceGigabitEthernet1/0/1portlink-typehybridporthybridpvidvlan200porthybriduntaggedvlan200#interfaceGigabitEthernet1/0/2portlink-typehybridporthybridpvidvlan100porthybriduntaggedvlan100#ospf1area0.0.0.0network10.1.1.00.0.0.255network192.168.2.00.0.0.255#returnSwitchC的配置文件#sysnameSwitchC#vlanbatch200300400#interfaceVlanif200ipaddress192.168.2.2255.255.255.0#interfaceVlanif300ipaddress192.168.1.2255.255.255.0#interfaceVlanif400ipaddress172.16.1.1255.255.255.0#interfaceGigabitEthernet1/0/1portlink-typehybridporthybridpvidvlan300porthybriduntaggedvlan300#interfaceGigabitEthernet1/0/2portlink-typehybridporthybridpvidvlan200porthybriduntaggedvlan200#interfaceGigabitEthernet1/0/3portlink-typehybridporthybridpvidvlan400porthybriduntaggedvlan400#ospf1area0.0.0.0network172.16.1.00.0.0.255network192.168.1.00.0.0.255network192.168.2.00.0.0.25