本文共 8981 字，大约阅读时间需要 29 分钟。

VRRP协议实验

一、VRPP基础设置

图示实验要求：PC1可以ping通R3，需要断掉任何一条线路都可以。

实验步骤

1.设置PC1

2.设置R1

   
    sys[Huawei]sys r1[r1]int g0/0/0[r1-GigabitEthernet0/0/0]ip add 192.168.1.252 24[r1-GigabitEthernet0/0/0]vrrp vrid 1 virtual-ip 192.168.1.254[r1-GigabitEthernet0/0/0]vrrp vrid 1 priority 120[r1-GigabitEthernet0/0/0]dis this[r1-GigabitEthernet0/0/0]int g0/0/1[r1-GigabitEthernet0/0/1]ip add 192.168.10.1 24[r1-GigabitEthernet0/0/1]q[r1]ip route-static 3.3.3.3 32 192.168.10.2[r1]dis this
   

3.设置R2

   
    sys[Huawei]sys r2[r2]int g0/0/0[r2-GigabitEthernet0/0/0]ip add 192.168.1.253 24[r2-GigabitEthernet0/0/0]vrrp vrid 1 virtual-ip 192.168.1.254[r2-GigabitEthernet0/0/0]dis this[r2-GigabitEthernet0/0/0]int g0/0/1[r2-GigabitEthernet0/0/1]ip add 192.168.20.1 24[r2-GigabitEthernet0/0/1]q[r2]ip route-static 3.3.3.3 32 192.168.20.2[r2]dis this
   

4.设置R3

   
    sys[Huawei]sys r3[r3]int g0/0/0[r3-GigabitEthernet0/0/0]ip add 192.168.10.2 24[r3-GigabitEthernet0/0/0]int g0/0/1[r3-GigabitEthernet0/0/1]ip add 192.168.20.2 24[r3-GigabitEthernet0/0/1]q[r3]int LoopBack 1[r3-LoopBack1]ip add 3.3.3.3 32[r3-LoopBack1]dis this[r3-LoopBack1]q[r3]ip route-static 192.168.1.0 24 192.168.10.1[r3]ip route-static 192.168.1.0 24 192.168.20.1[r3]dis this
   

5.尝试连通

6.断开SW1与R1

[r1]int g0/0/0[r1-GigabitEthernet0/0/0]shutdown

抓包并再次ping

由图可知，依旧可以ping通。并且通过抓包我们可以发现，在断开主路由器线之后，虚拟路由器发送广播，备份路由器接收并且开始继续传输数据。

7.断开R1与R3

[r1-GigabitEthernet0/0/1]int g0/0/0[r1-GigabitEthernet0/0/0]vrrp vrid 1 track interface g0/0/1 reduced  40[r1-GigabitEthernet0/0/0]int g0/0/1[r1-GigabitEthernet0/0/1]shutdown

通过追踪路由器上级端口降低优先级之后，我们再次抓包ping。

由图可知，再经历一次广播之后，变为备用路由器传输数据。 断开其他线路同理。

二、VRRP协议进阶设置

实验要求：R1为vlan10主要传输路径，R2为vlan20主要传输路径。

实验步骤

1.配置PC

2.设置R1

   
    sys[Huawei]sys r1[r1]vlan b 10 20[r1]int g0/0/0.1[r1-GigabitEthernet0/0/0.1]ip add 192.168.1.252 24[r1-GigabitEthernet0/0/0.1]vrrp vrid 1 virtual-ip 192.168.1.254[r1-GigabitEthernet0/0/0.1]vrrp vrid 1 priority 110[r1-GigabitEthernet0/0/0.1]dis this[r1-GigabitEthernet0/0/0.1]dot1q termination vid 10[r1-GigabitEthernet0/0/0.1]a b e[r1-GigabitEthernet0/0/0.1]dis this[r1-GigabitEthernet0/0/0.1]int g0/0/0.2[r1-GigabitEthernet0/0/0.2]dot1q termination vid 20[r1-GigabitEthernet0/0/0.2]a b e[r1-GigabitEthernet0/0/0.2]dis this[r1-GigabitEthernet0/0/0.2]ip add 192.168.2.253 24[r1-GigabitEthernet0/0/0.2]vrrp vrid 2 virtual-ip 192.168.2.254
   

3.设置R2

   
    sys[Huawei]sys r2[r2]vlan b 10 20[r2]int g0/0/0.2[r2-GigabitEthernet0/0/0.2]ip add 192.168.2.252  24[r2-GigabitEthernet0/0/0.2]vrrp vrid 2 virtual-ip 192.168.2.254[r2-GigabitEthernet0/0/0.2]vrrp vrid 2 priority 110[r2-GigabitEthernet0/0/0.2]dis this[r2-GigabitEthernet0/0/0.2]dot1q termination vid 20[r2-GigabitEthernet0/0/0.2]a b e[r2-GigabitEthernet0/0/0.2]dis this[r2-GigabitEthernet0/0/0.2]int g0/0/0.1[r2-GigabitEthernet0/0/0.1]dot1q termination vid 10[r2-GigabitEthernet0/0/0.1]a b e[r2-GigabitEthernet0/0/0.1]dis this[r2-GigabitEthernet0/0/0.1]ip add 192.168.1.253 24[r2-GigabitEthernet0/0/0.1]vrrp vrid 1 virtual-ip 192.168.1.254
   

4.设置SW1

   
    sys[Huawei]sys sw1[sw1]vlan b 10 20[sw1]int e0/0/1[sw1-Ethernet0/0/1]port link-type trunk [sw1-Ethernet0/0/1]p t a v a[sw1-Ethernet0/0/1]dis this[sw1-Ethernet0/0/1]int e0/0/2[sw1-Ethernet0/0/2]p l t[sw1-Ethernet0/0/2]p t a v a[sw1-Ethernet0/0/2]int e0/0/3[sw1-Ethernet0/0/3]p l a[sw1-Ethernet0/0/3]p d v 10[sw1-Ethernet0/0/3]int e0/0/4[sw1-Ethernet0/0/4]p l a[sw1-Ethernet0/0/4]p d v 20
   

5.尝试ping

三、三层交换机种设置VRRP

实验要求：SW1,SW2配置vrrp，sw1作为vlan10的主，vlan20的备，sw2相反，使得PC1PC2可以ping通各自网关，测试断掉一条线不影响结果。

实验步骤

1.设置PC

2.配置RSW1

   
    sys[Huawei]sys rsw1[rsw1]vlan b 10 20[rsw1]int Vlanif 10[rsw1-Vlanif10]ip add 192.168.1.252 24[rsw1-Vlanif10]dis this[rsw1-Vlanif10]vrrp vrid 1 virtual-ip 192.168.1.254[rsw1-Vlanif10]vrrp vrid 1 priority 110[rsw1-Vlanif10]q[rsw1]int g0/0/1[rsw1-GigabitEthernet0/0/1]p l t[rsw1-GigabitEthernet0/0/1]p t a v a[rsw1-Vlanif20]ip add 192.168.2.253 24[rsw1-Vlanif20]vrrp vrid 2 virtual-ip 192.168.2.254
   

3.配置RSW2

   
    sys[Huawei]sys rsw2[rsw2]vlan b 10 20[rsw2]int vlanif 20[rsw2-Vlanif20]ip add 192.168.2.252 24[rsw2-Vlanif20]vrrp vrid 2 virtual-ip 192.168.2.254[rsw2-Vlanif20]vrrp vrid 2 priority 110[rsw2-Vlanif20]int g0/0/1[rsw2-GigabitEthernet0/0/1]p l t[rsw2-GigabitEthernet0/0/1]p t a v a[rsw2-GigabitEthernet0/0/1]int vlanif 10[rsw2-Vlanif10]ip add 192.168.1.253 24[rsw2-Vlanif10]vrrp vrid 1 virtual-ip 192.168.1.254
   

4.配置RSW3

   
    sys[Huawei]sys rsw3[rsw3]vlan b 10 20[rsw3]int g0/0/1[rsw3-GigabitEthernet0/0/1]p l t[rsw3-GigabitEthernet0/0/1]p t a v a[rsw3-GigabitEthernet0/0/1]int g0/0/2[rsw3-GigabitEthernet0/0/2]p l t[rsw3-GigabitEthernet0/0/2]p t a v a[rsw3-GigabitEthernet0/0/2]int g0/0/3[rsw3-GigabitEthernet0/0/3]p l a[rsw3-GigabitEthernet0/0/3]p d v 10[rsw3-GigabitEthernet0/0/3]int g0/0/4[rsw3-GigabitEthernet0/0/4]p l a[rsw3-GigabitEthernet0/0/4]p d v 20
   

5.尝试ping通

6.断线再连

[rsw1-GigabitEthernet0/0/1]shutdown

图示依旧可以ping通。

四、双PC下的VRRP基础模型

实验要求：R1,R2上的g0/0/0配置子接口，使PC1,PC2可以ping通3.3.3.3，使R1,SW1中间的线路故障，依旧可以ping通。

实验步骤

1.配置PC

2.配置SW1

   
    sys[Huawei]sys sw1[sw1]vlan b 10 20[sw1]int e0/0/1[sw1-Ethernet0/0/1]p l a[sw1-Ethernet0/0/1]p d v 10[sw1-Ethernet0/0/1]int e0/0/2[sw1-Ethernet0/0/2]p l a[sw1-Ethernet0/0/2]p d v 20[sw1-Ethernet0/0/2]int e0/0/3[sw1-Ethernet0/0/3]p l t[sw1-Ethernet0/0/3]p t a v a[sw1-Ethernet0/0/3]int e0/0/4[sw1-Ethernet0/0/4]p l t[sw1-Ethernet0/0/4]p t a v a
   

3.配置R1

[r1]int g0/0/0[r1-GigabitEthernet0/0/0]ip add 192.168.1.252 24[r1-GigabitEthernet0/0/0]ip add 192.168.2.253 24 sub[r1-GigabitEthernet0/0/0]vrrp vrid 1 virtual-ip 192.168.1.254[r1-GigabitEthernet0/0/0]vrrp vrid 2 virtual-ip 192.168.2.254[r1-GigabitEthernet0/0/0]vrrp vrid 1 priority 110[r1]int g0/0/1[r1-GigabitEthernet0/0/1]ip add 192.168.10.1 24[r1-GigabitEthernet0/0/1]q[r1]ip route-static 3.3.3.3 32 192.168.10.2

4.配置R2

[r2-GigabitEthernet0/0/0]ip add 192.168.2.252 24[r2-GigabitEthernet0/0/0]ip add 192.168.1.253 24 sub[r2-GigabitEthernet0/0/0]vrrp vr [r2-GigabitEthernet0/0/0]vrrp vrid 1 vi [r2-GigabitEthernet0/0/0]vrrp vrid 1 virtual-ip 192.168.1.254[r2-GigabitEthernet0/0/0]vrrp vrid 2 virtual-ip 192.168.2.254[r2-GigabitEthernet0/0/0]vrrp vr [r2-GigabitEthernet0/0/0]vrrp vrid 2 pri [r2-GigabitEthernet0/0/0]vrrp vrid 2 priority 110[r2]dis vrrp brief1 Backup GE0/0/0 Normal 192.168.1.2542 Master GE0/0/0 Normal 192.168.2.254[r2]int g0/0/1[r2-GigabitEthernet0/0/1]ip add 192.168.20.1 24[r2-GigabitEthernet0/0/1]q[r2]ip route-static 3.3.3.3 32 192.168.20.2

5.配置R3

r3]int g0/0/0[r3-GigabitEthernet0/0/0]ip add 192.168.10.2 24[r3-GigabitEthernet0/0/0]int g0/0/1[r3-GigabitEthernet0/0/1]ip add 192.168.20.2 24[r3-GigabitEthernet0/0/1]q[r3]ip route-static 192.168.1.0 24 192.168.10.1[r3]ip route-static 192.168.2.0 24 192.168.10.1[r3]ip route-static 192.168.2.0 24 192.168.20.1[r3]ip route-static 192.168.1.0 24 192.168.20.1[r3]int LoopBack 0[r3-LoopBack0]ip add 3.3.3.3 32

6.ping

7.断开重连

注：由于拓扑原因，断开后路径选择会出问题。因此需要在R1,R3设置2个默认路由，以达成断开重连。

五、STP与VRRP结合

实验要求：交换机配置mstp+vrrp，sw1作为vlan10的主，vlan20的备，sw2相反，使得pc1，2可以互通。

实验步骤

1.配置PC

2.设置SW3

   
    sys[Huawei]sys rsw1[rsw1]vlan b 10 20[rsw1]int G0/0/1[rsw1-GigabitEthernet0/0/1]p l t[rsw1-GigabitEthernet0/0/1]p t a v a[rsw1-GigabitEthernet0/0/1]int g0/0/2[rsw1-GigabitEthernet0/0/2]p l t[rsw1-GigabitEthernet0/0/2]p t a v a[rsw1-GigabitEthernet0/0/2]int g0/0/3[rsw1-GigabitEthernet0/0/3]p l a[rsw1-GigabitEthernet0/0/3]p d v 10[rsw1-GigabitEthernet0/0/3]int g0/0/4[rsw1-GigabitEthernet0/0/4]p l a[rsw1-GigabitEthernet0/0/4]p d v 10[rsw1-GigabitEthernet0/0/4]q[rsw1]stp re[rsw1-mst-region]region-name lrz[rsw1-mst-region]instance 1 vlan 10[rsw1-mst-region]instance 2 vlan 20[rsw1-mst-region]active region-configuration
   

3.配置SW1

   
    sys[Huawei]sys rsw2[rsw2]vlan b 10 20[rsw2]interface vlanif 10[rsw2-Vlanif10]ip add 192.168.1.252 24[rsw2-Vlanif10]vrrp vrid 1 virtual-ip 192.168.1.254[rsw2-Vlanif10]vrrp vrid 1 priority 110[rsw2-Vlanif10]int vlanif 20[rsw2-Vlanif20]ip add 192.168.2.253 24[rsw2-Vlanif20]vrrp vrid 2 virtual-ip 192.168.2.254[rsw2-Vlanif20]q[rsw2]int g0/0/1[rsw2-GigabitEthernet0/0/1]p l t[rsw2-GigabitEthernet0/0/1]p t a v a[rsw2]stp region-configuration[rsw2-mst-region]region-name lrz[rsw2-mst-region]instance 1 vlan 10[rsw2-mst-region]instance 2 vlan 20[rsw2-mst-region]active region-configuration [rsw2-mst-region]q[rsw2]stp instance 1 root primary [rsw2]stp instance 2 root secondary
   

4.配置SW2

   
    sys[Huawei]sys rsw3[rsw3]vlan batch 10 20[rsw3]int vlanif 10[rsw3-Vlanif10]ip add 192.168.1.253 24[rsw3-Vlanif10]vrrp vrid 1 virtual-ip 192.168.1.254[rsw3-Vlanif10]int vlanif 20[rsw3-Vlanif20]ip add 192.168.2.252 24[rsw3-Vlanif20]vrrp vrid 2 virtual-ip 192.168.2.254[rsw3-Vlanif20]vrrp vrid 2 priority 110[rsw3-Vlanif20]q[rsw3]int g0/0/1[rsw3-GigabitEthernet0/0/1]p l t[rsw3-GigabitEthernet0/0/1]p t a v a[rsw3]stp region-configuration [rsw3-mst-region]region-name lrz[rsw3-mst-region]instance 1 vlan 10[rsw3-mst-region]instance 2 vlan 20[rsw3-mst-region]active region-configuration [rsw3]stp instance 1 root secondary [rsw3]stp instance 2 root primary
   

5.尝试ping

转载地址：http://ryfd.baihongyu.com/