CISCO VRRP配置

CISCO VRRP配置

VRRP

VRRP的三种状态

VRRP配置

配置vlan10的虚拟网关192.168.10.254，选举sw3为master switch，sw4为backup switch ，并且当sw3的上行链路或者下行链路故障的时候。sw4被选举为master switch 。

预配置

sw1: sw1(config)#ip routing sw1(config)#int e0/0 sw1(config-if)#no switchport sw1(config-if)#ip addr 12.1.1.1 255.255.255.0 sw1(config-if)#no shut sw3: sw3(config)#ip routing sw3(config)#int e0/1 sw3(config-if)#no switchport sw3(config-if)#ip addr 12.1.1.2 255.255.255.0 sw3(config-if)#no shut sw3(config-if)#int e0/0 sw3(config-if)#sw tr en do sw3(config-if)#sw mo tr sw3(config-if)#vlan 10 sw3(config-vlan)#int vlan 10 sw3(config-if)#ip addr 192.168.10.252 255.255.255.0 sw3(config-if)#no shut sw3(config-if)#ex sw4: sw4(config)#ip routing sw4(config)#int e0/1 sw4(config-if)#no sw sw4(config-if)#ip addr 13.1.1.2 255.255.255.0 sw4(config-if)#no shut sw4(config-if)#int e0/0 sw4(config-if)#sw tr en do sw4(config-if)#sw mo tr sw4(config-if)#int vlan 10 sw4(config-if)#ip addr 192.168.10.253 255.255.255.0 sw4(config-if)#no shut sw4(config-if)#ex sw5: sw5(config)#vlan 10 sw5(config-vlan)#int vlan 10 sw5(config-if)#ip addr 192.168.10.10 255.255.255.0 sw5(config-if)#no shut sw5(config-if)#ex sw5(config)#int range e0/1-2 sw5(config-if-range)#sw tr en do sw5(config-if-range)#sw mo tr sw5(config-if-range)#int e0/0 sw5(config-if)#sw mo acc sw5(config-if)#sw acc vlan 10 sw5(config-if)#end 

VRRP配置

sw3(VRRP): sw3(confg)#track 1 interface Ethernet0/0 line-protocol # vrrp的track追踪配置是在全局配置模式下配置，再到接口下应用 sw3(confg)#track 2 interface Ethernet0/1 line-protocol sw3(config)#int vlan 10 sw3(config-if)#vrrp 1 ip 192.168.10.254 *Feb 13 13:56:58.014: %VRRP-6-STATECHANGE: Vl10 Grp 1 state Init -> Backup *Feb 13 13:56:58.019: %VRRP-6-STATECHANGE: Vl10 Grp 1 state Init -> Backup sw3(config-if)#vrrp 1 *Feb 13 13:57:01.637: %VRRP-6-STATECHANGE: Vl10 Grp 1 state Backup -> Master sw3(config-if)#vrrp 1 priority 200 sw3(config-if)#vrrp 1 preempt sw3(config-if)#vrrp 1 track 1 decrement 60 #当e0/0口出现故障的时候，sw3的优先级降低60 sw3(config-if)#vrrp 1 track 2 decrement 60 #当e0/1口出现故障的时候，sw3的优先级降低60 sw4(VRRP) sw4(confg)#track 1 interface Ethernet0/0 line-protocol sw4(confg)#track 2 interface Ethernet0/1 line-protocol sw4(config)#int vlan 10 sw4(config-if)#vrrp 1 ip 192.168.10.254 *Feb 13 13:57:42.960: %VRRP-6-STATECHANGE: Vl10 Grp 1 state Init -> Backup *Feb 13 13:57:42.964: %VRRP-6-STATECHANGE: Vl10 Grp 1 state Init -> Backup sw4(config-if)#vrrp 1 priority 150 sw4(config-if)#vrrp 1 preempt sw4(config-if)#vrrp 1 track 1 decrement 60 #当e0/0口出现故障的时候，sw4的优先级降低60 sw4(config-if)#vrrp 1 track 2 decrement 60 #当e0/1口出现故障的时候，sw4的优先级降低60 

验证

sw3#show vrrp brief Interface Grp Pri Time Own Pre State Master addr Group addr Vl10 1 200 3218 Y Master 192.168.10.252 192.168.10.254 sw4#show vrrp brief Interface Grp Pri Time Own Pre State Master addr Group addr Vl10 1 150 3414 Y Backup 192.168.10.252 192.168.10.254 

当上行链路出线故障的时候：

关闭e0/1口，sw3优先级降底60，将被选举为backup router

sw3(config)#int e0/1 sw3(config-if)#shut sw3(config-if)# *Feb 15 10:58:04.447: %TRACK-6-STATE: 2 interface Et0/1 line-protocol Up -> Down sw3(config-if)# *Feb 15 10:58:06.446: %LINK-5-CHANGED: Interface Ethernet0/1, changed state to administratively down *Feb 15 10:58:07.456: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet0/1, changed state to down sw3(config-if)# *Feb 15 10:58:07.495: %VRRP-6-STATECHANGE: Vl10 Grp 1 state Master -> Backup sw3(config-if)#do show vrrp br Interface Grp Pri Time Own Pre State Master addr Group addr Vl10 1 140 3218 Y Backup 192.168.10.253 192.168.10.254 

sw4将被选举为master router

sw4# *Feb 15 10:58:07.492: %VRRP-6-STATECHANGE: Vl10 Grp 1 state Backup -> Master sw4#show vrrp br Interface Grp Pri Time Own Pre State Master addr Group addr Vl10 1 150 3414 Y Master 192.168.10.253 192.168.10.254 

ICMP测试丢了两个包

sw5#ping 192.168.10.254 repeat 10000 Type escape sequence to abort. Sending 10000, 100-byte ICMP Echos to 192.168.10.254, timeout is 2 seconds: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!..!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! 

当下行链路出线故障的时候：

关闭e0/1口，sw3优先级降底60，但是由于无法与backup router进行通信，因此sw3还是认为自己是主路由器

sw3(config-if)#int e0/0 sw3(config-if)#shut sw3(config-if)# *Feb 15 11:03:35.989: %TRACK-6-STATE: 1 interface Et0/0 line-protocol Up -> Down sw3(config-if)# *Feb 15 11:03:37.991: %LINK-5-CHANGED: Interface Ethernet0/0, changed state to administratively down *Feb 15 11:03:38.999: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet0/0, changed state to down sw3(config-if)#do show vrrp br Interface Grp Pri Time Own Pre State Master addr Group addr Vl10 1 140 3218 Y Master 192.168.10.252 192.168.10.254 

备份路由器在连续三个通告间隔内收不到VRRP或收到优先级为0的通告后启动新的一轮VRRP选举，sw3选举为新的master router

sw4# *Feb 15 11:03:38.782: %VRRP-6-STATECHANGE: Vl10 Grp 1 state Backup -> Master sw4#show vrrp b Interface Grp Pri Time Own Pre State Master addr Group addr Vl10 1 150 3414 Y Master 192.168.10.253 192.168.10.254 

ICMP测试，ping不通sw3的物理地址，ping通sw4的物理地址，ping通虚拟网关地址

sw5#ping 192.168.10.252 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.10.252, timeout is 2 seconds: ..... Success rate is 0 percent (0/5) sw5#ping 192.168.10.253 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.10.253, timeout is 2 seconds: .!!!! Success rate is 80 percent (4/5), round-trip min/avg/max = 2/2/3 ms sw5#ping 192.168.10.254 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.10.254, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms sw5#