A-A+
【思科】VRRP热备路由协议实验
实验拓扑:
3台路由器R1、R3、R2和交换机R4连成一个环状,R4除了连接R1外,还连接了两台PC(C1和C2)。图略。
实验需求:
假设R3路由器为外网路由器,上面有一条虚拟网段3.3.3.0,模拟外网。
C1为vlan10 ,C2为vlan 20。
R1作为vlan10的主路由器,vlan20的备用路由器。R2作为vlan10的备用路由器,vlan10的主路由器。
测试热备路由的效果。
实验步骤:
配置C1,C2的IP地址,配置交换机R4
- R4#conf t
- Enter configuration commands, one per line. End with CNTL/Z.
- R4(config)#no ip routing
- R4(config)#vlan 10,20
- R4(config-vlan)#ex
- R4(config)#int f1/1
- R4(config-if)#switchport access vlan 10
- R4(config-if)#int f1/2
- R4(config-if)#switchport access vlan 20
- R4(config-if)#int f1/3
- R4(config-if)#int range f1/3 -4
- R4(config-if-range)#switchport mode trunk
- R4(config-if-range)#
- *Mar 1 00:04:35.099: %DTP-5-TRUNKPORTON: Port Fa1/3-4 has become dot1q trunk
2.配置R1
- R1#conf t
- Enter configuration commands, one per line. End with CNTL/Z.
- R1(config)#ip routing //开启路由
- R1(config)#int f1/4
- R1(config-if)#no sh
- R1(config-if)#switchport mode trunk
- R1(config-if)#
- *Mar 1 00:05:45.635: %DTP-5-TRUNKPORTON: Port Fa1/4 has become dot1q trunk
- R1(config)#track 1 int f1/3 line-protocol
- R1(config-track)#track 2 int f1/4 line-protocol //创建监听端口
- R1(config)#vlan 10
- R1(config-vlan)#vlan 20
- R1(config-vlan)#ex
(1)配置vlan 10
- R1(config)#int vlan 10
- R1(config-if)#ip add 192.168.10.10 255.255.255.0
- R1(config-if)#no sh
- R1(config-if)#ex
- *Mar 1 00:07:54.263: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan10, changed state to up
- R1(config-vlan)#ex
- R1(config)#int vlan 10
- R1(config-if)#vrrp 1 ?
- authentication Authentication
- description Group specific description
- ip Enable Virtual Router Redundancy Protocol (VRRP) for IP
- preempt Enable preemption of lower priority Master
- priority Priority of this VRRP group
- shutdown Disable VRRP Configuration
- timers Set the VRRP timers
- track Event Tracking
- R1(config-if)#vrrp 1 ip 192.168.10.1 //虚拟网关IP
- *Mar 1 00:09:20.763: %VRRP-6-STATECHANGE: Vl10 Grp 1 state Init -> Backup
- *Mar 1 00:09:24.375: %VRRP-6-STATECHANGE: Vl10 Grp 1 state Backup -> Master
- R1(config-if)#vrrp 1 preempt //设置抢占
- R1(config-if)#vrrp 1 priority 100 //设置优先级,主要高于备用优先级
- R1(config-if)#vrrp 1 track 1 //设置监听端口
- R1(config-if)#vrrp 1 track 2
(2)配置vlan 20
- R1(config)#int vlan 20
- *Mar 1 00:10:39.051: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan20, changed state to up
- R1(config-if)#ip add 192.168.20.10 255.255.255.0
- R1(config-if)#no sh
- R1(config-if)#vrrp 2 ip 192.168.20.1
- *Mar 1 00:11:02.399: %VRRP-6-STATECHANGE: Vl20 Grp 2 state Init -> Backup
- R1(config-if)#vrrp 2 preempt
- *Mar 1 00:11:06.007: %VRRP-6-STATECHANGE: Vl20 Grp 2 state Backup -> Master
- R1(config-if)#vrrp 2 priority 95 //要低于主路由器的优先级
- *Mar 1 00:12:58.911: %VRRP-6-STATECHANGE: Vl10 Grp 1 state Master -> Backup
- *Mar 1 00:13:09.515: %VRRP-6-STATECHANGE: Vl10 Grp 1 state Backup -> Master
- *Mar 1 00:13:47.295: %VRRP-6-STATECHANGE: Vl20 Grp 2 state Master -> Backup
3.配置R2
- R2#conf t www.xiaoxiongboke.com/cisco
- Enter configuration commands, one per line. End with CNTL/Z.
- R2(config)#ip routing
- R2(config)#int f1/4
- R2(config-if)#no sh
- R2(config-if)#switchport mode trunk
- R2(config-if)#
- *Mar 1 00:10:09.595: %DTP-5-TRUNKPORTON: Port Fa1/4 has become dot1q trunk
- R2(config-if)#ex
- R1(config)#track 1 int f1/3 line-protocol
- R1(config-track)#track 2 int f1/4 line-protocol
- R2(config)#vlan 10
- R2(config-vlan)#vlan 20
(1)配置vlan 10
- R2(config-vlan)#int vlan 10
- *Mar 1 00:10:20.911: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan10, changed state to up
- R2(config-if)#ip add 192.168.10.20 255.255.255.0
- R2(config-if)#no sh
- R2(config-if)#vrrp 1 ip 192.168.10.1
- *Mar 1 00:12:54.007: %VRRP-6-STATECHANGE: Vl10 Grp 1 state Init -> Backup
- R2(config-if)#vrrp 1 preempt
- *Mar 1 00:12:57.619: %VRRP-6-STATECHANGE: Vl10 Grp 1 state Backup -> Master
- R2(config-if)#vrrp 1 priority 95
- R2(config-if)#ex
- R2(config)#
(2)配置vlan 20
- R2(config)#int vlan 20
- *Mar 1 00:13:14.543: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan20, changed state to up
- R2(config-if)#ip add 192.168.20.20 255.255.255.0
- R2(config-if)#no sh
- R2(config-if)#vrrp 2 ip 192.168.20.1
- *Mar 1 00:13:42.375: %VRRP-6-STATECHANGE: Vl20 Grp 2 state Init -> Backup
- R2(config-if)#vrrp 2 preempt
- *Mar 1 00:13:45.983: %VRRP-6-STATECHANGE: Vl20 Grp 2 state Backup -> Master
- R2(config-if)#vrrp 2 priority 100
- R2(config-if)#vrrp 2 track 1
- R2(config-if)#vrrp 2 track 2
- R2(config-if)#ex
4.分别在R1,R2上检查一下vrrp的配置是否正确
- R1#show vrrp b
- Interface Grp Pri Time Own Pre State Master addr Group addr
- Vl10 1 100 3609 Y Master 192.168.10.10 192.168.10.1
- Vl20 2 95 3628 Y Backup 192.168.20.20 192.168.20.1
- R2#show vrrp b
- Interface Grp Pri Time Own Pre State Master addr Group addr
- Vl10 1 95 3628 Y Backup 192.168.10.10 192.168.10.1
- Vl20 2 100 3609 Y Master 192.168.20.20 192.168.20.1
无误,分别配置上行口IP
- R1(config)#int f1/3
- R1(config-if)#no switchport 将二层口变为三层口
- R1(config-if)#ip add 13.0.0.1 255.255.255.0
- R1(config-if)#no sh
- R1(config-if)#
- *Mar 1 00:14:36.199: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet1/3, changed state to up
- R1(config-if)#ex
- R2(config)#int f1/3
- R2(config-if)#no switchport
- *Mar 1 00:14:50.827: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet1/3, changed state to up
- R2(config-if)#ip add 23.0.0.2 255.255.255.0
- R2(config-if)#no sh
- R2(config-if)#ex
配置外网路由器R3
- R3#conf t http://www.xiaoxiongboke.com/
- Enter configuration commands, one per line. End with CNTL/Z.
- R3(config)#int f0/0
- R3(config-if)#ip add 13.0.0.3 255.255.255.0
- R3(config-if)#no sh
- R3(config-if)#int f0/1
- *Mar 1 00:15:18.651: %LINK-3-UPDOWN: Interface FastEthernet0/0, changed state to up
- *Mar 1 00:15:19.651: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to up
- R3(config-if)#ip add 23.0.0.3 255.255.255.0
- R3(config-if)#no sh
- *Mar 1 00:15:32.571: %LINK-3-UPDOWN: Interface FastEthernet0/1, changed state to up
- *Mar 1 00:15:33.571: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to up
- R3(config)#int l0 //建立虚拟接口
- *Mar 1 00:15:36.259: %LINEPROTO-5-UPDOWN: Line protocol on Interface Loopback0, changed state to up.
- R3(config-if)#ip add 3.3.3.3 255.255.255.0
- R3(config-if)#no sh
- R3(config-if)#ex
5.使用动态协议RIP互相告知网段
- R3(config)#router rip //启动RIP协议
- R3(config-router)#network 3.3.3.0 //告知与自己直连网段,以便相邻路由器学习
- R3(config-router)#network 13.0.0.0
- R3(config-router)#network 23.0.0.0
- R1(config)#router rip
- R1(config-router)#network 13.0.0.0
- R1(config-router)#network 192.168.10.0
- R1(config-router)#network 192.168.20.0
- R2(config)#router rip
- R2(config-router)#network 23.0.0.0
- R2(config-router)#network 192.168.10.0
- R2(config-router)#network 192.168.20.0
6.可以连通测试了
可以发现,C1走的路线是R1,C2走的路线是R2。这是刚才配置的vrrp优先级决定的。
将R1的上行口f1/3 和 R3的f0/0口 shutdown,观察tracert的变化。
此时R1已经的不同,电脑C1的路线已经由R1切换到了R2。
再将R1的f1/3口和R3的f0/0口 no shutdown,观察变化。
可以发现R1又将C1的路线抢占过来了。这样,热备路由的目的已经实现。
C2同理。