Huawei--VRRP Backup Routing Application

Introduced:

Virtual Routing Redundancy Protocol (Virtual Router Redundancy Protocol, abbreviated VRRP) is by The IETF proposes a routing protocol to address a single point of failure in the configuration of static gateways in the LAN, and1998 has introduced the formal RFC2338 protocol standard in the past year . VRRP is widely used in edge networks, and it is designed to support the failure of IP data traffic in specific scenarios to cause confusion, allow the host to use a single router, and maintain connectivity between routers in the event that the actual first-hop router fails to use it in a timely manner.

Experimental topology:

650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M00/70/6B/wKiom1W3UNbSe71GAAFbSd3TtmM987.jpg "title=" Image001.png "alt=" Wkiom1w3unbse71gaafbsd3ttmm987.jpg "/>

The equipment used:

R1 for h3c f100c r2:h3c-ar18-23-1 SW1: huaweis3526e SW2:HUAWEI S3526

Sw1[quidway]sysname Sw1[sw1]vlan 10[sw1-vlan10]port Ethernet 0/16[sw1-vlan10]vlan 20[sw1-vlan20]port eth0/15[sw1]int E0/7[sw1-ethernet0/2]port link-type trunk[sw1-ethernet0/10]port Trunk Permit Vlanall[sw1-ethernet0/2]int e0/8[ Sw1-ethernet0/8]port link-type trunk[sw1-ethernet0/10]port Trunk Permit Vlanall[sw1-ethernet0/8]int e0/10[ Sw1-ethernet0/10]port link-type trunk[sw1-ethernet0/10]port Trunk Permit vlanall[sw1]link-aggregation Ethernet 0/7 Toethernet 0/8 both//do link aggregation 0/7 to 0/8, port as continuous as possible

The speed of aggregating ports should besame, and not being auto!****** because the devices on both ends are not the same, so caused, set the rate

[sw1]int e0/7                        //Adjustment Rate  [sw1-ethernet0/2]speed 100 [ sw1-ethernet0/2]int e0/8 [sw1-ethernet0/8]speed 100[sw1-ethernet0/7]link-aggregation  ethernet0/7 to ethernet 0/8 both theduplex of aggregating ports  should be full mode!  **** must be full-duplex [sw1]int e0/7                    //setting full duplex [SW1-ETHERNET0/7] duplex full[sw1-ethernet0/7]int e0/8[sw1-ethernet0/8]duplex full[sw1]link-aggregation  ethernet 0/7 toethernet 0/8 both     //  Link Aggregation  [sw1]int  Vlan-interface 1[sw1-Vlan-interface1]ip add 192.168.1.1255.255.255.0[sw1]local-user  Admin[sw1-luser-admin]password cipher admin[sw1-luser-admin]service-type telnet level3[sw1]user-interface vty 0 4[ Sw1-ui-vty0-4]authentication-mode scheme

SW2[SW2]VLAN 10[SW2-VLAN10]PORT E0/16[SW2-VLAN10]VLAN 20[SW2-VLAN20]PORT E0/15[SW2-VLAN20] int e0/1[sw2-ethernet0/7]port link-type trunk[sw2-ethernet0/7]port trunk permit  vlan all[sw2-ethernet0/7]int e0/2               [sw2-ethernet0/8]port link-type trunk     [sw2-ethernet0/ 8]port trunk permit vlan all[sw2-ethernet0/8]int e0/10       [sw2-ethernet0/10]port link-type trunk     [sw2-ethernet0/10]port  trunk permit vlanall[sw2]int eth0/1       [ SW2-ETHERNET0/1]DUPLEX FULL[SW2-ETHERNET0/1]INT ETH0/2 [SW2-ETHERNET0/2]DUPLEX FULL[SW2] Int ethernet 0/1     [sw2-ethernet0/1]speed 100[sw2-ethernet0/1]int  ethernet 0/2[sw2-etheRnet0/2]speed 100   [sw2]link-aggregation ethernet 0/1to ethernet 0/2  both      //Link aggregation, port start must be 1/9/17[sw2]int vlan-interface 1[ Sw2-vlan-interface1]ip add 192.168.1.2255.255.255.0[sw2]local-user admin[sw2-luser-admin] password cipher admin[sw2-luser-admin]service-type telnet level3[sw2]user-interface  Vty 0 4[sw2-ui-vty0-4]authentication-mode scheme

R1[r1]undo insulate//First de-Quarantine [r1]int eth0/0.10[r1-ethernet0/0.10]vlan-type dot1q vid 10//hit tag first, vid vlan I D No. [R1-ethernet0/0.10]ip Add 192.168.10.1 24[r1-ethernet0/0.10]int eth0/0.20[r1-ethernet0/0.20]vlan-type dot1q vid 20[ R1-ethernet0/0.20]ip Add 192.168.20.1 24[r1]firewall Zone Trust[r1-zone-trust]add interface Ethernet 0/0[r1-zone-trust ]add Interface Ethernet0/0.10[r1-zone-trust]add Interface ethernet0/0.20

R2[r2]int Ethernet 1/0.10[r2-ethernet1/0.10]vlan-type dot1q vid 10[r2-ethernet1/0.10]ip add 192.168.10.2 24[r2]int Ethernet 1/0.20[r2-ethernet1/0.20]vlan-type dot1q vid 20[r2-ethernet1/0.20]ip add 192.168.20.2 24

Ping R1 IP , do VRRP backup Group

[R1]VRRP ping-enable[r1]int ETHERNET0/0.10[R1-ETHERNET0/0.10]VRRP vrid virtual-ip192.168.10.254//Configure virtual route [ R1-ETHERNET0/0.10]VRRP Vrid priority120//Priority [R1]int ETHERNET0/0.20[R1-ETHERNET0/0.20]VRRP Vrid-virtual-ip192.16 8.20.254

650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M01/70/68/wKioL1W3UtPw5tRFAAG_G5LABKI524.jpg "title=" Image002.png "alt=" Wkiol1w3utpw5trfaag_g5labki524.jpg "/>

R2

[R2]VRRP ping-enable[r2]int Ethernet 1/0.10[R2-ETHERNET1/0.10]VRRP vrid virtual-ip192.168.10.254r2-ethernet1/0.10 ]int ETH1/0.20[R2-ETHERNET1/0.20]VRRP vrid VIRTUAL-IP192.168.20.254[R2-ETHERNET1/0.20]VRRP vrid priority120

Test.

The host gateway is to point to the virtual gateway. 192.168.10.254/192.168.20.254

650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M02/70/68/wKioL1W3UuCTstuXAADLo8EPQ0c893.jpg "title=" Image003.png "alt=" Wkiol1w3uuctstuxaadlo8epq0c893.jpg "/>

650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M02/70/6B/wKiom1W3UP6Rlvn8AAA3-RqywyM430.jpg "title=" Image004.png "alt=" Wkiom1w3up6rlvn8aaa3-rqywym430.jpg "/>

if the administrator in the Vlan20, want to remote to the switch, to the router / firewall Physical address to do vlan1

the address of the physical interface is the address of Vlan1.

[R1]int eth0/0[r1-ethernet0/0]ip Add 192.168.1.254 24//Here only one route is configured and the other is configured

At this point, on switch 1

[Sw1]ip route-static 0.0.0.0 0192.168.1.254 [sw2]ip route-static 0.0.0.0 0192.168.1.253

The remote switch is now available in the VLAN.

650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M01/70/68/wKioL1W3UvWATtlAAABL5W8llM4986.jpg "title=" Image005.png "alt=" Wkiol1w3uvwattlaaabl5w8llm4986.jpg "/>

650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M00/70/6B/wKiom1W3URGg1ObUAABIPtBp12M643.jpg "title=" Image006.png "alt=" Wkiom1w3urgg1obuaabiptbp12m643.jpg "/>

650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M01/70/68/wKioL1W3UwbQOx9jAAGTAk_h7MI242.jpg "title=" Image007.png "alt=" Wkiol1w3uwbqox9jaagtak_h7mi242.jpg "/>

This article is from the "Supervisory Authority" blog, please be sure to keep this source http://shuoshuo234.blog.51cto.com/10531943/1679323

Huawei-VRRP Backup Routing application