虚拟路由冗余协议 (Virtual Router Redundancy Protocol, 简称 VRRP), 是一个 IP 协议族, 我们知道 IP 协议族里面有 ICMP,OSPF,VRRP 也是 IP 协议族的一员, 协议号为 112. 在 VRRP 里面, 设备有两种角色 (Master,Backup), 其中 Master 负责跑业务流量, 而 Backup 负责备份, 当 Master 挂掉之后, Backup 自动抢占为 Master, 然后所有的数据从 Master 上走 .VRRP 主要是用来做出口链路的冗余备份的, 可以有多个网关设备加入一个备份组, 但是只能有一个 Master 设备, 当 Master 设备挂掉之后, 其他的 Backup 设备自动抢占为 Master 设备, 以很好的避免静态指定网关的缺陷, 保障网络的可靠性.
在 VRRP 协议中, 有两组重要的概念: VRRP 路由器和虚拟路由器, 主控路由器和备份路由器? VRRP 路由器是指运行 VRRP 的路由器, 是物理实体, 虚拟路由器是指 VRRP 协议创建的, 是逻辑概念? 一组 VRRP 路由器协同工作, 共同构成一台虚拟路由器? 该虚拟路由器对外表现为一个具有唯一固定 IP 地址和 Mac 地址的逻辑路由器? 处于同一个 VRRP 组中的路由器具有两种互斥的角色: 主控路由器和备份路由器, 一个 VRRP 组中有且只有一台处于主控角色的路由器, 可以有一个或者多个处于备份角色的路由器? VRRP 协议使用选择策略从路由器组中选出一台作为主控, 负责 ARP 相应和转发 IP 数据包, 组中的其它路由器作为备份的角色处于待命状态? 当由于某种原因主控路由器发生故障时, 备份路由器能在几秒钟的时延后升级为主路由器? 由于此切换非常迅速而且不用改变 IP 地址和 Mac 地址, 故对终端使用者系统是透明的?
配置过程如下:
- S1:
- <H3C>sys
- [H3C]sys S1
- [S1]vlan 10
- [S1-vlan10]port g1/0/1
- [S1-vlan10]vlan 20
- [S1-vlan20]port g1/0/2
- [S1-vlan20]vlan 30
- [S1-vlan30]port g1/0/3
- [S1-vlan30]vlan 40
- [S1-vlan40]port g1/0/4
- [S1-vlan40]int range g1/0/5 to g1/0/6
- [S1-if-range]port link-type trunk
- [S1-if-range]port trunk permit vlan all
- [S1-if-range]qu
- S2:
- [S2]vlan 10
- [S2-vlan10]vlan 20
- [S2-vlan20]vlan 30
- [S2-vlan30]vlan 40
- [S2-vlan40]int vlan 10
- [S2-Vlan-interface10]ip ad 192.168.10.1 24
- [S2-Vlan-interface10]vrrp vrid 10 virtual-ip 192.169.10.254
- [S2-Vlan-interface10]vrrp vrid 10 priority 110
- [S2-Vlan-interface10]vrrp vrid 10 preempt-mode delay 5
- [S2-Vlan-interface10]int vlan 20
- [S2-Vlan-interface20]ip ad 192.168.20.1 24
- This subnet overlaps with another interface!
- [S2-Vlan-interface20]vrrp vrid 10 virtual-ip 192.169.20.254
- [S2-Vlan-interface20]vrrp vrid 10 priority 110
- [S2-Vlan-interface20]vrrp vrid 10 preempt-mode delay 5
- [S2-Vlan-interface20]int vlan 30
- [S2-Vlan-interface30]ip ad 192.168.30.1 24
- [S2-Vlan-interface30]vrrp vrid 10 virtual-ip 192.169.30.254
- [S2-Vlan-interface30]vrrp vrid 10 priority 100
- [S2-Vlan-interface30]vrrp vrid 10 preempt-mode delay 5
- [S2-Vlan-interface30]int vlan 40
- [S2-Vlan-interface40]ip ad 192.168.40.1 24
- [S2-Vlan-interface40]vrrp vrid 10 virtual-ip 192.169.40.254
- [S2-Vlan-interface40]vrrp vrid 10 priority 100
- [S2-Vlan-interface40]vrrp vrid 10 preempt-mode delay 5
- [S2-Vlan-interface40]qu
验证 vrrp 冗余网关是否配置成功:
- [S3]vlan 10
- [S3-vlan10]vlan 20
- [S3-vlan20]vlan 30
- [S3-vlan30]vlan 40
- [S3-vlan40]int vlan 10
- [S3-Vlan-interface10]ip ad 192.168.10.2 24
- [S3-Vlan-interface10]vrrp vrid 10 virtual-ip 192.169.10.254
- [S3-Vlan-interface10]vrrp vrid 10 priority 100
- [S3-Vlan-interface10]vrrp vrid 10 preempt-mode delay 5
- [S3-Vlan-interface10]int vlan 20
- [S3-Vlan-interface20]ip ad 192.168.20.2 24
- [S3-Vlan-interface20]vrrp vrid 10 virtual-ip 192.169.20.254
- [S3-Vlan-interface20]vrrp vrid 10 priority 100
- [S3-Vlan-interface20]vrrp vrid 10 preempt-mode delay 5
- [S3-Vlan-interface20]int vlan 30
- [S3-Vlan-interface30]ip ad 192.168.30.2 24
- [S3-Vlan-interface30]vrrp vrid 10 virtual-ip 192.169.30.254
- [S3-Vlan-interface30]vrrp vrid 10 priority 110
- [S3-Vlan-interface30]vrrp vrid 10 preempt-mode delay 5
- [S3-Vlan-interface30]int vlan 40
- [S3-Vlan-interface40]ip ad 192.168.40.2 24
- [S3-Vlan-interface40]vrrp vrid 10 virtual-ip 192.169.40.254
- [S3-Vlan-interface40]vrrp vrid 10 priority 110
- [S3-Vlan-interface40]vrrp vrid 10 preempt-mode delay 5
来源: http://www.bubuko.com/infodetail-3091780.html