局域網中的用戶終端通常采用配置一個默認網關的形式訪問外部網絡,如果此時默認網關設備發生故障,將中斷所有用戶終端的網絡訪問,這很可能會給用戶帶來不可預計的損失,那么可以通過部署多個網關的方式來解決單點故障問題。於是VRRP應運而生。
VRRP全稱是虛擬路由器冗余協議(Virtual Ronter Redundancy Protocol),能夠在不改變組網的情況下,將多台路由器虛擬成一個虛擬路由器,通過配置虛擬路由器的IP地址為默認網關,實現網關的備份。從而保證當主機的下一跳設備出現故障時,可以及時將業務切換到其他設備,從而保持通訊的連續性和可靠性。
協議版本:VRRPv2(常用)和VRRPv3
VRRPv2僅適用也IPV4網絡,VRRPv3適用於IPV4和IPV3兩種網絡
VRRP只有一種報文Advertisement報文;其目的地址是224.0.0.18,目的MAC地址是01-00-5e-00-00-12,協議號是12.
如上圖所示
1、對SW1進行配置
[SW1]v b 10 20
[SW1]int e0/0/1
[SW1-Ethernet0/0/1]p l a
[SW1-Ethernet0/0/1]p d v 10
[SW1-Ethernet0/0/1]un sh
[SW1-Ethernet0/0/1]int g0/0/2
[SW1-GigabitEthernet0/0/2]p l t
[SW1-GigabitEthernet0/0/2]p t a v 10 20
[SW1-GigabitEthernet0/0/2]un sh
[SW1-GigabitEthernet0/0/2]int e0/0/2
[SW1-Ethernet0/0/2]p l a
[SW1-Ethernet0/0/2]p d v 20
[SW1-Ethernet0/0/2]un sh
[SW1-Ethernet0/0/2]int g0/0/1
[SW1-GigabitEthernet0/0/1]p l t
[SW1-GigabitEthernet0/0/1]p t a v 10 20
[SW1-GigabitEthernet0/0/1]un sh
2、配置SW2
[SW2]v b 10 20 100
[SW2]int g0/0/1
[SW2-GigabitEthernet0/0/1]p l t
[SW2-GigabitEthernet0/0/1]p t a v 10 20
[SW2-GigabitEthernet0/0/1]un sh
[SW2-GigabitEthernet0/0/1]int g0/0/2
[SW2-GigabitEthernet0/0/2]p l a
[SW2-GigabitEthernet0/0/2] p d v 100
[SW2-GigabitEthernet0/0/2]un sh
[SW2-GigabitEthernet0/0/2]int vlanif 10
[SW2-Vlanif10]ip add 192.168.10.10 24
[SW2-Vlanif10]un sh
[SW2-Vlanif10]int vlanif 20
[SW2-Vlanif20]ip address 192.168.20.10 24
[SW2-Vlanif20]int vlanif 100
[SW2-Vlanif100]ip add 11.0.0.2 30
[SW2-Vlanif100]un sh
[SW2]ip route-static 0.0.0.0 0.0.0.0 11.0.0.1
[SW2]int vlanif 10
[SW2-Vlanif10]vrrp vrid 1 virtual-ip 192.168.10.1###配置虛擬IP地址
[SW2-Vlanif10]vrrp vrid 1 priority 120###配置優先級
[SW2-Vlanif10]vrrp vrid 1 track interface g0/0/1###配置監聽端口,當這個地方down時,優先級減10
[SW2-Vlanif10]vrrp vrid 1 track interface g0/0/2
[SW2-Vlanif10]int vlanif 20
[SW2-Vlanif20]vrrp vrid 2 virtual-ip 192.168.20.1
[SW2-Vlanif20]vrrp vrid 2 priority 115
3、配置SW3
[SW3]v b 10 20 100
[SW3]int g0/0/1
[SW3-GigabitEthernet0/0/1]p l t
[SW3-GigabitEthernet0/0/1]p t a v 10 20
[SW3-GigabitEthernet0/0/1]int g0/0/2
[SW3-GigabitEthernet0/0/2]p l a
[SW3-GigabitEthernet0/0/2]p d v 100
[SW3-GigabitEthernet0/0/2]un sh
[SW3-GigabitEthernet0/0/2]int vlanif 10
[SW3-Vlanif10]ip add 192.168.10.20 24
[SW3-Vlanif10]int vlanif 20
[SW3-Vlanif20]ip add 192.168.20.20 24
[SW3-Vlanif20]int vlanif 100
[SW3-Vlanif100]ip add 12.0.0.2 30
[SW3-Vlanif100]un sh
[SW3]int vlanif 10
[SW3-Vlanif10]vrrp vrid 1 virtual-ip 192.168.10.1
[SW3-Vlanif10]vrrp vrid 1 priority 115
[SW3-Vlanif10]int vlanif 20
[SW3-Vlanif20]vrrp vrid 2 virtual-ip 192.168.20.1
[SW3-Vlanif20]vrrp vrid 2 priority 120
[SW3-Vlanif20]vrrp vrid 2 track interface g0/0/1
[SW3-Vlanif20]vrrp vrid 2 track interface g0/0/2
4、配置R1
[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]ip add 11.0.0.1 30
[R1-GigabitEthernet0/0/0]int g0/0/1
[R1-GigabitEthernet0/0/1]ip add 12.0.0.1 30
[R1-GigabitEthernet0/0/1]int loo 0
[R1-LoopBack0]ip add 1.1.1.1 24
[R1]ip route-static 192.168.10.0 24 11.0.0.2
[R1]ip route-static 192.168.10.0 24 12.0.0.2 preference 70
[R1]ip route-static 192.168.20.0 24 12.0.0.2
[R1]ip route-static 192.168.20.0 24 11.0.0.2 preference 70
5、這樣完整的實驗配置就完成了,當然最后我們少不了檢驗了
在PC1 ping 1.1.1.1
我們斷開個g0/0/0的接口,看數據是否可以流通
繼續ping 1.1.1.1