HSRP協議:當網絡中有多個路由器作爲網關時,通過HSRP協議把兩個網關地址虛擬成一個虛擬網關。
如圖,R1和R2都是PC1的出口網關,通過HSRP協議將網關R1和R2虛擬成一個網關192.168.1.1,在PC1上指定網關爲192.168.1.1。正常情況下,PC1的數據流量只從R1上通過,當R1出故障時,R2替代上來,讓流量從R2上通過,從而達到冗餘備份,實現網絡可靠性。
HSRP命令
standby
1、創建HSRP
R1(config-if)#standby group-numberip virtual-ip-address
2、配置HSRP優先級
R1(config-if)#standby group-numberpriority priority-value
3、HSRP佔先權
R1(config-if)#standby group-numberpreempt
4、配置Hello間隔和保持時間
R1(config-if)#standby group-numbertimes hellotimeholdtime
5、HSRP端口跟蹤配置
R1(config-if)#standby group-numbertrack type mod/num interface-priority
(注:這些配置都是在真實網關所在接口下配置的)
查看:
查看HSRP摘要信息
R1#show standby [type mod/num][group-number] brief
查看HSRP詳細信息
R1#show standby
監聽HSRP事件
R1#debug standby events
配置實例
如下圖,pc1和pc2分別屬於vlan10和vlan20,使vlan10的流量從M1通過,當M1出故障時PC1流量切換至M2;默認vlan20的的流量M2通過,dangM2出故障時,流量切換至M1。
1、配置R1、M1和M2之間的鏈路相互連通,並在R1配置換回口Loopback1,做測試用。
R1上的配置:
int f0/0
ip add 206.135.1.1 255.255.255.252
no sh
int f0/1
ip add 206.135.1.5 255.255.255.252
no sh
int loop 1
ip add 1.1.1.1 255.0.0.0
no sh
M1上的配置
intf0/0
ipadd206.135.1.2255.255.255.252
nosh
iproute1.0.0.0255.0.0.0206.135.1.1
iproute206.135.1.4255.255.255.252206.135.1.1
M2上配置
intf0/1
ipadd206.135.1.6255.255.255.252
nosh
iproute1.0.0.0255.0.0.0206.135.1.5
iproute206.135.1.0255.255.255.252206.135.1.5
2、在SW1將f1/1、f1/2劃分爲vlan10和vlan20,並配置中繼口
SW1上配置
no ip routing
vlan 10
vlan 20
int f1/1
sw acc vlan 10
int f1/2
sw acc vlan20
int f1/0
sw mo trunk
int f1/15
sw mo trunk
M1上配置
intf1/0
swmotrunk
M2上配置
int f1/15
sw mo trunk
3、在M1和M2上配置vlan10和vlan20做爲真實網關,並在PC1上配置ip測試網絡連通性
M1上配置
vlan 10
vlan 20
int vlan 10
ip add 192.168.10.10 255.255.255.0
int vlan20
ip add 192.168.20.20 255.255.255.0
M2上配置
vlan 10
vlan 20
int vlan 10
ip add 192.168.10.20255.255.255.0
int vlan 20
ip add 192.168.20.10 255.255.255.0
4、配置HSRP
M1上配置
int vlan 10
standby 1 ip 192.168.10.1
standby 1 priority120
standby 1 preempt
standby 1 track fa0/0
standby 1 track fa1/0
int vlan 20
standby 2 ip 192.168.20.1
standby2 priority115
standby 2 preempt
M2上配置
int vlan 10
standby 1 ip 192.168.10.1
standby1 priority 115
standby 1 preempt
int vlan 20
standby 2 ip 192.168.20.1
standby 2 priority 120
standby 2 preempt
standby 1 track fa0/1
standby 1 track fa1/15
5、在R1配置靜態路由及浮動路由
ip route 192.168.10.0 255.255.255.0 206.135.1.2
ip route 192.168.10.0 255.255.255.0 206.135.1.610
ip route 192.168.20.0 255.255.255.0 206.135.1.6
ip route 192.168.20.0 .
255.255.255.0 206.135.1.210
VRRP協議
和HSRP工作原理相似
1、創建VRRP
R1(config-if)#vrrp group-numberi p virtual-ip-address
2、配置HSRP優先級
R1(config-if)#vrrp group-number priority priority-value
3、HSRP佔先權
R1(config-if)#vrrp group-number preempt
4、ARRP端口跟蹤配置
R1(config)#track track-number interface interface-typeinterface-number line-protocol
R1(config-if)#vrrp track track-number
注:每跟蹤一個端口,都需要在全局模式下創建一個track-number