来时的路，没有归途，相互沉默挥一挥手，那就了解VRRP协议原理与配置

一.VRRP协议介绍

• 局域网中的用户终端通常采用配置一个默认网关的形式访问外部网络，如果此时默认网关设备发生故障，将中断所有用户终端的网络访问，这很能会给用户带来不可预计的损失，所以可以通过部署多个网关的方式来解决单点故障问题，那么如何让多给网关能够协同工作但又不会相互冲突就成了迫切需要解决的问题。
• 于是VRRP应运而生，它既可以实现网关的备份，又能解决多个网关之间互相冲突的问题。

二.VRRP基本概述

• VRRP能够在不改变组网的情况下，将多台路由虚拟路由器，通过配置虚拟路由器的IP地址为默认网关，实现网关备份
• 协议版本：VRRv2（常用）和VRRPv3
• VRRPv2仅适用于IP v4网络，VRRPv3适用于IP v4和IP v6两种网络
• VRRP协议报文
• 只有一种报文：Advertisemen报文，其目的IP地址是224.0.0.18，目的MAC地址是01-00-5e-00-00-12，协议号是112

注：224.0.0.18是主播地址

三.VRRP

3.1单网关的缺陷

 

 当网关路由器RouterA出现故障时，本网段内以该设备为网关的主机都不能与internet进行通信

3.2多网关存在的问题

 

 

• 通过部署多网关的方式实现网关的备份。
• 但多网关可能会出现一些问题：网关间IP地址冲突，主机会频繁切换网络出口

3.3VRRP基本结构

 

 

源IP：1.3 源mac：自己

目标：公网 目标：网关的MAC

3.4VRRP主备备份工作过程

 

 

1.选择出master

2.状态维持master设备周期性地发送VRRP通告报文给组内其他设备，以通知自己处于正常的工作状态。

3.5VRRP主备路由器切换过程

 

 1.backup在master-down-interval时间内未收到master发送的状态通告报文，则立即成为master

2.如果原master故障恢复，则主备回切的过程

 

 

发现收到router b的vrrp报文中的优先级比自己低，router a立即抢占成为master

3.6VRRP联动功能

 

 

 解决方法：利用VRRP的联动功能监视上行接口或链路故障，主动进行主备切换。

3.7VRRP负载分担工作过程

 

 

 

传统的主备方式流量都经由单个master转发，master负担过重

backup：通过配置不同的备份组，使router b成为新备份组的master，这样就可以分担网络中的流量了

四.VRRP实验

 

 

 

配置sw3

<Huawei>sys
[Huawei]sys    
[Huawei]sysname sw3
[sw3]undo info    
[sw3]undo info-center en  

[sw3]v b 10 20
[sw3]int e0/0/1
[sw3-Ethernet0/0/1]p l a
[sw3-Ethernet0/0/1]p d v 10
[sw3-Ethernet0/0/1]un sh
Info: Interface Ethernet0/0/1 is not shutdown.
[sw3-Ethernet0/0/1]int e0/0/2
[sw3-Ethernet0/0/2]p l a
[sw3-Ethernet0/0/2]p d v 20
[sw3-Ethernet0/0/2]un sh
Info: Interface Ethernet0/0/2 is not shutdown.
[sw3-Ethernet0/0/2]int g0/0/1
[sw3-GigabitEthernet0/0/1]p l t
[sw3-GigabitEthernet0/0/1]p t a v 10 20
[sw3-GigabitEthernet0/0/1]un sh
Info: Interface GigabitEthernet0/0/1 is not shutdown.
[sw3-GigabitEthernet0/0/1]int g0/0/2
[sw3-GigabitEthernet0/0/2]p l t
[sw3-GigabitEthernet0/0/2]p t a v 10 20
[sw3-GigabitEthernet0/0/2]un sh

 

配置sw1

<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]sys    
[Huawei]sysname sw1
[sw1]undo info-center en
[sw1]v b 10 20 100
Info: This operation may take a few seconds. Please wait for a moment...done.
[sw1]int g0/0/2
[sw1-GigabitEthernet0/0/2]p l t
[sw1-GigabitEthernet0/0/2]p t a v 10 20
[sw1-GigabitEthernet0/0/2]un sh
Info: Interface GigabitEthernet0/0/2 is not shutdown.
[sw1-GigabitEthernet0/0/2]int g0/0/1
[sw1-GigabitEthernet0/0/1]p l a
[sw1-GigabitEthernet0/0/1]p d v 100
[sw1-GigabitEthernet0/0/1]un sh
Info: Interface GigabitEthernet0/0/1 is not shutdown.
[sw1-GigabitEthernet0/0/1]q
[sw1]int vlanif 10
[sw1-Vlanif10]ip add 192.168.10.10 24
[sw1-Vlanif10]vrrp vrid 1 virtual-ip 192.168.10.1    ###设置vrrp的I虚拟IP地址
[sw1-Vlanif10]vrrp vrid 1 priority 120               ###设置优先级
[sw1-Vlanif10]vrrp vrid 1 track int g0/0/2           ###设置监听端口
[sw1-Vlanif10]vrrp vrid 1 track int g0/0/1           ###设置监听端口
[sw1-Vlanif10]int vlanif 20
[sw1-Vlanif20]ip add 192.168.20.10 24
[sw1-Vlanif20]vrrp vrid 2 virtual-ip 192.168.20.1    ###设置vrrp的虚拟IP地址
[sw1-Vlanif20]vrrp vrid 2 priority 115               ###设置优先级
[sw1-Vlanif20]int vlanif 100
[sw1-Vlanif100]ip add 11.0.0.2 30
[sw1-Vlanif100]un sh
Info: Interface Vlanif100 is not shutdown.
[sw1-Vlanif100]q
[sw1]ip route-static 0.0.0.0 0.0.0.0 11.0.0.1
[sw1] User interface con0 is available

 

配置sw2

<Huawei>sys
Enter system view, return user view with Ctrl+Z.    
[Huawei]sysname sw2
[sw2]undo info-center en
Info: Information center is disabled.
[sw2]v b 10 20 100
Info: This operation may take a few seconds. Please wait for a moment...done.
[sw2]int g0/0/2
[sw2-GigabitEthernet0/0/2]p l t 
[sw2-GigabitEthernet0/0/2]p t a v 10 20
[sw2-GigabitEthernet0/0/2]un sh
Info: Interface GigabitEthernet0/0/2 is not shutdown.
[sw2-GigabitEthernet0/0/2]int g0/0/1
[sw2-GigabitEthernet0/0/1]p l a
[sw2-GigabitEthernet0/0/1]p d v 100
[sw2-GigabitEthernet0/0/1]un sh
Info: Interface GigabitEthernet0/0/1 is not shutdown.
[sw2-GigabitEthernet0/0/1]q
[sw2]int vlanif 10
[sw2-Vlanif10]ip add 192.168.10.20 24
[sw2-Vlanif10]vrrp vrid 1 virtual-ip 192.168.10.1    ###设置vrrp的虚拟IP地址 
[sw2-Vlanif10]vrrp vrid 1 priority 115               ###设置优先级
[sw2-Vlanif10]int vlanif 20
[sw2-Vlanif20]ip add 192.168.20.20 24                
[sw2-Vlanif20]vrrp vrid 2 virtual-ip 192.168.20.1    ###设置vrrp的虚拟IP地址vlanif20的
[sw2-Vlanif20]vrrp vrid 2 priority 120               ###设置优先级
[sw2-Vlanif20]vrrp vrid 2 track int g0/0/2           ###设置监听端口
[sw2-Vlanif20]vrrp vrid 2 track int g0/0/1           ###设置监听端口
[sw2-Vlanif20]int vlanif 100
[sw2-Vlanif100]ip add 12.0.0.2 30
[sw2-Vlanif100]un sh
Info: Interface Vlanif100 is not shutdown.
[sw2-Vlanif100]q
[sw2]ip route-static 0.0.0.0 0.0.0.0 12.0.0.1

 

配置R1

<Huawei>sys
Enter system view, return user view with Ctrl+Z.    
[Huawei]sysname R1    
[R1]undo info-center en
Info: Information center is disabled.
[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]i a 11.0.0.1 30
[R1-GigabitEthernet0/0/0]un sh
Info: Interface GigabitEthernet0/0/0 is not shutdown.
[R1-GigabitEthernet0/0/0]int g0/0/1
[R1-GigabitEthernet0/0/1]i a 12.0.0.1 30
[R1-GigabitEthernet0/0/1]un sh
Info: Interface GigabitEthernet0/0/1 is not shutdown.
[R1-GigabitEthernet0/0/1]int loo 0
[R1-LoopBack0]i a 1.1.1.1 24
[R1-LoopBack0]q    
[R1]ip route-static 192.168.10.0 24 11.0.0.2
[R1]ip route-static 192.168.10.0 24 12.0.0.2 preference 70   ###浮动路由
[R1]ip route-static 192.168.20.0 24 12.0.0.2 
[R1]ip route-static 192.168.20.0 24 11.0.0.2 preference 70   ###浮动路由

 

总结：vrrp这一章节要明白vrrp的基本结构以及主备备份、切换过程。以及它的配置命令。