Haiwei-VRRP+BFD案例实验

VRRP+BFD案例实验(简单)

IP地址规划表

设备 接口 IP地址
R1 GigabitEthernet0/0/0 10.12.0.1/29
R1 GigabitEthernet0/0/1 10.2.2.1/24
R1 GigabitEthernet0/0/2 10.13.1.1/29
R1 GigabitEthernet4/0/0 10.4.1.10/24
R2 GigabitEthernet0/0/0 10.12.0.2/29
R2 GigabitEthernet0/0/1 10.23.0.1/29
R2 GigabitEthernet0/0/2 10.1.1.1/24
R2 GigabitEthernet4/0/0 110.125.0.2/28
R3 GigabitEthernet0/0/0 10.23.0.3/29
R3 GigabitEthernet0/0/1 10.2.2.3/24
R3 GigabitEthernet0/0/2 10.13.1.3/29
R3 GigabitEthernet4/0/0 10.3.1.10/24
ISP GigabitEthernet0/0/0 110.125.0.1/28
ISP GigabitEthernet0/0/1 114.114.114.1/24
DNS服务器 Ethernet0/0/0 114.114.114.114/24
Web服务器 Ethernet0/0/0 10.2.2.22/24
PC Ethernet0/0/0 10.1.1.10/24
client2 Ethernet0/0/0 10.4.1.1/24
client3 Ethernet0/0/0 10.3.1.1/24

一、项目实施

1、配置接口

  • R1的配置
[R1]interface GigabitEthernet 0/0/0
[R1-GigabitEthernet0/0/0]ip address 10.12.0.1 255.255.255.248 

[R1]interface GigabitEthernet 0/0/1
[R1-GigabitEthernet0/0/1]ip address 10.2.2.1 255.255.255.0 

[R1]interface GigabitEthernet 0/0/2
[R1-GigabitEthernet0/0/2]ip address 10.13.1.1 255.255.255.248

[R1]interface GigabitEthernet 4/0/0
[R1-GigabitEthernet4/0/0]ip address 10.4.1.10 255.255.255.0
  • R2的配置
[R2]interface GigabitEthernet 0/0/0
[R2-GigabitEthernet0/0/0]ip address 10.12.0.2 255.255.255.248 

[R2]interface GigabitEthernet 0/0/1
[R2-GigabitEthernet0/0/1]ip address 10.23.0.1 255.255.255.248 

[R2]interface GigabitEthernet 0/0/2
[R2-GigabitEthernet0/0/2]ip address 10.1.1.1 255.255.255.0

[R2]interface GigabitEthernet 4/0/0
[R2-GigabitEthernet4/0/0]ip address 110.125.0.2 255.255.255.240
  • R3的配置
[R3]interface GigabitEthernet 0/0/0
[R3-GigabitEthernet0/0/0]ip address 10.23.0.3 255.255.255.248 

[R3]interface GigabitEthernet 0/0/1
[R3-GigabitEthernet0/0/1]ip address 10.2.2.3 255.255.255.0 

[R3]interface GigabitEthernet 0/0/2
[R3-GigabitEthernet0/0/2]ip address 10.13.1.3 255.255.255.248 

[R3]interface GigabitEthernet 4/0/0
[R3-GigabitEthernet4/0/0]ip address 10.3.1.10 255.255.255.0
  • ISP的配置
[ISP]int GigabitEthernet 0/0/0
[ISP-GigabitEthernet0/0/0]ip address 110.125.0.1 255.255.255.240 

[ISP-GigabitEthernet0/0/0]interface GigabitEthernet 0/0/1
[ISP-GigabitEthernet0/0/1]ip address 114.114.114.1 255.255.255.0

2、配置静态路由

  • R1的配置
[R1]ip route-static 0.0.0.0 0.0.0.0 10.12.0.2
[R1]ip route-static 0.0.0.0 0.0.0.0 10.13.1.3 preference 100
  • R2的配置
[R2]ip route-static 0.0.0.0 0.0.0.0 110.125.0.1
[R2]ip route-static 10.2.2.0 255.255.255.0 10.12.0.1
[R2]ip route-static 10.2.2.0 255.255.255.0 10.23.0.3 preference 100
[R2]ip route-static 10.3.1.0 255.255.255.0 10.23.0.3
[R2]ip route-static 10.4.1.0 255.255.255.0 10.12.0.1
  • R3的配置
[R3]ip route-static 0.0.0.0 0.0.0.0 10.23.0.1
[R3]ip route-static 0.0.0.0 0.0.0.0 10.13.1.1 preference 100

3、配置BFD（Bidirectional Forwarding Detection，双向转发检测）

  • R1的配置
[R1]bfd   #开启全局BFD功能，进入BFD视图
          #缺省状态，全局BFD功能未开启
[R1-bfd]quit
[R1]bfd 1 bind peer-ip 10.12.0.2 source-ip 10.12.0.1 auto  #配置单跳BFD会话，绑定远端IP地址和本端IP地址，
配置静态标识符自动协商，配置标识符必需相同否则无法建立bfd会话
[R1-bfd-session-1]commit                                   #提交配置
[R1-bfd-session-1]quit
  • R2的配置
[R2]bfd 1 bind peer-ip 10.12.0.1 source-ip 10.12.0.2 auto   #配置单跳BFD会话，绑定远端IP地址和本端IP地址，
配置静态标识符自动协商，配置标识符必需相同否则无法建立bfd会话
[R2-bfd-session-1]commit                                    #提交配置
[R2-bfd-session-1]quit

[R2]bfd 2 bind peer-ip 10.23.0.3 source-ip 10.23.0.1 auto   #配置单跳BFD会话，绑定远端IP地址和本端IP地址，
配置静态标识符自动协商，配置标识符必需相同否则无法建立bfd会话
[R2-bfd-session-2]commit                                    #提交配置
[R2-bfd-session-2]quit
  • R3的配置
[R3]bfd   #开启全局BFD功能，进入BFD视图
          #缺省状态，全局BFD功能未开启
[R3-bfd]quit
[R3]bfd 1 bind peer-ip 10.23.0.1 source-ip 10.23.0.3 auto  #配置单跳BFD会话，绑定远端IP地址和本端IP地址，
配置静态标识符自动协商，配置标识符必需相同否则无法建立bfd会话
[R3-bfd-session-1]commit                                   #提交配置
[R3-bfd-session-1]quit

4、配置虚拟路由冗余协议VRRP（Virtual Router Redundancy Protocol）

  • R1的配置
[R1]interface GigabitEthernet 0/0/1
[R1-GigabitEthernet0/0/1]vrrp vrid 1 virtual-ip 10.2.2.10     #配置虚拟网关为10.2.2.10，vrid为1
[R1-GigabitEthernet0/0/1]vrrp vrid 1 priority 120             #配置vrrp优先级为120，高于默认的100，设置设备为Master设备
[R1-GigabitEthernet0/0/1]vrrp vrid 1 preempt-mode timer delay 2 #设置设备为抢占模式配置抢占时间为2秒，设备默认采用立即抢占
避免网络不稳定，双方频繁抢占产生流量中断的问题。
[R1-GigabitEthernet0/0/1]vrrp vrid 1 track interface GigabitEthernet0/0/0 reduced 30    #配置VRRP与接口状态联动，监视
上行接口GE0/0/0 ,当GE0/0/0失效时，优先级减30，使R3即使抢占主设备的位置，为服务器提供服务
  • R3的配置
[R3]interface GigabitEthernet 0/0/1
[R3-GigabitEthernet0/0/1]vrrp vrid 1 virtual-ip 10.2.2.10     #配置虚拟网关为10.2.2.10，vrid为1
[R3-GigabitEthernet0/0/1]vrrp vrid 1 preempt-mode timer delay #设置设备为抢占模式配置抢占时间为2秒，设备默认采用立即抢占
避免网络不稳定，双方频繁抢占产生流量中断的问题。
[R3-GigabitEthernet0/0/1]vrrp vrid 1 track interface GigabitEthernet0/0/0 reduced 30      #配置VRRP与接口状态联动，监视
上行接口GE0/0/0 ,当GE0/0/0失效时，优先级减30，使R3即使抢占主设备的位置，为服务器提供服务

5、配置ACL限制

限制周六周日不能访问服务器的Web服务，其他网段无限制。

[R2]time-range ftime 9:00 to 17:00 ?
  <0-6>        Day of the week(0 is Sunday)
  Fri          Friday
  Mon          Monday
  Sat          Saturday
  Sun          Sunday
  Thu          Thursday
  Tue          Tuesday
  Wed          Wednesday
  daily        Every day of the week
  off-day      Saturday and Sunday
  working-day  Monday to Friday
[R2]time-range ftime 9:00 to 17:00 off-day 
[R1]interface GigabitEthernet 0/0/2
[R2-acl-adv-3001]rule 5 deny tcp destination-port eq 80 source 10.1.1.0 0.0.0.25
5 destination 10.2.2.22 0.0.0.0 time-range ftime
[R2]interface GigabitEthernet 0/0/2
[R2-GigabitEthernet0/0/2]traffic-filter inbound acl 3001

二、项目实施

1、验证BFD会话通告

  • R1的通告
[R1]display bfd session all 
--------------------------------------------------------------------------------
Local Remote     PeerIpAddr      State     Type        InterfaceName            
--------------------------------------------------------------------------------

8193  8192       10.12.0.2       Up        S_AUTO_PEER       -                  
--------------------------------------------------------------------------------
     Total UP/DOWN Session Number : 1/0
  • R2的通告
[R2]dis bfd session all 
--------------------------------------------------------------------------------
Local Remote     PeerIpAddr      State     Type        InterfaceName            
--------------------------------------------------------------------------------

8192  8193       10.12.0.1       Up        S_AUTO_PEER       -                  
8193  8192       10.23.0.3       Up        S_AUTO_PEER       -                  
--------------------------------------------------------------------------------
     Total UP/DOWN Session Number : 2/0
  • R3的通告
[R3]dis bfd session all 
--------------------------------------------------------------------------------
Local Remote     PeerIpAddr      State     Type        InterfaceName            
--------------------------------------------------------------------------------

8192  8193       10.23.0.1       Up        S_AUTO_PEER       -                  
--------------------------------------------------------------------------------
     Total UP/DOWN Session Number : 1/0

2、查看VRRP状态

  • R1的vrrp状态
[R1]display vrrp
  GigabitEthernet0/0/1 | Virtual Router 1
    State : Master
    Virtual IP : 10.2.2.10
    Master IP : 10.2.2.1
    PriorityRun : 120
    PriorityConfig : 120
    MasterPriority : 120
    Preempt : YES   Delay Time : 2 s
    TimerRun : 1 s
    TimerConfig : 1 s
    Auth type : NONE
    Virtual MAC : 0000-5e00-0101
    Check TTL : YES
    Config type : normal-vrrp
    Backup-forward : disabled
    Track IF : GigabitEthernet0/0/0   Priority reduced : 30
    IF state : UP
    Create time : 2022-03-18 09:23:38 UTC-08:00
    Last change time : 2022-03-18 11:19:48 UTC-08:00
  • R3的vrrp状态
[R3]display vrrp
  GigabitEthernet0/0/1 | Virtual Router 1
    State : Backup
    Virtual IP : 10.2.2.10
    Master IP : 10.2.2.1
    PriorityRun : 100
    PriorityConfig : 100
    MasterPriority : 120
    Preempt : YES   Delay Time : 2 s
    TimerRun : 1 s
    TimerConfig : 1 s
    Auth type : NONE
    Virtual MAC : 0000-5e00-0101
    Check TTL : YES
    Config type : normal-vrrp
    Backup-forward : disabled
    Track IF : GigabitEthernet0/0/0   Priority reduced : 30
    IF state : UP
    Create time : 2022-03-18 09:23:35 UTC-08:00
    Last change time : 2022-03-18 11:19:49 UTC-08:00

验证vrrp虚拟网关

  • R1的路由表
[R1]display ip routing-table 
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Routing Tables: Public
         Destinations : 18       Routes : 18       

Destination/Mask    Proto   Pre  Cost      Flags NextHop         Interface

        0.0.0.0/0   Static  60   0          RD   10.12.0.2       GigabitEthernet
0/0/0
       10.2.2.0/24  Direct  0    0           D   10.2.2.1        GigabitEthernet
0/0/1
       10.2.2.1/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/1
      10.2.2.10/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/1
     10.2.2.255/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/1
       10.4.1.0/24  Direct  0    0           D   10.4.1.10       GigabitEthernet
4/0/0
      10.4.1.10/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
4/0/0
     10.4.1.255/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
4/0/0
      10.12.0.0/29  Direct  0    0           D   10.12.0.1       GigabitEthernet
0/0/0
      10.12.0.1/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/0
      10.12.0.7/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/0
      10.13.1.0/29  Direct  0    0           D   10.13.1.1       GigabitEthernet
0/0/2
      10.13.1.1/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/2
      10.13.1.7/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/2
      127.0.0.0/8   Direct  0    0           D   127.0.0.1       InLoopBack0
      127.0.0.1/32  Direct  0    0           D   127.0.0.1       InLoopBack0
127.255.255.255/32  Direct  0    0           D   127.0.0.1       InLoopBack0
255.255.255.255/32  Direct  0    0           D   127.0.0.1       InLoopBack0
  • R2的路由表
[R3]display ip routing-table 
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Routing Tables: Public
         Destinations : 17       Routes : 17       

Destination/Mask    Proto   Pre  Cost      Flags NextHop         Interface

        0.0.0.0/0   Static  60   0          RD   10.23.0.1       GigabitEthernet
0/0/0
       10.2.2.0/24  Direct  0    0           D   10.2.2.3        GigabitEthernet
0/0/1
       10.2.2.3/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/1
     10.2.2.255/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/1
       10.3.1.0/24  Direct  0    0           D   10.3.1.10       GigabitEthernet
4/0/0
      10.3.1.10/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
4/0/0
     10.3.1.255/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
4/0/0
      10.13.1.0/29  Direct  0    0           D   10.13.1.3       GigabitEthernet
0/0/2
      10.13.1.3/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/2
      10.13.1.7/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/2
      10.23.0.0/29  Direct  0    0           D   10.23.0.3       GigabitEthernet
0/0/0
      10.23.0.3/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/0
      10.23.0.7/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/0
      127.0.0.0/8   Direct  0    0           D   127.0.0.1       InLoopBack0
      127.0.0.1/32  Direct  0    0           D   127.0.0.1       InLoopBack0
127.255.255.255/32  Direct  0    0           D   127.0.0.1       InLoopBack0
255.255.255.255/32  Direct  0    0           D   127.0.0.1       InLoopBack0

此拓扑出自2021年软考网络工程师下半年试题（四），相关配置参考华为官方文档。

posted @ 2022-04-08 14:56  plengong  阅读(342)  评论(2)  编辑  收藏  举报