路由器vrrp網關備援

用VRRP配置三層備援

1.1.       實驗目的：

掌握三層網管協定VRRP的配置和實驗驗證；

1.2.       實驗拓撲

1.3實驗配置及驗證方法

   (1) 在R1和R2，PC1和PC2上做好基礎配置，分别在PC1和PC2上ping10.1.1.1和ping 10.1.1.2 ，traceroute 10.1.1.1和traceroute 10.1.1.2。

 PC1#ping 10.1.1.1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.1.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 12/230/1076 ms

PC1#tr

PC1#traceroute 10.1.1.1

Tracing the route to 10.1.1.1

  1 192.168.1.1 32 msec *  36 msec        //走的是192.168.1.1 網關

PC2#ping 10.1.1.1

Success rate is 100 percent (5/5), round-trip min/avg/max = 12/216/1020 ms

PC2#tr

PC2#traceroute 10.1.1.1

  1 192.168.1.2 52 msec *  28 msec   //走的是192.168.1.2網關

（2） 此時down掉R2的f0/0接口，分别在R1和R2上ping10.1.1.1  traceroute 10.1.1.1

PC1#ping 10.1.1.1

.....

Success rate is 0 percent (0/5)

  1  *  *  *

  2  *  *  *

  3  *  *  *

  4  *  *  *

  5  *  *  *

  6  *  *  *

  7  *  *  *

  8  *  *  *     // R1已經ping不通10.1.1.1 且沒有網關

PC2#ping 10.1.1.1     

Success rate is 100 percent (5/5), round-trip min/avg/max = 8/219/1024 ms

  1 192.168.1.2 88 msec *  56 msec    // PC2任然可以ping同10.1.1.1，且通過R2這個問題說明并沒有真正利用好兩個路由器之間的備援，沒有起到他們應有的作用，下面通過配置VRRP實作他們的備援

（3） 在R1和R2上配置VRRP

進入相應的端口

R1(config-if)#vrrp 1 ip 192.168.1.1

*Mar  1 00:13:09.867: %VRRP-6-STATECHANGE: Fa0/0 Grp 1 state Init -> Master  //顯示R1處于Master

R1(config-if)#vrrp 1 priority 200

% Priority change will have no effect whilst interface is VRRP address owner

R1(config-if)#vrrp 1 preempt

R2(config-if)#vrrp 1 ip 192.168.1.1

R2(config-if)#vrrp 1 priority 100

R2(config-if)#vrrp 1 preempt

*Mar  1 00:14:42.443: %VRRP-6-STATECHANGE: Fa0/0 Grp 1 state Init -> Backup // 顯示R2處于備份狀态， 因為R2的優先級100小于R1的優先級200

R1(config-if)#vrrp 2 ip  192.168.1.2

R1(config-if)#

*Mar  1 00:15:15.607: %VRRP-6-STATECHANGE: Fa0/0 Grp 2 state Init -> Backup

*Mar  1 00:15:19.219: %VRRP-6-STATECHANGE: Fa0/0 Grp 2 state Backup -> Master

*Mar  1 00:15:19.303: %IP-4-DUPADDR: Duplicate address 192.168.1.2 on FastEthernet0/0, sourced by cc01.0cd8.0000

R1(config-if)#vrrp 2 priority 100

*Mar  1 00:15:49.731: %IP-4-DUPADDR: Duplicate address 192.168.1.2 on FastEthernet0/0, sourced by cc01.0cd8.0000

R1(config-if)#vrrp 2 preempt

R2(config-if)#vrrp 2 ip 192.168.1.2

R2(config-if)#

*Mar  1 00:16:10.815: %VRRP-6-STATECHANGE: Fa0/0 Grp 2 state Init -> Master // 可見R2處于Active狀态

R2(config-if)#vrrp 2 preempt

R2(config-if)#vrrp 2 priority 200

為驗證，再檢視R1和R2的vrrp資訊

R1#sh vrrp

FastEthernet0/0 - Group 1 

  State is Master    //狀态時Master狀态 

  Virtual IP address is 192.168.1.1

  Virtual MAC address is 0000.5e00.0101

  Advertisement interval is 1.000 sec

  Preemption enabled

  Priority is 255 (cfgd 200)

  Master Router is 192.168.1.1 (local), priority is 255  // Master Router 是192.168.1.1

  Master Advertisement interval is 1.000 sec

  Master Down interval is 3.003 sec

FastEthernet0/0 - Group 2 

  State is Backup    //狀态時Backup狀态 

  Virtual IP address is 192.168.1.2

  Virtual MAC address is 0000.5e00.0102

  Priority is 100

  Master Router is 192.168.1.2, priority is 255  Master Router 是192.168.1.1

  Master Down interval is 3.609 sec (expires in 2.717 sec)

R2(config-if)#do sh vrrp          

  State is Backup 

  Master Router is 192.168.1.1, priority is 255

  Master Down interval is 3.609 sec (expires in 2.877 sec)

  State is Master 

  Master Router is 192.168.1.2 (local), priority is 255

在PC1上ping 10.1.1.1  1000個資料包，在中間把R1上的f0/0接口shutdown

*Mar  1 00:19:32.791: %VRRP-6-STATECHANGE: Fa0/0 Grp 1 state Master -> Init

*Mar  1 00:19:32.791: %VRRP-6-STATECHANGE: Fa0/0 Grp 2 state Backup -> Init

R1(config-if)#no shut

*Mar  1 00:20:53.983: %VRRP-6-STATECHANGE: Fa0/0 Grp 1 state Init -> Master

*Mar  1 00:20:53.987: %VRRP-6-STATECHANGE: Fa0/0 Grp 2 state Init -> Backup

PC1#ping 10.1.1.1 repeat 1000

Sending 1000, 100-byte ICMP Echos to 10.1.1.1, timeout is 2 seconds:

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!..!!!!!!!!!!!!!! 

//在短暫的中斷後，又開始ping通

PC1#traceroute 10.1.1.1     

  1 192.168.1.2 68 msec *  28 msec   //經過的網關是192.168.1.2，可見現在已經實作的備援

注意：在PC上ping的時候，要用clear arp指令，清除ARP