HCNA-40 VRRP的跟踪接口及认证
HCNA-40 VRRP的跟踪接口及认证配置接入交换机<Huawei>system-viewsysnamesw1vlanbatch 10 20interface Ethernet 0/0/1portlink-type accessportdefault vlan 10interface Ethernet 0/0/2portlink-type accessportdefault vlan 20portlink-type trunkporttrunk allow-pass vlan allreturn 配置三层交换机配置VLAN及VLANIF接口地址<Huawei>system-viewsysnamesw2vlanbatch 10 20 100ipaddress 192.168.10.254 24interfacevlanif 20ipaddress 192.168.20.254 24interfacevlanif 100ipaddress 172.16.12.2 24quitinterfaceGigabitEthernet 0/0/1portlink-type trunkporttrunk allow-pass vlan all配置三层转发路由接口interfaceGigabitEthernet 0/0/2portlink-type accessportdefault vlan 100quit配置VRRPinterfacevlanif 10vrrpvrid 1 virtual-ip 192.168.10.1//配置VRRP虚拟网关地址vrrpvrid 1 priority 150//配置优先级vrrpvrid 1 track interface GigabitEthernet 0/0/2 reduced 100//配置接口GE0/0/2接口上行跟踪不能链路时优先级减少100vrrpvrid 1 authentication-mode md5 admin123//配置VRRP身份认证 interfacevlanif 20 vrrpvrid 2 virtual-ip 192.168.20.1vrrpvrid 2 priority 100vrrpvrid 2 authentication-mode md5 admin123quit配置OSPF路由协议ospf1//创建OSPF 进程1area0//创建骨干区域authentication-modemd5 1 cipher admin1234//配置OSPF区域身份认证network192.168.10.0 0.0.0.255//宣告参考网段network192.168.20.0 0.0.0.255network172.16.12.0 0.0.0.255return <Huawei>system-viewsysnamesw3vlanbatch 10 20 200interfacevlanif 10ipaddress 192.168.10.253 24interfacevlanif 20ipaddress 192.168.20.253 24interfacevlanif 200ipaddress 172.16.13.3 24interfaceGigabitEthernet 0/0/1portlink-type trunkporttrunk allow-pass vlan allinterfaceGigabitEthernet 0/0/2portlink-type accessportdefault vlan 200quitvrrpvrid 1 priority 100vrrpvrid 1 authentication-mode md5 admin123interfacevlanif 20vrrpvrid 2 virtual-ip 192.168.20.1vrrpvrid 2 priority 150vrrpvrid 2 track interface GigabitEthernet 0/0/2 reduced 100vrrpvrid 2 authentication-mode md5 admin123quitdisplayvrrp briefVRIDState Interface Type Virtual IP ----------------------------------------------------------------1 Backup Vlanif10 Normal 192.168.10.1 2 Master Vlanif20 Normal 192.168.20.1 ----------------------------------------------------------------Total:2 Master:1 Backup:1 Non-active:0 displayvrrp Vlanif10 | Virtual Router 1 State : Backup Virtual IP : 192.168.10.1 Master IP : 192.168.10.254 PriorityRun : 100 PriorityConfig : 100 MasterPriority : 150 Preempt : YES Delay Time : 0 s TimerRun : 1 s TimerConfig : 1 s Auth type : MD5 Auth key :P#8F&I0zuJHj<w)JO!C@=N,# Virtual MAC : 0000-5e00-0101 Check TTL : YES Config type : normal-vrrp Create time : 2020-07-24 23:33:09 UTC-08:00 Last change time : 2020-07-24 23:33:53UTC-08:00 Vlanif20 | Virtual Router 2 State : Master Virtual IP : 192.168.20.1 Master IP : 192.168.20.253 PriorityRun : 150 PriorityConfig : 150 MasterPriority : 150 Preempt : YES Delay Time : 0 s TimerRun : 1 s TimerConfig : 1 s Auth type : MD5 Auth key :AAlGP+1#*)JlDGI>zbS=:S8# Virtual MAC : 0000-5e00-0102 Check TTL : YES Config type : normal-vrrp Track IF : GigabitEthernet0/0/2Priority reduced : 100 IF state : UP Create time : 2020-07-24 23:35:19 UTC-08:00 Last change time : 2020-07-24 23:35:23UTC-08:00ospf1area0authentication-modemd5 1 cipher admin1234network192.168.10.0 0.0.0.255network192.168.20.0 0.0.0.255network172.16.13.0 0.0.0.255return <Huawei>system-viewsysnamer1interfaceloopback 0 ipaddress 100.100.100.100 32interfaceGigabitEthernet 0/0/0ipaddress 172.16.12.1 24 interfaceGigabitEthernet 0/0/1ipaddress 172.16.13.1 24 quitdisplayip interface brief*down:administratively down^down:standby(l):loopback(s):spoofingThenumber of interface that is UP in Physical is 4Thenumber of interface that is DOWN in Physical is 1Thenumber of interface that is UP in Protocol is 4Thenumber of interface that is DOWN in Protocol is 1 Interface IP Address/Mask PhysicalProtocolGigabitEthernet0/0/0 172.16.12.1/24 up up GigabitEthernet0/0/1 172.16.13.1/24 up up GigabitEthernet0/0/2 unassigned down down LoopBack0 100.100.100.100/32 up up(s) NULL0 unassigned up up(s) ospf1 area0authentication-modemd5 1 cipher admin1234network172.16.12.0 0.0.0.255network172.16.13.0 0.0.0.255network100.100.100.100 0.0.0.0return<r1>displayospf peer brief OSPFProcess 1 with Router ID 100.100.100.100 Peer Statistic Information ---------------------------------------------------------------------------- Area Id Interface Neighbor id State 0.0.0.0 GigabitEthernet0/0/0 192.168.20.254 Full 0.0.0.0 GigabitEthernet0/0/1 192.168.10.253 Full ---------------------------------------------------------------------------- PC>tracert100.100.100.100 tracerouteto 100.100.100.100, 8 hops max(ICMP),press Ctrl+C to stop 1192.168.10.254 31 ms 47 ms47 ms 2 100.100.100.100 62 ms78 ms 79 msPC1 访问100.100.100.100通过SW2 PC>tracert100.100.100.100 tracerouteto 100.100.100.100, 8 hops max(ICMP),press Ctrl+C to stop 1 192.168.20.253 79 ms46 ms 47 ms 2 100.100.100.100 63 ms62 ms 63 msPC1 访问100.100.100.100通过SW3 切断SW2 GE0/0/2上行链路测试冗余
PC>ping100.100.100.100 -t Ping100.100.100.100: 32 data bytes, Press Ctrl_C to breakFrom100.100.100.100: bytes=32 seq=4 ttl=254 time=16 msFrom100.100.100.100: bytes=32 seq=5 ttl=254 time=32 msRequest timeout!//只有一个丢包From100.100.100.100: bytes=32 seq=7 ttl=254 time=78 msFrom100.100.100.100: bytes=32 seq=8 ttl=254 time=47 msFrom100.100.100.100: bytes=32 seq=9 ttl=254 time=47 ms ---100.100.100.100 ping statistics ---16 packet(s) transmitted15 packet(s) received6.25% packet lossround-trip min/avg/max = 16/55/94 ms PC>tracert100.100.100.100 tracerouteto 100.100.100.100, 8 hops max(ICMP),press Ctrl+C to stop 1192.168.10.253 31 ms 47 ms47 ms 2 100.100.100.100 62 ms63 ms 62 ms实现了链路的的冗余备份和网关负载均衡
页:
[1]
