hsrp vrrp

Switch1 F0/12 <----> Switch4 F0/12
Switch1 F0/10 <----> Switch3 F0/10
Switch1 F0/14 <----> Switch2 F0/14
Switch4 F0/15 <----> Switch3 F0/15
Switch3 F0/12 <----> Switch2 F0/12
Switch2 F0/1 <----> Router1 F0/1
Switch2 F0/2 <----> Router2 F0/2
此实验源自net527的中级视频里面的HSRP章节。
首先配置下层设备。

R1：
no ip routing
int fa 0/1
no sw
ip addr 192.168.1.1 255.255.255.0
no shut
exit
ip defalut-gateway 192.168.1.254
R2:
no ip routing
inter fa 0/2
no sw
ip addr 192.168.2.2 255.255.255.0
no shut
exit
ip default-gateway 192.168.2.254
SW1：
配置vtp
vlan database
vtp server
vtp domain hsrp
vtp pruning
SW2,sw3
vlan database
vtp server
vtp domain hsrp
vtp pruning
SW2:
int fa 0/14
switchport mode trunk
no shu
inter fa 0/12
swit mode trunk
SW1:
interface fa 0/14
switchport mode trunk
no shut
SW3:
inter fa 0/12
swit mode trunk
no shut
SW1:
interface fa 0/10
switch mode trunk
no shut
SW3:
interface fa 0/10
switchport mode trunk
no shut
SW1,SW3
interface vlan 12
ip addr 192.168.1.251 192.168.1.253
no shut
SW1:
inter vlan 12
standby 12 ip 192.168.1.254 配置虚拟IP。
standby 12 preempt 150 配置优先级
standby 12 track fa 0/12 60 配置跟踪端口，当12挂了时，优先级为150-60
standby 12 preempt delay minium 50 配置当优先级恢复时，延迟50毫秒后再抢回Active状态。
此时并为将SW2的端口划分到任何vlan中。
SW1#show standby brief
P indicates configured to preempt.
|
Interface Grp Prio P State Active Standby Virtual IP
Vl12 12 150 P Active local 192.168.1.253 192.168.1.254

SW3#show standby brief
P indicates configured to preempt.
|
Interface Grp Prio P State Active Standby Virtual IP
Vl12 12 100 Standby 192.168.1.251 local 192.168.1.254
SW3#
SW1和SW3已经分别认出了对方，确定了各自的状态。
昨天net527群里的一个白痴说vlan里面必须有端口才能通讯。郁闷。

SW3#show arp
Protocol Address Age (min) Hardware Addr Type Interface
Internet 192.168.1.253 - cc00.0ab0.0000 ARPA Vlan12
SW1#show arp
Protocol Address Age (min) Hardware Addr Type Interface
Internet 192.168.1.251 - cc00.0350.0000 ARPA Vlan12
Internet 192.168.1.254 - 0000.0c07.ac0c ARPA Vlan12
因为SW1为ACTIVE状态，可以看到他监听1.251的MCA地址为0000.0c07.ac的MAC。
SW1#show standby
Vlan12 - Group 12
State is Active 当前状态
2 state changes, last state change 00:08:10
Virtual IP address is 192.168.1.254 虚拟IP。
Active virtual MAC address is 0000.0c07.ac0c 虚拟MAC。
Local virtual MAC address is 0000.0c07.ac0c (v1 default)
Hello time 3 sec, hold time 10 sec hello hold time
Next hello sent in 1.620 secs
Preemption enabled, delay min 50 secs
Active router is local 当前状态。
Standby router is 192.168.1.253, priority 100 (expires in 7.744 sec) standby IP.
Priority 150 (configured 150) 当前优先级，配置的优先级。
Track interface FastEthernet0/12 state Up decrement 60 跟踪的端口。
IP redundancy name is "hsrp-Vl12-12" (default)
SW1#
SW1#show standby vlan 12
Vlan12 - Group 12
State is Active
2 state changes, last state change 00:15:26
Virtual IP address is 192.168.1.254
Active virtual MAC address is 0000.0c07.ac0c
Local virtual MAC address is 0000.0c07.ac0c (v1 default)
Hello time 3 sec, hold time 10 sec
Next hello sent in 0.316 secs
Preemption enabled, delay min 50 secs
Active router is local
Standby router is 192.168.1.253, priority 100 (expires in 9.456 sec)
Priority 150 (configured 150)
Track interface FastEthernet0/12 state Up decrement 60
IP redundancy name is "hsrp-Vl12-12" (default)

SW3： vrrp
config# track 1 interface fast 0/15 line-protocol 定义vrrp的track值。
interface vlan 22
ip addr 192.168.2.253 255.255.255.0
no shut
vrrp 22 ip 192.168.2.254
vrrp 22 track 1 decrement 60 定义接口D掉后的衰减值。
vrrp 22 priority 150
vrrp 22 preempt
SW1:
inter vlan 22
ip addr 192.168.2.251 255.255.255.0
no shut
vrrp 22 ip 192.168.2.254
SW1#show vrrp brief
Interface Grp Pri Time Own Pre State Master addr Group addr
Vl22 22 100 3609 Y Backup 192.168.2.253 192.168.2.254
SW1#
当前state backup
SW1#show vrrp interface vlan 22
Vlan22 - Group 22
State is Backup
Virtual IP address is 192.168.2.254
Virtual MAC address is 0000.5e00.0116
Advertisement interval is 1.000 sec
Preemption enabled
Priority is 100
Master Router is 192.168.2.253, priority is 150
Master Advertisement interval is 1.000 sec
Master Down interval is 3.609 sec (expires in 2.665 sec)
注意这里命令不一样。
show standby vlan 12

SW3#show arp
Protocol Address Age (min) Hardware Addr Type Interface
Internet 192.168.2.254 - 0000.5e00.0116 ARPA Vlan22
Internet 192.168.1.253 - cc00.0ab0.0000 ARPA Vlan12
Internet 192.168.2.253 - cc00.0ab0.0000 ARPA Vlan22

SW1#show arp
Protocol Address Age (min) Hardware Addr Type Interface
Internet 192.168.2.251 - cc00.0350.0000 ARPA Vlan22
Internet 192.168.1.251 - cc00.0350.0000 ARPA Vlan12
Internet 192.168.1.254 - 0000.0c07.ac0c ARPA Vlan12

show ip route
Gateway of last resort is not set
C 192.168.1.0/24 is directly connected, Vlan12
C 192.168.2.0/24 is directly connected, Vlan22
SW3#
PC1#ping 192.168.2.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.2.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 20/48/76 ms
C1#ping 192.168.2.254
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.2.254, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/41/124 ms

SW1:
inter fa 0/12
no sw
ip addr 14.14.14.1 255.255.255.0
no shut
ip ospf network point-to-point
router ospf 10
network 192.168.1.0 0.0.0.255 ar 0
network 192.168.2.0 0.0.0.255 ar 0 用来做回不的路由备份，即当有数据从SW4到SW2时，而SW3又D掉的情况。
network 14.14.14 .0 0.0.0.255 are 0
passive-interface vlan 12
passive-interface vlan 22
SW3:
inter fa 0/15
no sw
ip addr 34.34.34.3 255.255.255.0
no shut
ip ospf network point-to-point
router ospf 10
network 192.168.1.0 0.0.0.255 ar 0
network 192.168.2.0 0.0.0.255 ar 0
network 14.14.14.0 0.0.0.255 are 0
passive-inter vlan 12
passive-inter vlan 22

SW4:
inter fa 0/12
no sw
no shut
ip addr 14.14.14.4 255.255.255.0
ip ospf network point-to-point
inter fa 0/15
no sw
no shu
ip addr 34.34.34.4 255.255.255.0
ip ospf network point-to-point
int lo 0
ip addr 4.4.4.4 255.255.255.0
ip ospf network point-to-point
router ospf 10
network 4.4.4.0 0.0.0.255 are 0
network 14.14.14.0 0.0.0.255 ar 0
network 34.34.34.0 0.0.0.255 ar 0

Gateway of last resort is not set
34.0.0.0/24 is subnetted, 1 subnets
C 34.34.34.0 is directly connected, FastEthernet0/15
4.0.0.0/24 is subnetted, 1 subnets
C 4.4.4.0 is directly connected, Loopback0
O 192.168.1.0/24 [110/2] via 34.34.34.3, 00:07:45, FastEthernet0/15
[110/2] via 14.14.14.1, 00:07:45, FastEthernet0/12
O 192.168.2.0/24 [110/2] via 34.34.34.3, 00:07:45, FastEthernet0/15
[110/2] via 14.14.14.1, 00:07:45, FastEthernet0/12
14.0.0.0/24 is subnetted, 1 subnets
C 14.14.14.0 is directly connected, FastEthernet0/12
sw4

-----------
Gateway of last resort is not set
34.0.0.0/24 is subnetted, 1 subnets
O 34.34.34.0 [110/2] via 14.14.14.4, 00:08:26, FastEthernet0/12
4.0.0.0/32 is subnetted, 1 subnets
O 4.4.4.4 [110/2] via 14.14.14.4, 00:08:26, FastEthernet0/12
C 192.168.1.0/24 is directly connected, Vlan12
C 192.168.2.0/24 is directly connected, Vlan22
14.0.0.0/24 is subnetted, 1 subnets
C 14.14.14.0 is directly connected, FastEthernet0/12
SW1#

PC1#trac
PC1#traceroute 4.4.4.4
Type escape sequence to abort.
Tracing the route to 4.4.4.4
1 192.168.1.251 84 msec 108 msec 4 msec
2 14.14.14.4 208 msec * 76 msec
PC1#
SW1(config)#interface fastEthernet 0/12
SW1(config-if)#shu
SW1(config-if)#end
*Mar 1 01:33:50.807: %TRACKING-5-STATE: 1 interface Fa0/12 line-protocol Up->Down
*Mar 1 01:33:50.879: %OSPF-5-ADJCHG: Process 10, Nbr 4.4.4.4 on FastEthernet0/12 from FULL to DOWN, Neighbor Down: Interface down or detached
SW1(config-if)#end
SW1#
*Mar 1 01:33:52.083: %SYS-5-CONFIG_I: Configured from console by console
*Mar 1 01:33:52.787: %LINK-5-CHANGED: Interface FastEthernet0/12, changed state to administratively down
SW1#
*Mar 1 01:33:53.787: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/12, changed state to down
SW1#

SW1#show standby vlan 12
Vlan12 - Group 12
State is Active
2 state changes, last state change 01:06:56
Virtual IP address is 192.168.1.254
Active virtual MAC address is 0000.0c07.ac0c
Local virtual MAC address is 0000.0c07.ac0c (v1 default)
Hello time 3 sec, hold time 10 sec
Next hello sent in 1.072 secs
Preemption enabled, delay min 50 secs
Active router is local
Standby router is 192.168.1.253, priority 100 (expires in 7.052 sec)
Priority 90 (configured 150)
Track interface FastEthernet0/12 state Down decrement 60
IP redundancy name is "hsrp-Vl12-12" (default)
SW1#

SW3#show standby
Vlan12 - Group 12
State is Active
2 state changes, last state change 00:00:15
Virtual IP address is 192.168.1.254
Active virtual MAC address is 0000.0c07.ac0c
Local virtual MAC address is 0000.0c07.ac0c (v1 default)
Hello time 3 sec, hold time 10 sec
Next hello sent in 2.380 secs
Preemption enabled
Active router is local
Standby router is 192.168.1.251, priority 90 (expires in 7.436 sec)
Priority 100 (default 100)
IP redundancy name is "hsrp-Vl12-12" (default)
SW3#
PC1#traceroute 4.4.4.4
Type escape sequence to abort.
Tracing the route to 4.4.4.4
1 192.168.1.253 64 msec 80 msec 16 msec
2 34.34.34.4 48 msec * 96 msec
PC1#

SW3：
show spanning-tree
Port 13 (FastEthernet0/12) of VLAN1 is blocking
Port path cost 19, Port priority 128, Port Identifier 128.13.
Designated root has priority 32768, address cc00.0350.0000
Designated bridge has priority 32768, address cc00.0a64.0000
Designated port id is 128.13, designated path cost 19
Timers: message age 2, forward delay 0, hold 0
Number of transitions to forwarding state: 1
BPDU: sent 4, received 2328

F0/12 is blocking
PC1----4.4.4.4
pc1--->sw2--->SW1--->SW3--->SW4
当SW1的上联口D掉时，下面的环形接口没有出问题 。
这里有一点，preempt时建议配置延迟，往往一D接口，ACTive就即可发现并抢占而此时协议的邻居关系却往往并没有建立。