cisco下vrrp的配置试验

Lab1.ConfiguringLayer3RedundancywithVRRP实验目的：1、掌握第三层网关冗余协议的VRRP配置。实验拓扑图：实验步骤及要求：1、本实验可以使用三层交换机完成,也可以使用路由器完成,在使用路由器时需要注意IOS的版本,确认支持HSRP协议。2、配置PC1与PC2路由器，将其模拟成主机，配置如下：PC1(config)#noiproutingPC1(config)#PC1(config)#interfacefastEthernet0/0PC1(config-if)#ipaddress192.168.1.10255.255.255.0PC1(config-if)#nocdpenablePC1(config-if)#noshutdownPC1(config-if)#exitPC1(config)#PC1(config)#ipdefault-gateway192.168.1.1PC1(config)#exitPC1#PC2(config)#noiproutingPC2(config)#PC2(config)#interfacefastEthernet0/0PC2(config-if)#ipaddress192.168.1.20255.255.255.0PC2(config-if)#nocdpenablePC2(config-if)#noshutdownPC2(config-if)#exitPC2(config)#PC2(config)#ipdefault-gateway192.168.1.2PC2(config)#exitPC2#3、首先在PC1和PC2上使用ping和traceroute命令，确认网络是否可达：PC1#ping10.1.1.1Typeescapesequencetoabort.Sending5,100-byteICMPEchosto10.1.1.1,timeoutis2seconds:!!!!!Successrateis100percent(5/5),round-tripmin/avg/max=48/60/72msPC1#PC1#traceroute10.1.1.1Typeescapesequencetoabort.Tracingtherouteto10.1.1.11192.168.1.112msec*96msecPC1#PC2#ping10.1.1.1Typeescapesequencetoabort.Sending5,100-byteICMPEchosto10.1.1.1,timeoutis2seconds:!!!!!Successrateis100percent(5/5),round-tripmin/avg/max=72/293/1084msPC2#PC2#traceroute10.1.1.1Typeescapesequencetoabort.Tracingtherouteto10.1.1.11192.168.1.2120msec*72msecPC2#4、将R1路由器的FA0/0接口，置为down状态：R1(config)#interfacefastEthernet0/0R1(config-if)#shutdownR1(config-if)#5、再次在R1和R2上使用ping和traceroute命令测试：C1#ping10.1.1.1Typeescapesequencetoabort.Sending5,100-byteICMPEchosto10.1.1.1,timeoutis2seconds:.....Successrateis0percent(0/5)PC1#PC1#traceroute10.1.1.1Typeescapesequencetoabort.Tracingtherouteto10.1.1.11***2***3***………PC2#ping10.1.1.1Typeescapesequencetoabort.Sending5,100-byteICMPEchosto10.1.1.1,timeoutis2seconds:!!!!!Successrateis100percent(5/5),round-tripmin/avg/max=72/128/160msPC2#PC2#trPC2#traceroute10.1.1.1Typeescapesequencetoabort.Tracingtherouteto10.1.1.11192.168.1.2112msec*96msecPC2#6、虽然有两台路由器都可以到达目标网络，但是默认情况下，并没有充分利用冗余设备，因此当网络单点出错时，必然会引起部分用户无法访问网络。7、为了解决这一问题，在R1和R2上配置VRRP协议，配置如下：R1(config)#interfacefastEthernet0/0R1(config-if)#vrrp1ip192.168.1.1R1(config-if)#vrrp1priority200R1(config-if)#vrrp1preemptR1(config-if)#R1(config-if)#vrrp2ip192.168.1.2R1(config-if)#vrrp2priority100R1(config-if)#vrrp2preemptR1(config-if)#exitR1(config)#R2(config)#interfacefastEthernet0/0R2(config-if)#vrrp1ip192.168.1.1R2(config-if)#vrrp1priority100R2(config-if)#vrrp1preemptR2(config-if)#R2(config-if)#vrrp2ip192.168.1.2R2(config-if)#vrrp2priority200R2(config-if)#vrrp2preemptR2(config-if)#exitR2(config)#exitR2#8、通过查看两台路由器的VRRP组汇总信息，确认不同路由器的组身份：R1#showvrrpFastEthernet0/0-Group1StateisMasterVirtualIPaddressis192.168.1.1VirtualMACaddressis0000.5e00.0101Advertisementintervalis1.000secPreemptionenabledPriorityis255(cfgd200)MasterRouteris192.168.1.1(local),priorityis255MasterAdvertisementintervalis1.000secMasterDownintervalis3.003secFastEthernet0/0-Group2StateisBackupVirtualIPaddressis192.168.1.2VirtualMACaddressis0000.5e00.0102Advertisementintervalis1.000secPreemptionenabledPriorityis100MasterRouteris192.168.1.2,priorityis255MasterAdvertisementintervalis1.000secMasterDownintervalis3.609sec(expiresin3.349sec)R1#R2#showvrrpFastEthernet0/0-Group1StateisBackupVirtualIPaddressis192.168.1.1VirtualMACaddressis0000.5e00.0101Advertisementintervalis1.000secPreemptionenabledPriorityis100MasterRouteris192.168.1.1,priorityis255MasterAdvertisementintervalis1.000secMasterDownintervalis3.609sec(expiresin2.773sec)FastEthernet0/0-Group2StateisMasterVirtualIPaddressis192.168.1.2VirtualMACaddressis0000.5e00.0102Advertisementintervalis1.000secPreemptionenabledPriorityis255(cfgd200)MasterRouteris192.168.1.2(local),priorityis255MasterAdvertisementintervalis1.000secMasterDownintervalis3.003secR2#9、再次把R1路由器的Fa0/0接口置为DOWN状态，两台路由器将会出现如下信息：R1(config)#interfacefastEthernet0/0R1(config-if)#shutdownR1(config-if)#*Jul821:49:59.131:%VRRP-6-STATECHANGE:Fa0/0Grp1stateMaster-Init*Jul821:49:59.135:%VRRP-6-STATECHANGE:Fa0/0Grp2stateBackup-InitR2#*Jul821:50:03.191:%VRRP-6-STATECHANGE:Fa0/0Grp1stateBackup-MasterR2#10、再次在R1和R2上使用ping和traceroute确认：PC1#ping10.1.1.1Typeescapesequencetoabort.Sending5,100-byteICMPEchosto10.1.1.1,timeoutis2seconds:!!!!!Successrateis100percent(5/5),round-tripmin/avg/max=48/78/96msPC1#PC1#traceroute10.1.1.1Typeescapesequencetoabort.Tracingtherouteto10.1.1.11192.168.1.292msec*120msecPC1#PC2#ping10.1.1.1Typeescapesequencetoabort.Sending5,100-byteICMPEchosto10.1.1.1,timeoutis2seconds:!!!!!Successrateis100percent(5/5),round-tripmin/avg/max=72/172/452msPC2#PC2#traceroute10.1.1.1Typeescapesequencetoabort.Tracingtherouteto10.1.1.11192.168.1.2132msec*168msecPC2#11、由于在网络中启用了两个不同的VRRP组，所以最大限度上确保了网络冗余。同时为了更好的观察VRRP的工作过程，建议在R1和R2路由器上使用扩展的PING命令持续向目标网络发送数据包。同时在R1和R2路由器使用如下命令进行调试，具体不再列出：debugvrrpeventsdebugvrrppackets12、实验完成。