关于track-mstp线路hsrp不能自动切换问题的解决建议

关于TrackMSTP线路HSRP不能自动切换问题的解决建议背景：由于MSTP线路的特性，线路中断可能端口协议不会down，因此不会触发Track端口的HSRP切换。这种问题在静态路由的条件下会带来一些问题，会导致静态路由指向已经失效的端口且HSRP不切换。典型的例子就是11月2日广州市内到南航连接的故障。解决建议：结合广州市内到南航连接的实际情况，有如下两种解决建议：1.在广分的2台接入路由器和南航的2台接入路由器同时运行一个动态路由协议，用路由协议来实现路由层面的自动切换，这种方式已经在航信到东航的电子商务接口（也是MSTP线路）上使用；2.在广分的2台接入路由器上设置TrackIP的HSRP切换配置（南航端已配置），当对端IP不通时就切换HSRP主用到备用路由器。两种建议的比较：动态路由TrackIP航信是否使用过是否是否需要升级IOS否是是否能够解决路由指向失效端口的问题是否是否需要南航端修改配置是否附件：TrackIP配置的测试拓扑图：用2台交换机来模拟MSTP线路，在NH_FW上进行对CAN_FWping验证连通性。添加配置：CAN-C37-CZ1A：ipslamonitor1typeechoprotocolipIcmpEcho172.28.1.6timeout2000threshold1000frequency3ipslamonitorschedule1lifeforeverstart-timenow!track11rtr1!interfaceFastEthernet0/0nostandby1trackFastEthernet0/1standby1track11CAN-C37-CZ1B：ipslamonitor1typeechoprotocolipIcmpEcho172.28.1.22timeout2000threshold1000frequency3ipslamonitorschedule1lifeforeverstart-timenow!track11rtr1!interfaceFastEthernet0/0nostandby1trackFastEthernet0/1standby1track11测试验证：正常情况下，在NH_FW上进行对CAN_FWping正常；1.将CAN-C37-CZ1A的FastEthernet0/1端口shutdown，两端都检测到对端端口IP不可达，触发HSRP切换到备机（见log），期间ping丢包5个；2.将CAN-C37-CZ1A的FastEthernet0/1端口noshutdown，两端都检测到对端端口IP可达，触发HSRP切换回到主机（见log），期间ping不丢包；3.将NH_A的FastEthernet0/0端口shutdown，两端都检测到对端端口IP不可达，触发HSRP切换到备机（见log），期间ping丢包5个；4.将NH_A的FastEthernet0/0端口noshutdown，两端都检测到对端端口IP可达，触发HSRP切换回到主机（见log），期间ping不丢包。配置TrackIP后，检查CPU占用为1%左右：CAN-C37-CZ1A#shprocessescpuCPUutilizationforfiveseconds:2%/5%;oneminute:1%;fiveminutes:1%PIDRuntime(ms)InvokeduSecs5Sec1Min5MinTTYProcess...142117636666831.06%0.01%0.99%0IPSLAMonEvent...log记录：将CAN-C37-CZ1A的FastEthernet0/1端口shutdown：CAN-C37-CZ1A(config)#intfa0/1CAN-C37-CZ1A(config-if)#sh*Mar102:08:42.179:%LINK-5-CHANGED:InterfaceFastEthernet0/1,changedstatetoadministrativelydown*Mar102:08:43.179:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceFastEthernet0/1,changedstatetodown*Mar102:08:45.895:%TRACKING-5-STATE:11rtr1stateUp-Down*Mar102:08:46.895:%HSRP-5-STATECHANGE:FastEthernet0/0Grp1stateActive-Speak*Mar102:08:56.895:%HSRP-5-STATECHANGE:FastEthernet0/0Grp1stateSpeak-StandbyNH_A#*Mar102:08:46.311:%TRACKING-5-STATE:11rtr1stateUp-Down*Mar102:08:49.171:%HSRP-5-STATECHANGE:FastEthernet0/1Grp1stateActive-Speak*Mar102:08:59.171:%HSRP-5-STATECHANGE:FastEthernet0/1Grp1stateSpeak-Standby将CAN-C37-CZ1A的FastEthernet0/1端口noshutdown：CAN-C37-CZ1A(config-if)#nosh*Mar102:09:30.423:%LINK-3-UPDOWN:InterfaceFastEthernet0/1,changedstatetoup*Mar102:09:31.423:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceFastEthernet0/1,changedstatetoup*Mar102:09:35.895:%TRACKING-5-STATE:11rtr1stateDown-Up*Mar102:09:37.883:%HSRP-5-STATECHANGE:FastEthernet0/0Grp1stateStandby-ActiveNH_A#*Mar102:09:31.311:%TRACKING-5-STATE:11rtr1stateDown-Up*Mar102:09:34.175:%HSRP-5-STATECHANGE:FastEthernet0/1Grp1stateStandby-Active将NH_A的FastEthernet0/1端口shutdown：NH_A(config)#intfa0/0NH_A(config-if)#sh*Mar102:12:01.455:%LINK-5-CHANGED:InterfaceFastEthernet0/0,changedstatetoadministrativelydown*Mar102:12:02.455:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceFastEthernet0/0,changedstatetodown*Mar102:12:06.311:%TRACKING-5-STATE:11rtr1stateUp-Down*Mar102:12:07.187:%HSRP-5-STATECHANGE:FastEthernet0/1Grp1stateActive-Speak*Mar102:12:17.187:%HSRP-5-STATECHANGE:FastEthernet0/1Grp1stateSpeak-StandbyCAN-C37-CZ1A#*Mar102:12:05.895:%TRACKING-5-STATE:11rtr1stateUp-Down*Mar102:12:07.899:%HSRP-5-STATECHANGE:FastEthernet0/0Grp1stateActive-Speak*Mar102:12:17.899:%HSRP-5-STATECHANGE:FastEthernet0/0Grp1stateSpeak-Standby将NH_A的FastEthernet0/1端口noshutdown：NH_A(config-if)#nosh*Mar102:12:44.391:%LINK-3-UPDOWN:InterfaceFastEthernet0/0,changedstatetoup*Mar102:12:45.391:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceFastEthernet0/0,changedstatetoup*Mar102:12:46.311:%TRACKING-5-STATE:11rtr1stateDown-Up*Mar102:12:49.183:%HSRP-5-STATECHANGE:FastEthernet0/1Grp1stateStandby-ActiveCAN-C37-CZ1A#*Mar102:12:50.895:%TRACKING-5-STATE:11rtr1stateDown-Up*Mar102:12:52.899:%HSRP-5-STATECHANGE:FastEthernet0/0Grp1stateStandby-Active