双机热备HRSP.docx

双机热备HRSP.docx

《双机热备HRSP.docx》由会员分享，可在线阅读，更多相关《双机热备HRSP.docx（50页珍藏版）》请在冰豆网上搜索。

双机热备HRSP

两台路由器+两台三层交换机做冗余最大限度避免单点故障

网络拓扑图如下：

拓扑说明：

1．路由器Internet是一台模拟Internet环境的路由器，为了尽可能真实，我仅在路由器上配置了相应的端口IP没有任何静态或动态路由。

2．接入层交换机为傻瓜型设备，仅设置vlan端口划分。

随时可以更换，基本不用做任何配置。

3．两台交换机互相做备份，配置基本差不多。

区别在于VTPServer在MSW上，BSW作为VTPClient存在。

4．SPT没有专门配置，有设备自动生成。

5．两台路由器互相备份，配置基本差不多。

6．该配置环境中只要有一台路由器和一台核心交换机在工作，网络可以正常工作。

7．其他详细网络参数基本可以在拓扑图上找到，更详细的参数，请参照最后的配置文件。

配置情况：

基本配置

Internet

enable

configureterminal

hostnameInternet

interfaceg0/0

ipaddress8.8.8.254255.255.255.0

noshutdown

exit

interfaceg0/1

ipaddress1.1.1.1255.255.255.0

noshutdown

exit

interfaceg0/2

ipaddress2.2.2.1255.255.255.0

noshutdown

exit

exit

write

MR

enable

configureterminal

hostnameMR

interfaceg0/0

ipaddress1.1.1.2255.255.255.0

noshutdown

exit

interfaceg0/1

ipaddress192.168.10.2255.255.255.0

noshutdown

exit

interfaceg0/2

ipaddress192.168.20.2255.255.255.0

noshutdown

exit

exit

write

BR

enable

configureterminal

hostnameBR

interfaceg0/0

ipaddress2.2.2.2255.255.255.0

noshutdown

exit

interfaceg0/1

ipaddress192.168.20.3255.255.255.0

noshutdown

exit

interfaceg0/2

ipaddress192.168.10.3255.255.255.0

noshutdown

exit

exit

write

msw

enable

configureterminal

hostnameMSW

iprouting

exit

write

bsw

enable

configureterminal

hostnameBSW

iprouting

exit

write

SW1

enable

configureterminal

hostnameSW1

exit

write

SW2

enable

configureterminal

hostnameSW2

exit

write

配置交换机VLAN

MSW

enable

configureterminal

vtpdomaina

vtppassworda

vtpmodeserver

vlan10

vlan20

vlan100

vlan200

interfacevlan10

ipaddress192.168.10.253255.255.255.0

exit

interfacevlan20

ipaddress192.168.20.253255.255.255.0

exit

interfacevlan100

ipaddress192.168.100.253255.255.255.0

exit

interfacevlan200

ipaddress192.168.200.253255.255.255.0

exit

interfacerangef0/1-24

switchportmodeaccess

switchportmodetrunk

switchporttrunkallowedvlanall

exit

interfaceg0/1

switchportmodeaccess

switchportaccessvlan10

exit

interfaceg0/2

switchportmodeaccess

switchportaccessvlan20

exit

exit

write

BSW

enable

configureterminal

vtpdomaina

vtppassworda

vtpmodeclient

interfacevlan10

ipaddress192.168.10.252255.255.255.0

exit

interfacevlan20

ipaddress192.168.20.252255.255.255.0

exit

interfacevlan100

ipaddress192.168.100.253255.255.255.0

exit

interfacevlan200

ipaddress192.168.200.253255.255.255.0

exit

interfacerangef0/1-24

switchportmodeaccess

switchportmodetrunk

switchporttrunkallowedvlanall

exit

interfaceg0/1

switchportmodeaccess

switchportaccessvlan20

exit

interfaceg0/2

switchportmodeaccess

switchportaccessvlan10

exit

exit

write

SW1

enable

configureterminal

vtpdomaina

vtppassworda

vtpmodeclient

interfacerangef0/21-24

switchportmodeaccess

switchportmodetrunk

switchporttrunkallowedvlanall

exit

interfacerangef0/1-10

switchportmodeaccess

switchportaccessvlan100

exit

interfacerangef0/11-20

switchportmodeaccess

switchportaccessvlan200

exit

exit

write

SW2

enable

configureterminal

vtpdomaina

vtppassworda

vtpmodeclient

interfacerangef0/21-24

switchportmodeaccess

switchportmodetrunk

switchporttrunkallowedvlanall

exit

interfacerangef0/1-10

switchportmodeaccess

switchportaccessvlan100

exit

interfacerangef0/11-20

switchportmodeaccess

switchportaccessvlan200

exit

exit

write

配置HRSP（热备份路由协议）

MR

enable

configureterminal

interfaceg0/1

standby11ip192.168.10.1

standby11priority120

standby11preempt

exit

interfaceg0/2

standby21ip192.168.20.1

standby21priority120

standby21preempt

exit

exit

write

BR

enable

configureterminal

interfaceg0/1

standby21ip192.168.20.1

standby21priority120

standby21preempt

exit

interfaceg0/2

standby11ip192.168.10.1

standby11priority120

standby11preempt

exit

exit

write

MSW

enable

configureterminal

interfacevlan10

standby10ip192.168.10.254

standby10priority120

standby10preempt

exit

interfacevlan20

standby20ip192.168.20.254

standby20priority120

standby20preempt

exit

interfacevlan100

standby100ip192.168.100.254

standby100priority120

standby100preempt

exit

interfacevlan200

standby200ip192.168.200.254

standby200priority120

standby200preempt

exit

exit

write

BSE

enable

configureterminal

interfacevlan10

standby10ip192.168.10.254

standby10priority120

standby10preempt

exit

interfacevlan20

standby20ip192.168.20.254

standby20priority120

standby20preempt

exit

interfacevlan100

standby100ip192.168.100.254

standby100priority120

standby100preempt

exit

interfacevlan200

standby200ip192.168.200.254

standby200priority120

standby200preempt

exit

exit

write

添加静态路由

MR

enable

configureterminal

iproute0.0.0.00.0.0.01.1.1.1

iproute192.168.0.0255.255.0.0192.168.10.254

exit

write

BR

enable

configureterminal

iproute0.0.0.00.0.0.02.2.2.1

iproute192.168.0.0255.255.0.0192.168.10.254

exit

write

MSW

enable

configureterminal

iproute0.0.0.00.0.0.0192.168.10.1

exit

write

BSW

enable

configureterminal

iproute0.0.0.00.0.0.0192.168.10.1

exit

write

路由器添加NAT转换

MR

enable

configureterminal

interfaceg0/0

ipnatoutside

exit

interfaceg0/1

ipnatinside

exit

interfaceg0/2

ipnatinside

exit

ipnatpoolout1.1.1.31.1.1.3netmask255.255.255.255

access-list10permit192.168.0.00.0.255.255

ipnatinsidesourcelist10pooloutoverload

exit

write

---------------------------------------------------------------------------

BR

enable

configureterminal

interfaceg0/0

ipnatoutside

exit

interfaceg0/1

ipnatinside

exit

interfaceg0/2

ipnatinside

exit

ipnatpoolout2.2.2.32.2.2.3netmask255.255.255.255

access-list10permit192.168.0.00.0.255.255

ipnatinsidesourcelist10pooloutoverload

exit

write

配置清单

Internet

Internet#shrunn

Buildingconfiguration...

Currentconfiguration:

719bytes

!

version15.1

noservicetimestampslogdatetimemsec

noservicetimestampsdebugdatetimemsec

noservicepassword-encryption

!

hostnameInternet

!

!

!

!

!

!

!

!

ipcef

noipv6cef

!

!

!

!

licenseudipidCISCO2911/K9snFTX15240M09

!

!

!

!

!

!

!

!

!

!

!

spanning-treemodepvst

!

!

!

!

!

!

interfaceGigabitEthernet0/0

ipaddress8.8.8.254255.255.255.0

duplexauto

speedauto

!

interfaceGigabitEthernet0/1

ipaddress1.1.1.1255.255.255.0

duplexauto

speedauto

!

interfaceGigabitEthernet0/2

ipaddress2.2.2.1255.255.255.0

duplexauto

speedauto

!

interfaceVlan1

noipaddress

shutdown

!

ipclassless

!

ipflow-exportversion9

!

!

!

!

!

!

!

linecon0

!

lineaux0

!

linevty04

login

!

!

!

end

Internet#

MR

MR>EN

MR#showrunn

Buildingconfiguration...

Currentconfiguration:

1183bytes

!

version15.1

noservicetimestampslogdatetimemsec

noservicetimestampsdebugdatetimemsec

noservicepassword-encryption

!

hostnameMR

!

!

!

!

!

!

!

!

ipcef

noipv6cef

!

!

!

!

licenseudipidCISCO2911/K9snFTX152483N7

!

!

!

!

!

!

!

!

!

!

!

spanning-treemodepvst

!

!

!

!

!

!

interfaceGigabitEthernet0/0

ipaddress1.1.1.2255.255.255.0

ipnatoutside

duplexauto

speedauto

!

interfaceGigabitEthernet0/1

ipaddress192.168.10.2255.255.255.0

ipnatinside

duplexauto

speedauto

standbyversion2

standby11ip192.168.10.1

standby11priority120

standby11preempt

!

interfaceGigabitEthernet0/2

ipaddress192.168.20.2255.255.255.0

ipnatinside

duplexauto

speedauto

standbyversion2

standby21ip192.168.20.1

standby21priority120

standby21preempt

!

interfaceVlan1

noipaddress

shutdown

!

ipnatpoolout1.1.1.31.1.1.3netmask255.255.255.255

ipnatinsidesourcelist10pooloutoverload

ipclassless

iproute0.0.0.00.0.0.01.1.1.1

iproute192.168.0.0255.255.0.0192.168.10.254

!

ipflow-exportversion9

!

!

access-list10permit192.168.0.00.0.255.255

!

!

!

!

!

linecon0

!

lineaux0

!

linevty04

login

!

!

!

end

MR#

BR

BR>en

BR#shrunn

Buildingconfiguration...

Currentconfiguration:

1183bytes

!

version15.1

noservicetimestampslogdatetimemsec

noservicetimestampsdebugdatetimemsec

noservicepassword-encryption

!

hostnameBR

!

!

!

!

!

!

!

!

ipcef

noipv6cef

!

!

!

!

licenseudipidCISCO2911/K9snFTX15245NTA

!

!

!

!

!

!

!

!

!

!

!

spanning-treemodepvst

!

!

!

!

!

!

interfaceGigabitEthernet0/0

ipaddress2.2.2.2255.255.255.0

ipnatoutside

duplexauto

speedauto

!

interfaceGigabitEthernet0/1

ipaddress192.168.20.3255.255.255.0

ipnatinside

duplexauto

speedauto

standbyversion2

standby21ip192.168.20.1

standby21priority120

standby21preempt

!

interfaceGigabitEthernet0/2

ipaddress192.168.10.3255.255.255.0

ipnatinside

duplexauto

speedauto

standbyversion2

standby11ip192.168.10.1

standby11priority120

standby11preempt

!

interfaceVlan1

noipaddress

shutdown

!

ipnatpoolout2.2.2.32.2.2.3netmask255.255.255.255

ipnatinsidesourcelist10pooloutoverload

ipclassless

iproute0.0.0.00.0.0.02.2.2.1

iproute192.168.0.0255.255.0.0192.168.10.254

!

ipflow-exportversion9

!

!

access-list10permit192.168.0.00.0.255.255

!

!

!

!

!

linecon0

!

lineaux0

!

linevty04

login

!

!

!

end

BR#

MSW

MSW>en

MSW#shrunn

Buildingconfiguration...

Currentconfiguration:

3368bytes

!

version12.2

noservicetimestampslogdatetimemsec

noservicetimestampsdebugdatetimemsec

noservicepassword-encryption

!

hostnameMSW

!

!

!

!

!

!

!

iprouting

!

!

!

!

!

!

!

!

!

!

!

!

!

!

spanning-treemodepvst

!

!

!

!

!

!

interfaceFastEthernet0/1

switchporttrunkencapsulationdot1