华为WLAN——AC VRRP双机热备-摩杜云开发者社区

VRRP双机热备

通过VRRP和HSB实现的双机热备份称为VRRP热备份。VRRP协议协商出主备AC，主AC管理AP并为AP提供业务服务，备AC做为备份接收主AC同步的信息并监控主AC的工作状态。工作状态的AC通过HSB功能将表项信息实时备份到备份状态的AC上，一旦工作中的主AC意外故障，备份状态下的备AC能迅速切换到主AC的角色顶替工作。

AP和VRRP虚拟IP地址建立一条CAPWAP链路，此时AP由主AC管理。

VRRP热备份只支持主备方式的组网，不支持负载分担方式的组网。

VRRP热备份流程包括主备协商、数据备份、主备倒换和主备回切几个阶段。

拓扑图

华为WLAN——AC VRRP双机热备_组网

配置

sysname SW1
#
vlan batch 10 254
#
interface Vlanif10
 ip address 10.1.1.254 255.255.255.0
 dhcp select interface
#
interface Vlanif254
 ip address 10.1.254.254 255.255.255.0
 dhcp select interface
 dhcp server excluded-ip-address 10.1.254.100
 dhcp server excluded-ip-address 10.1.254.200 10.1.254.253
#
interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
#
interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
#
interface GigabitEthernet0/0/3
 port link-type trunk
 port trunk pvid vlan 254
 port trunk allow-pass vlan 2 to 4094
#

sysname AC1
#
vlan batch 254
#
interface Vlanif254
 ip address 10.1.254.100 255.255.255.0
 vrrp vrid 1 virtual-ip 10.1.254.253
 vrrp vrid 1 priority 105
#
interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
#
hsb-service 0
 service-ip-port local-ip 10.1.254.100 peer-ip 10.1.254.200 local-data-port 1024
0 peer-data-port 10240
#
hsb-group 0
 track vrrp vrid 1 interface Vlanif254
 bind-service 0
 hsb enable
#
wlan
 security-profile name SEC_HUAWEI
  security wpa2 psk pass-phrase huawei@123 aes
 ssid-profile name SSID_HUAWEI
  ssid HUAWEI
 vap-profile name VAP_HUAWEI
  service-vlan vlan-id 10
  ssid-profile SSID_HUAWEI
  security-profile SEC_HUAWEI
 ap-id 1 ap-mac 00e0-fcb4-4810
  ap-name AP1
  radio 0
   vap-profile VAP_HUAWEI wlan 1
  radio 1
   vap-profile VAP_HUAWEI wlan 1
#
capwap source ip-address 10.1.254.253

sysname AC2
#
vlan batch 254
#
interface Vlanif254
 ip address 10.1.254.200 255.255.255.0
 vrrp vrid 1 virtual-ip 10.1.254.253
#
interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
#
hsb-service 0
 service-ip-port local-ip 10.1.254.200 peer-ip 10.1.254.100 local-data-port 1024
0 peer-data-port 10240
#
hsb-group 0
 track vrrp vrid 1 interface Vlanif254
 bind-service 0
 hsb enable
#
wlan
 security-profile name SEC_HUAWEI
  security wpa2 psk pass-phrase huawei@123 aes
 ssid-profile name SSID_HUAWEI
  ssid HUAWEI
 vap-profile name VAP_HUAWEI
  service-vlan vlan-id 10
  ssid-profile SSID_HUAWEI
  security-profile SEC_HUAWEI
 ap-id 1 ap-mac 00e0-fcb4-4810
  ap-name AP1
  radio 0
   vap-profile VAP_HUAWEI wlan 1
  radio 1
   vap-profile VAP_HUAWEI wlan 1
#
capwap source ip-address 10.1.254.253