LAB1 VRRP实验-摩杜云开发者社区

■实验拓扑

LAB1 VRRP实验_Time

■实验需求

1. 多厂商的网关冗余（VRPP）

2. 考虑上行/上上行/下行链路的之间的track

3. 生成树配置

4. VPC能访问R4的loopback口地址（8.8.8.8）

■实验步骤

▶思科路由器CISCO-R4

Router(config)#hostname CISCO-R4

CISCO-R4(config)#int e0/0

CISCO-R4(config-if)#ip address 14.1.1.4 255.255.255.0

CISCO-R4(config-if)#no shut

CISCO-R4(config-if)#int e0/1

CISCO-R4(config-if)#ip address 24.1.1.4 255.255.255.0

CISCO-R4(config-if)#no shut

CISCO-R4(config-if)#int lo0

CISCO-R4(config-if)#ip address 8.8.8.8 255.255.255.0

CISCO-R4(config-if)#do show ip int brief

Interface IP-Address OK? Method Status Protocol

Ethernet0/0 14.1.1.4 YES manual up up

Ethernet0/1 24.1.1.4 YES manual up up

Ethernet0/2 unassigned YES unset administratively down down

Ethernet0/3 unassigned YES unset administratively down down

Loopback0 8.8.8.8 YES manual up up

CISCO-R4(config-if)#exit

CISCO-R4(config)#router ospf 1

CISCO-R4(config-router)#network 0.0.0.0 0.0.0.0 area 0

CISCO-R4(config-router)#exit

CISCO-R4(config)#exit

CISCO-R4#wr

Building configuration...

[OK]

CISCO-R4#

▶思科核心交换机CISCO-Core1

Switch(config)#hostname CISCO-Core1

CISCO-Core1(config)#int e0/0

CISCO-Core1(config-if)#no switchport

CISCO-Core1(config-if)#ip address 14.1.1.1 255.255.255.0

CISCO-Core1(config-if)#no shut

CISCO-Core1(config-if)#int range e0/1 - 2

CISCO-Core1(config-if-range)#switchport trunk encapsulation dot1q

CISCO-Core1(config-if-range)#switchport mode trunk

CISCO-Core1(config-if-range)#exit

CISCO-Core1(config)#vlan 100

CISCO-Core1(config-vlan)#vlan 200

CISCO-Core1(config-vlan)#exit

CISCO-Core1(config)#int range e0/1-2

CISCO-Core1(config-if-range)#shut

CISCO-Core1(config-if-range)#exit

CISCO-Core1(config)#spanning-tree mode mst

CISCO-Core1(config)#spanning-tree mst configuration

CISCO-Core1(config-mst)#name glab

CISCO-Core1(config-mst)#instance 1 vlan 100

CISCO-Core1(config-mst)#instance 2 vlan 200

CISCO-Core1(config-mst)#exit

CISCO-Core1(config)#spanning-tree mst 1 root secondary

CISCO-Core1(config)#spanning-tree mst 2 root primary

CISCO-Core1(config)#exit

CISCO-Core1#show spanning-tree vlan 100

MST1

Spanning tree enabled protocol mstp

Root ID Priority 28673

Address aabb.cc00.1000

This bridge is the root

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 28673 (priority 28672 sys-id-ext 1)

Address aabb.cc00. 1000

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Interface Role Sts Cost Prio.Nbr Type

------------------- ---- --- --------- -------- --------------------------------

Et0/1 Desg FWD 2000000 128.2 P2p

Et0/2 Desg FWD 2000000 128.3 P2p

CISCO-Core1#show spanning-tree vlan 200

MST2

Spanning tree enabled protocol mstp

Root ID Priority 24578

Address aabb.cc00.1000

This bridge is the root

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

BridgeID Priority 24578 (priority24576sys-id-ext2)

Address aabb.cc00.1000

HelloTime 2 sec MaxAge20sec ForwardDelay15sec

Interface Role Sts Cost Prio.Nbr Type

------------------- ---- --- --------- -------- --------------------------------

Et0/1 Desg FWD 2000000 128.2 P2p

Et0/2 Desg FWD 2000000 128.3 P2p

CISCO-Core1(config)#int vlan 200

CISCO-Core1(config-if)#ip address 192.168.200.252 255.255.255.0

CISCO-Core1(config-if)#no shut

CISCO-Core1(config)#int vlan 100

CISCO-Core1(config-if)#ip address 192.168.100.252 255.255.255.0

CISCO-Core1(config-if)#no shut

CISCO-Core1(config)#router ospf 1

CISCO-Core1(config-router)#network 0.0.0.0 0.0.0.0 area 0

CISCO-Core1(config-router)#passive-interface vlan 100

CISCO-Core1(config-router)#passive-interface vlan 200

CISCO-Core1(config-router)#exit

CISCO-Core1#show ip ospf nei

Neighbor ID Pri State Dead Time Address Interface

8.8.8.8 1 FULL/DR 00:00:36 14.1.1.4 Ethernet0/0

CISCO-Core1#wr

Building configuration...

Compressed configuration from 1382 bytes to 879 bytes[OK]

CISCO-Core1#

▶华为核心交换机HUAWEI-Core2

[HUAWEI]sysname HUAWEI-Core2

[HUAWEI-Core2]int g1/0/0

[HUAWEI-Core2-GE1/0/0]undo portswitch

[HUAWEI-Core2-GE1/0/0]ip address 24.1.1.2 24

[HUAWEI-Core2-GE1/0/0]q

[HUAWEI-Core2]interface range g1/0/1 to g1/0/2

[HUAWEI-Core2-port-group]port link-type trunk

[HUAWEI-Core2-port-group]port trunk allow-pass vlan all

[HUAWEI-Core2-port-group]q

[HUAWEI-Core2]stp enable

[HUAWEI-Core2]stp mode mstp

[HUAWEI-Core2]stp region-configuration

[HUAWEI-Core2-mst-region]region-name glab

[HUAWEI-Core2-mst-region]instance 1 vlan 100

[HUAWEI-Core2-mst-region]instance 2 vlan 200

[HUAWEI-Core2-mst-region]q

[HUAWEI-Core2]stp instance 1 root primary

[HUAWEI-Core2]stp instance 2 root secondary

[HUAWEI-Core2]dis stp instance 1

MSTI 1 Global Information:

MSTI Bridge ID :0.701d-8b93-5265

MSTI RegRoot/IRPC :0.701d-8b93-5265 / 0 (This bridge is the root)

MSTI RootPortId :0.0

MSTI Root Type :Primary root

Master Bridge :32768.701d-8b93-5265

Cost to Master :0

TC received :5

TC count per hello :0

Time since last TC :0 days 0h:6m:45s

Number of TC :4

Last TC occurred :GE1/0/2

Topo Change Flag :0

MSTI 1 Port Information:

Port Id :2

Port Name :GE1/0/1

Port State :Forwarding

Port Role :Designated Port

Port Priority :128

Port Cost(Dot1T) :Cnotallow=auto / Active=199999

Desg. Bridge/Port :0.701d-8b93-5265 / 128.2

Port Times :RemHops 20

TC or TCN send :4

TC or TCN received :3

Last forwarding time : 2022/08/17 16:33:47 UTC

MSTI 1 Port Information:

Port Id :3

Port Name :GE1/0/2

Port State :Forwarding

Port Role :Designated Port

Port Priority :128

Port Cost(Dot1T) :Cnotallow=auto / Active=199999

Desg. Bridge/Port :0.701d-8b93-5265 / 128.3

Port Times :RemHops 20

TC or TCN send :4

TC or TCN received :2

Last forwarding time : 2022/08/17 16:33:47 UTC

[HUAWEI-Core2]dis stp instance 2

MSTI 2 Global Information:

MSTI Bridge ID :4096.701d-8b93-5265

MSTI RegRoot/IRPC :4096.701d-8b93-5265 / 0 (This bridge is the root)

MSTI RootPortId :0.0

MSTI Root Type :Secondary root

Master Bridge :32768.701d-8b93-5265

Cost to Master :0

TC received :8

TC count per hello :0

Time since last TC :0 days 0h:7m:1s

Number of TC :5

Last TC occurred :GE1/0/2

Topo Change Flag :0

MSTI 2 Port Information:

Port Id :2

Port Name :GE1/0/1

Port State :Forwarding

Port Role :Designated Port

Port Priority :128

Port Cost(Dot1T) :Cnotallow=auto / Active=199999

Desg. Bridge/Port :4096.701d-8b93-5265 / 128.2

Port Times :RemHops 20

[HUAWEI-Core2]undo stp instance 2 root secondary

[HUAWEI-Core2]stp instance 2 priority 32768

//将Core2上的优先级调至比Core1上的高后，再display后，发现Core2已不再是instance的根桥

[HUAWEI-Core2]int Vlanif 100

[HUAWEI-Core2-Vlanif100]ip address 192.168.100.253 24

[HUAWEI-Core2-Vlanif100]q

[HUAWEI-Core2]int Vlanif 200

[HUAWEI-Core2-Vlanif200]ip address 192.168.200.253 24

[HUAWEI-Core2-Vlanif200]q

[HUAWEI-Core2]ospf

[HUAWEI-Core2-ospf-1]area 0

[HUAWEI-Core2-ospf-1-area-0.0.0.0]network 0.0.0.0 0.0.0.0

[HUAWEI-Core2-ospf-1-area-0.0.0.0]q

[HUAWEI-Core2]q

<HUAWEI-Core2>save

▶思科接入交换机CISCO-Access

Switch(config)#hostname CISCO-Access

CISCO-Access(config)#vlan 100

CISCO-Access(config-vlan)#vlan 200

CISCO-Access(config-vlan)#int e0/2

CISCO-Access(config-if)#switchport host

CISCO-Access(config-if)#switchport access vlan 100

CISCO-Access(config-if)#no shut

CISCO-Access(config-if)#int e0/3

CISCO-Access(config-if)#switchport host

CISCO-Access(config-if)#switchport access vlan 200

CISCO-Access(config-if)#no shut

CISCO-Access(config)#spanning-tree mode mst

CISCO-Access(config)#spanning-tree mst configuration

CISCO-Access(config-mst)#name glab

CISCO-Access(config-mst)#instance 1 vlan 100

CISCO-Access(config-mst)#instance 2 vlan 200

CISCO-Access(config-mst)#exit

CISCO-Access#show spanning-tree vlan 100

MST1

Spanning tree enabled protocol mstp

Root ID Priority 1

Address 701d.8b93.5265

Cost 2000000

Port 2 (Ethernet0/1)

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 32769 (priority 32768 sys-id-ext 1)

Address aabb.cc00.3000

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Interface Role Sts Cost Prio.Nbr Type

------------------- ---- --- --------- -------- --------------------------------

Et0/0 Altn BLK 2000000 128.1 P2p

Et0/1 Root FWD 2000000 128.2 P2p

Et0/2 Desg FWD 2000000 128.3 P2p Edge

CISCO-Access#show spanning-tree vlan 200

MST2

Spanning tree enabled protocol mstp

Root ID Priority 24578

Address aabb.cc00.1000

Cost 2000000

Port 1 (Ethernet0/0)

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 32770 (priority 32768 sys-id-ext 2)

Address aabb.cc00.3000

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Interface Role Sts Cost Prio.Nbr Type

------------------- ---- --- --------- -------- --------------------------------

Et0/0 Root FWD 2000000 128.1 P2p

Et0/1 Altn BLK 2000000 128.2 P2p

Et0/3 Desg FWD 2000000 128.4 P2p Edge

CISCO-Access#

▶VPC1

VPCS> ip 192.168.100.1/24 192.168.100.253

Checking for duplicate address...

VPCS : 192.168.100.1 255.255.255.0 gateway 192.168.100.253

VPCS> ping 8.8.8.8

84 bytes from 8.8.8.8 icmp_seq=1 ttl=254 time=5.405 ms

84 bytes from 8.8.8.8 icmp_seq=2 ttl=254 time=3.955 ms

84 bytes from 8.8.8.8 icmp_seq=3 ttl=254 time=3.371 ms

84 bytes from 8.8.8.8 icmp_seq=4 ttl=254 time=3.779 ms

84 bytes from 8.8.8.8 icmp_seq=5 ttl=254 time=3.774 ms

VPCS>

▶VPC2

VPCS> ip 192.168.200.1/24 192.168.200.252

Checking for duplicate address...

VPCS : 192.168.200.1 255.255.255.0 gateway 192.168.200.252

VPCS> ping 8.8.8.8

84 bytes from 8.8.8.8 icmp_seq=1 ttl=254 time=1.743 ms

84 bytes from 8.8.8.8 icmp_seq=2 ttl=254 time=1.638 ms

84 bytes from 8.8.8.8 icmp_seq=3 ttl=254 time=1.810 ms

84 bytes from 8.8.8.8 icmp_seq=4 ttl=254 time=1.738 ms

84 bytes from 8.8.8.8 icmp_seq=5 ttl=254 time=1.632 ms

VPCS>

▶跨厂商的网关冗余（VLAN200的VRPP Active在CISCO-Core1上）

► Master:

CISCO-Core1(config)#int vlan 200

CISCO-Core1(config-if)#vrrp 200 ip 192.168.200.254

CISCO-Core1(config-if)#vrrp 200 priority 109

► Backup:

[HUAWEI-Core2]int Vlanif 200

[HUAWEI-Core2-Vlanif200]vrrp vrid 200 virtual-ip 192.168.200.254

[HUAWEI-Core2-Vlanif200]dis this

interface Vlanif200

ip address 192.168.200.253 255.255.255.0

vrrp vrid 200 virtual-ip 192.168.200.254

return

[HUAWEI-Core2-Vlanif200]dis vrrp

Type:

N: Normal

A: Administrator

M: Member

L: Load-Balance

LM: Load-Balance-Member

Total:2 Master:1 Backup:1 Non-active:0

VRID State Interface Type Virtual IP

----------------------------------------------------------------

200 Backup Vlanif200 N 192.168.200.254

[HUAWEI-Core2-Vlanif200]

▶跨厂商的网关冗余（VLAN100的VRPP Active在HUAWEI-Core2上）

► Master:

[HUAWEI-Core2]int vlan 100

[HUAWEI-Core2-Vlanif100]vrrp vrid 100 virtual-ip 192.168.100.254

[HUAWEI-Core2-Vlanif100]vrrp vrid 100 priority 101

► Backup:

CISCO-Core1(config)#int vlan 100

CISCO-Core1(config-if)#vrrp 100 ip 192.168.100.254

CISCO-Core1(config-if)#do show vrrp brief

Interface Grp Pri Time Own Pre State Master addr Group addr

Vl100 100 100 3609 Y Backup 192.168.100.253 192.168.100.254

Vl200 200 109 3574 Y Master 192.168.200.252 192.168.200.254

CISCO-Core1(config-if)#

[HUAWEI-Core2-Vlanif200]dis vrrp verbose

Vlanif200 | Virtual Router 200

State : Backup

Virtual IP : 192.168.200.254

Master IP : 192.168.200.252

PriorityRun : 100

PriorityConfig : 100

MasterPriority : 109

Preempt : YES Delay Time : 0s Remain : --

Hold Multiplier : 3

TimerRun : 1s

TimerConfig : 1s

Auth Type : NONE

Virtual MAC : 0000-5e00-01c8

Check TTL : YES

Config Type : Normal

Create Time : 2022-08-18 16:46:26

Last Change Time : 2022-08-18 17:09:05

Vlanif100 | Virtual Router 100

State : Master

Virtual IP : 192.168.100.254

Master IP : 192.168.100.253

PriorityRun : 100

PriorityConfig : 100

MasterPriority : 100

Preempt : YES Delay Time : 0s Remain : --

Hold Multiplier: 3

TimerRun : 1s

TimerConfig : 1s

Auth Type : NONE

Virtual MAC : 0000-5e00-0164

Check TTL : YES

Config Type : Normal

Create Time : 2022-08-18 16:33:09

Last Change Time : 2022-08-18 16:33:13

[HUAWEI-Core2-Vlanif200]

▶思科上下行链路的track（VLAN200的VRPP Active在CISCO-Core1上时）

► Master:

CISCO-Core1(config)#track 1 interface e0/0 line-protocol

CISCO-Core1(config-track)#track 2 interface e0/2 line-protocol

CISCO-Core1(config-track)#exit

CISCO-Core1(config)#ip sla 1

//远端链路使用sla

CISCO-Core1(config-ip-sla)#icmp-echo 14.1.1.4 source-ip 14.1.1.1

CISCO-Core1(config-ip-sla-echo)#exit

CISCO-Core1(config)#ip sla schedule 1 start-time now life forever

CISCO-Core1(config)#track 3 ip sla 1

//track3匹配远端链路

CISCO-Core1(config-track)#exit

CISCO-Core1(config-if)#vrrp 200 track 1 decrement 10

CISCO-Core1(config-if)#vrrp 200 track 2 decrement 10

CISCO-Core1(config-if)#vrrp 200 track 3 decrement 10

CISCO-Core1(config-if)#do show run int vlan 200

Building configuration...

Current configuration : 173 bytes

interface Vlan200

ip address 192.168.200.252 255.255.255.0

vrrp 200 ip 192.168.200.254

vrrp 200 priority 109

vrrp 200 track 1

vrrp 200 track 2

vrrp 200 track 3

end

CISCO-Core1(config-if)#

//将接口e0/0断开

CISCO-Core1(config)#int e0/0

CISCO-Core1(config-if)#shutdown

CISCO-Core1(config-if)#

*Aug 18 17:02:17.852: %TRACK-6-STATE: 1 interface Et0/0 line-protocol Up -> Down

*Aug 18 17:02:17.858: %OSPF-5-ADJCHG: Process 1, Nbr 8.8.8.8 on Ethernet0/0 from FULL to DOWN, Neighbor Down:

Interface down or detached

CISCO-Core1(config-if)#

*Aug 18 17:02:18.033: %VRRP-6-STATECHANGE: Vl200 Grp 200 state Master -> Backup

CISCO-Core1(config-if)#

*Aug 18 17:02:19.850: %LINK-5-CHANGED: Interface Ethernet0/0, changed state to administratively down

*Aug 18 17:02:20.854: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet0/0, changed state to down

CISCO-Core1(config-if)#do show vrrp brief

Interface Grp Pri Time Own Pre State Master addr Group addr

Vl200 200 99 3574 Y Backup 192.168.200.253 192.168.200.254

CISCO-Core1(config-if)#

[HUAWEI-Core2-Vlanif200]dis vrrp

Type:

N: Normal

A: Administrator

M: Member

L: Load-Balance

LM: Load-Balance-Member

Total:2 Master:1 Backup: Non-active:0

VRID State Interface Type Virtual IP

----------------------------------------------------------------

100 Master Vlanif100 N 192.168.100.254

200 Backup Vlanif200 N 192.168.200.254

[HUAWEI-Core2-Vlanif200]dis vrrp

Type:

N: Normal

A: Administrator

M: Member

L: Load-Balance

LM: Load-Balance-Member

Total:2 Master:2 Backup:0 Non-active:0

VRID State Interface Type Virtual IP

----------------------------------------------------------------

100 Master Vlanif100 N 192.168.100.254

200 Master Vlanif200 N 192.168.200.254

[HUAWEI-Core2-Vlanif200]

VPCS> ip 192.168.200.1/24 192.168.200.254

Checking for duplicate address...

VPCS : 192.168.200.1 255.255.255.0 gateway 192.168.200.254

VPCS> trace 8.8.8.8

trace to 8.8.8.8, 8 hops max, press Ctrl+C to stop

//接口e0/0没down之前，VPC2通过200.252上去

1 192.168.200.252 0.903 ms 0.811 ms 1.009 ms

2 *14.1.1.4 1.599 ms (ICMP type:3, code:3, Destination port unreachable) *

VPCS> trace 8.8.8.8

trace to 8.8.8.8, 8 hops max, press Ctrl+C to stop

//接口e0/0没down之后，VPC2通过200.253上去

1 192.168.200.253 21.694 ms 3.758 ms 4.592 ms

2 *24.1.1.4 4.666 ms (ICMP type:3, code:3, Destination port unreachable) *

▶华为上下行链路的track（VLAN100的VRPP Active在HUAWEI-Core2上时）--nqa/bfd(链路检测)

► Master:

[HUAWEI-Core2]nqa test-instance admin icmp

[HUAWEI-Core2-nqa-admin-icmp]test-type icmp

[HUAWEI-Core2-nqa-admin-icmp]destination-address ipv4 24.1.1.4

[HUAWEI-Core2-nqa-admin-icmp]frequency 10

[HUAWEI-Core2-nqa-admin-icmp]interval seconds 3

[HUAWEI-Core2-nqa-admin-icmp]start now

[HUAWEI-Core2-nqa-admin-icmp]q

[HUAWEI-Core2]bfd

[HUAWEI-Core2-bfd]bfd 1 bind peer-ip 24.1.1.4 source-ip 24.1.1.2

//配置BFD会话的本地标识符 //配置BFD会话的远端标识符

[HUAWEI-Core2-bfd-session-1]discriminator local 1

[HUAWEI-Core2-bfd-session-1]discriminator remote 2

[HUAWEI-Core2-bfd-session-1]dis this

bfd 1 bind peer-ip 24.1.1.4 source-ip 24.1.1.2

discriminator local 1

discriminator remote 2

return

[HUAWEI-Core2-bfd-session-1]q

[HUAWEI-Core2]int vlan 100

[HUAWEI-Core2-Vlanif100]vrrp vrid 100 track nqa admin icmp reduce 30

[HUAWEI-Core2-Vlanif100]vrrp vrid 100 track bfd 1 reduce 30

[HUAWEI-Core2-Vlanif100]vrrp vrid 100 track interface g1/0/0 reduce 30

[HUAWEI-Core2-Vlanif100]vrrp vrid 100 track interface g1/0/2 reduce 30

[HUAWEI-Core2-Vlanif100]dis this

interface Vlanif100

ip address 192.168.100.253 255.255.255.0

vrrp vrid 100 virtual-ip 192.168.100.254

vrrp vrid 100 track interface GE1/0/0 reduce 30

vrrp vrid 100 track interface GE1/0/2 reduce 30

vrrp vrid 100 track bfd session-name 1 reduce 30

vrrp vrid 100 track nqa admin icmp reduce 30

return

[HUAWEI-Core2-Vlanif100]q

[HUAWEI-Core2]dis vrrp 100

Type:

N: Normal

A: Administrator

M: Member

L: Load-Balance

LM: Load-Balance-Member

Total:1 Master:0 Backup:1 Non-active:0

VRID State Interface Type Virtual IP

----------------------------------------------------------------

100 Backup Vlanif100 N 192.168.100.254

[HUAWEI-Core2]dis vrrp 100 verbose

Vlanif100 | Virtual Router 100

State : Backup

Virtual IP : 192.168.100.254

Master IP : 192.168.100.252

PriorityRun : 70

PriorityConfig : 100

MasterPriority : 100

Preempt : YES Delay Time : 0s Remain : --

Hold Multiplier: 3

TimerRun : 1s

TimerConfig : 1s

Auth Type : NONE

Virtual MAC : 0000-5e00-0164

Check TTL : YES

Config Type : Normal

Track IF : GE1/0/0 Priority Reduced : 30

IF State : UP

Track IF : GE1/0/2 Priority Reduced : 30

IF State : UP

Track BFD : 1 Priority Reduced : 30

BFD-session State : DOWN

Track NQA : admin icmp Priority Reduced : 30

NQA State : success

Create Time : 2022-08-18 16:33:09

Last Change Time : 2022-08-18 18:00:10

[HUAWEI-Core2]

//确认华为交换机优先级降低后，VLAN100的Master已切换至CISCO-Core1

[HUAWEI-Core2]dis vrrp

Type:

N: Normal

A: Administrator

M: Member

L: Load-Balance

LM: Load-Balance-Member

Total:2 Master:0 Backup:2 Non-active:0

VRID State Interface Type Virtual IP

----------------------------------------------------------------

100 Backup Vlanif100 N 192.168.100.254

200 Backup Vlanif200 N 192.168.200.254

[HUAWEI-Core2]

CISCO-Core1#show vrrp bri

Interface Grp Pri Time Own Pre State Master addr Group addr

Vl100 100 100 3609 Y Master 192.168.100.252 192.168.100.254

Vl200 200 109 3574 Y Master 192.168.200.252 192.168.200.254

CISCO-Core1#

■实验总结

1、STP和VRRP设计的Active不是同一台核心。

i. 核心之间是二层链路，trunk allow all vlan，通，通过trunk透传

ii. 核心之间是二层链路，不允许vlan通过，STP vlan 200失败，原来被block的接口就会变成forwarding转发数据

iii. 核心之间是三层链路，不存在环路，access上的所有接口都能转发数据

2、 VRRP可以使用2个地址，但是做track的时候还是需要3个地址

3、华为核心交换机上配置网关冗余（nqa、bfd）

NQA：（Network Quality Analysis）指一种实时的网络性能探测和统计技术（单向做）

※跟sla很像，使用icmp、源目ip地址

BFD：（Bidirectional Forwarding Detection，双向转发检测）是一种高速故障检测机制（双向做）

※nqa是秒级的，bfd是毫秒级的，相对来说bfd使用更多

■问题汇总

▶仅nqa生效的场合

如实验步骤中所示，华为交换机上在配置完nqa和bfd后。在接口没有down的情况下，

VLAN 100的VRRP Master就已经切换到思科Core1上了。

[HUAWEI-Core2]display vrrp

Type:

N: Normal

A: Administrator

M: Member

L: Load-Balance

LM: Load-Balance-Member

Total:2 Master:0 Backup:2 Non-active:0

VRID State Interface Type Virtual IP

----------------------------------------------------------------

100 Backup Vlanif100 N 192.168.100.254

200 Backup Vlanif200 N 192.168.200.254

[HUAWEI-Core2]display vrrp verbose

Vlanif200 | Virtual Router 200

State : Backup

Virtual IP : 192.168.200.254

Master IP : 192.168.200.252

PriorityRun : 100

PriorityConfig : 100

MasterPriority : 109

Preempt : YES Delay Time : 0s Remain : --

Hold Multiplier: 3

TimerRun : 1s

TimerConfig : 1s

Auth Type : NONE

Virtual MAC : 0000-5e00-01c8

Check TTL : YES

Config Type : Normal

Create Time : 2022-08-18 16:46:26

Last Change Time : 2022-08-18 19:02:05

Vlanif100 | Virtual Router 100

State

Virtual IP : 192.168.100.254

Master IP : 192.168.100.252

PriorityRun : 71

PriorityConfig : 101

MasterPriority : 100

Preempt : YES Delay Time : 0s Remain : --

Hold Multiplier : 3

TimerRun : 1s

TimerConfig : 1s

Auth Type : NONE

Virtual MAC : 0000-5e00-0164

Check TTL : YES

Config Type : Normal

Track IF : GE1/0/0 Priority Reduced : 30

IF State : UP

Track IF : GE1/0/2 Priority Reduced : 30

IF State : UP

Track BFD : 1 Priority Reduced : 30

BFD-session State : DOWN

Track NQA : admin icmp Priority Reduced : 30

NQA State : success

Create Time : 2022-08-18 16:33:09

Last Change Time : 2022-08-18 19:47:14

[HUAWEI-Core2]dis ip int bri

*down: administratively down

!down: FIB overload down

^down: standby

(l): loopback

(s): spoofing

(d): Dampening Suppressed

The number of interface that is UP in Physical is 5

The number of interface that is DOWN in Physical is 0

The number of interface that is UP in Protocol is 4

The number of interface that is DOWN in Protocol is 1

Interface IP Address/Mask Physical Protocol VPN

GE1/0/0 24.1.1.2/24 up up --

MEth0/0/0 unassigned up down --

NULL0 unassigned up up(s) --

Vlanif100 192.168.100.253/24 up up --

Vlanif200 192.168.200.253/24 up up --

[HUAWEI-Core2]

CISCO-Core1#show vrrp brief

Interface Grp Pri Time Own Pre State Master addr Group addr

Vl100 100 100 3609 Y Master 192.168.100.252 192.168.100.254

Vl200 200 109 3574 Y Master 192.168.200.252 192.168.200.254

CISCO-Core1#

★理论上，down掉华为交换机的g1/0/0或g1/0/2接口，导致链路状态发生改变后，原Master的优先级下降

从而导致切换成Backup状态。

现在好像是vlan100接口下只要调用nqa和bfd后，优先级立即会减30，从而导致切换。

[HUAWEI-Core2]int Vlanif 100

[HUAWEI-Core2-Vlanif100]dis this

interface Vlanif100

ip address 192.168.100.253 255.255.255.0

vrrp vrid 100 virtual-ip 192.168.100.254

vrrp vrid 100 priority 101

vrrp vrid 100 track interface GE1/0/0 reduce 30

vrrp vrid 100 track interface GE1/0/2 reduce 30

vrrp vrid 100 track bfd session-name 1 reduce 30

vrrp vrid 100 track nqa admin icmp reduce 30

return

[HUAWEI-Core2-Vlanif100]undo vrrp vrid 100 track bfd session-name 1

[HUAWEI-Core2-Vlanif100]dis vrrp

Type:

N: Normal

A: Administrator

M: Member

L: Load-Balance

LM: Load-Balance-Member

Total:2 Master:1 Backup:1 Non-active:0

VRID State Interface Type Virtual IP

----------------------------------------------------------------

100 Master Vlanif100 N 192.168.100.254

200 Backup Vlanif200 N 192.168.200.254

[HUAWEI-Core2-Vlanif100]

[HUAWEI-Core2-Vlanif100]dis vrrp verbose

Vlanif200 | Virtual Router 200

State : Backup

Virtual IP : 192.168.200.254

Master IP : 192.168.200.252

PriorityRun : 100

PriorityConfig : 100

MasterPriority : 109

Preempt : YES Delay Time : 0s Remain : --

Hold Multiplier: 3

TimerRun : 1s

TimerConfig : 1s

Auth Type : NONE

Virtual MAC : 0000-5e00-01c8

Check TTL : YES

Config Type : Normal

Create Time : 2022-08-18 16:46:26

Last Change Time : 2022-08-18 19:02:05

Vlanif100 | Virtual Router 100

State : Master

Virtual IP : 192.168.100.254

Master IP : 192.168.100.253

PriorityRun : 101

PriorityConfig : 101

MasterPriority : 101

Preempt : YES Delay Time : 0s Remain : --

Hold Multiplier : 3

TimerRun : 1s

TimerConfig : 1s

Auth Type : NONE

Virtual MAC : 0000-5e00-0164

Check TTL : YES

Config Type : Normal

Track IF : GE1/0/0 Priority Reduced : 30

IF State : UP

Track IF : GE1/0/2 Priority Reduced : 30

IF State : UP

Track NQA : admin icmp Priority Reduced : 30

NQA State : success

Create Time : 2022-08-18 16:33:09

Last Change Time : 2022-08-18 20:21:00

[HUAWEI-Core2-Vlanif100]

vlan 100接口下不要调用bfd，就正常了。然后正常down g1/0/0或g1/0/2接口后，优先级也能正常下降。

基于此，nqa和bfd是不是不太可能会同时配置，若同时配置的话，可能会发生上述现象？

------------------------------------------------------------------------------------------------------------------------------------------

▶仅bdf生效的场合

[HUAWEI-Core2]bfd

[HUAWEI-Core2]bfd 1 bind peer-ip 24.1.1.4 interface g1/0/0 one-arm-echo

[HUAWEI-Core2-bfd-session-1]discriminator local 1

[HUAWEI-Core2-bfd-session-1]q

[HUAWEI-Core2]in vlan 100

[HUAWEI-Core2-Vlanif100]vrrp vrid 100 track bfd 1 reduce 30

[HUAWEI-Core2-Vlanif100]dis this

interface Vlanif100

ip address 192.168.100.253 255.255.255.0

vrrp vrid 100 virtual-ip 192.168.100.254

vrrp vrid 100 priority 101

vrrp vrid 100 track interface GE1/0/0 reduce 30

vrrp vrid 100 track interface GE1/0/2 reduce 30

vrrp vrid 100 track bfd session-name 1 reduce 30

return

[HUAWEI-Core2-Vlanif100]

[HUAWEI-Core2-Vlanif100]dis vrrp

Type:

N: Normal

A: Administrator

M: Member

L: Load-Balance

LM: Load-Balance-Member

Total:2 Master:1 Backup:1 Non-active:0

VRID State Interface Type Virtual IP

----------------------------------------------------------------

100 Master Vlanif100 N 192.168.100.254

200 Backup Vlanif200 N 192.168.200.254

[HUAWEI-Core2-Vlanif100]dis vrrp verbose

Vlanif200 | Virtual Router 200

State : Backup

Virtual IP : 192.168.200.254

Master IP : 192.168.200.252

PriorityRun : 100

PriorityConfig : 100

MasterPriority : 109

Preempt : YES Delay Time : 0s Remain : --

Hold Multiplier : 3

TimerRun : 1s

TimerConfig : 1s

Auth Type : NONE

Virtual MAC : 0000-5e00-01c8

Check TTL : YES

Config Type : Normal

Create Time : 2022-08-18 16:46:26

Last Change Time : 2022-08-19 03:06:17

Vlanif100 | Virtual Router 100

State : Master

Virtual IP : 192.168.100.254

Master IP : 192.168.100.253

PriorityRun : 101

PriorityConfig : 101

MasterPriority : 101

Preempt : YES Delay Time : 0s Remain : --

Hold Multiplier : 3

TimerRun : 1s

TimerConfig : 1s

Auth Type : NONE

Virtual MAC : 0000-5e00-0164

Check TTL : YES

Config Type : Normal

Track IF : GE1/0/0 Priority Reduced : 30

IF State : UP

Track IF : GE1/0/2 Priority Reduced : 30

IF State : UP

Track BFD : 1 Priority Reduced : 30

BFD-session State : UP

Create Time : 2022-08-18 16:33:09

Last Change Time : 2022-08-19 11:54:38

//down掉g1/0/2接口，查看bfd是否生效

[HUAWEI-Core2]int g1/0/2

[HUAWEI-Core2-GE1/0/2]shutdown

[HUAWEI-Core2-GE1/0/2]dis vrrp verbose

Vlanif200 | Virtual Router 200

State : Backup

Virtual IP : 192.168.200.254

Master IP : 192.168.200.252

PriorityRun : 100

PriorityConfig : 100

MasterPriority : 109

Preempt : YES Delay Time : 0s Remain : --

Hold Multiplier: 3

TimerRun : 1s

TimerConfig : 1s

Auth Type : NONE

Virtual MAC : 0000-5e00-01c8

Check TTL : YES

Config Type : Normal

Create Time : 2022-08-18 16:46:26

Last Change Time : 2022-08-19 03:06:17

Vlanif100 | Virtual Router 100

//由Master→Backup，且优先级降至71

State : Backup

Virtual IP : 192.168.100.254

Master IP : 192.168.100.252

PriorityRun : 71

PriorityConfig : 101

MasterPriority : 100

Preempt : YES Delay Time : 0s Remain : --

Hold Multiplier : 3

TimerRun : 1s

TimerConfig : 1s

Auth Type : NONE

Virtual MAC : 0000-5e00-0164

Check TTL : YES

Config Type : Normal

Track IF : GE1/0/0 Priority Reduced : 30

IF State : UP

Track IF : GE1/0/2 Priority Reduced : 30

IF State : DOWN

Track BFD : 1 Priority Reduced : 30

BFD-session State : UP

Create Time : 2022-08-18 16:33:09

Last Change Time : 2022-08-19 12:10:39

[HUAWEI-Core2-GE1/0/2]