Configuring Layer 3 Redundancy with VRRP

实验目的：

1、掌握第三层网关冗余协议的VRRP配置。

 

实验拓扑图：

 

实验步骤及要求：

1、本实验可以使用三层交换机完成,也可以使用路由器完成,在使用路由器时需要注意IOS的版本,确认支持HSRP协议。

2、配置PC1与PC2路由器，将其模拟成主机，配置如下：

PC1(config)#no ip routing

PC1(config)#

PC1(config)#interface fastEthernet 0/0

PC1(config-if)#ip address 192.168.1.10 255.255.255.0

PC1(config-if)#no cdp enable

PC1(config-if)#no shutdown

PC1(config-if)#exit

PC1(config)#

PC1(config)#[stanley1] 

PC1(config)#exit

PC1#

 

PC2(config)#no ip routing

PC2(config)#

PC2(config)#interface fastEthernet 0/0

PC2(config-if)#ip address 192.168.1.20 255.255.255.0

PC2(config-if)#no cdp enable

PC2(config-if)#no shutdown

PC2(config-if)#exit

PC2(config)#

PC2(config)#[stanley2] 

PC2(config)#exit

PC2#

3、首先在PC1和PC2上使用ping和traceroute命令，确认网络是否可达：

PC1#ping 10.1.1.1

 

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.1.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 48/60/72 ms

PC1#

PC1#traceroute 10.1.1.1

 

Type escape sequence to abort.

Tracing the route to 10.1.1.1

 

 [stanley3] 

PC1#

 

PC2#ping 10.1.1.1  

 

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.1.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 72/293/1084 ms

PC2#

PC2#traceroute 10.1.1.1

 

Type escape sequence to abort.

Tracing the route to 10.1.1.1

 

  [stanley4] 

PC2#

4、将R1路由器的FA0/0接口，置为down状态：

R1(config)#interface fastEthernet 0/0

R1(config-if)#shutdown

R1(config-if)#

5、再次在R1和R2上使用ping和traceroute命令测试：

C1#ping 10.1.1.1

 

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.1.1, timeout is 2 seconds:

.....

Success rate is 0 percent (0/5)

PC1#

PC1#traceroute 10.1.1.1

 

Type escape sequence to abort.

Tracing the route to 10.1.1.1

 

  2  *  *  *

  3  *  *  *

[stanley5] ………

 

PC2#ping 10.1.1.1

 

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.1.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 72/128/160 ms

PC2#

PC2#tr

PC2#traceroute 10.1.1.1

 

Type escape sequence to abort.

Tracing the route to 10.1.1.1

 

  [stanley6] 

PC2#

6、虽然有两台路由器都可以到达目标网络，但是默认情况下，并没有充分利用冗余设备，因此当网络单点出错时，必然会引起部分用户无法访问网络。

7、为了解决这一问题，在R1和R2上配置VRRP协议，配置如下：

R1(config)#interface fastEthernet 0/0

R1(config-if)#vrrp 1 priority 200

R1(config-if)#vrrp 1 preempt

[stanley7] R1(config-if)#

R1(config-if)#vrrp 2 priority 100

R1(config-if)#vrrp 2 preempt

[stanley8] R1(config-if)#exit

R1(config)#

 

R2(config)#interface fastEthernet 0/0

R2(config-if)#vrrp 1 ip 192.168.1.1

R2(config-if)#[stanley9] 

R2(config-if)#vrrp 1 preempt

R2(config-if)#

R2(config-if)#vrrp 2 ip 192.168.1.2

R2(config-if)#[stanley10] 

R2(config-if)#vrrp 2 preempt

R2(config-if)#exit

R2(config)#exit

R2#

8、通过查看两台路由器的VRRP组汇总信息，确认不同路由器的组身份：

R1#show vrrp

FastEthernet0/0 - Group 1  

 [stanley11] 

  Virtual IP address is 192.168.1.1

  Virtual MAC address is 0000.5e00.0101

  Advertisement interval is 1.000 sec

  Preemption enabled

  Priority is 255 (cfgd 200)

  Master Router is 192.168.1.1 (local), priority is 255

  Master Advertisement interval is 1.000 sec

  Master Down interval is 3.003 sec

 

FastEthernet0/0 - Group 2 

  State is Backup 

  Virtual IP address is 192.168.1.2

  Virtual MAC address is 0000.5e00.0102

  Advertisement interval is 1.000 sec

  Preemption enabled

  Priority is 100

  Master Router is 192.168.1.2, priority is 255

  Master Advertisement interval is 1.000 sec

  Master Down interval is 3.609 sec (expires in 3.349 sec)

 

R1#

 

R2#show vrrp

FastEthernet0/0 - Group 1  

  State is Backup 

  Virtual IP address is 192.168.1.1

  Virtual MAC address is 0000.5e00.0101

  Advertisement interval is 1.000 sec

  Preemption enabled

  Priority is 100

  Master Router is 192.168.1.1, priority is 255

  Master Advertisement interval is 1.000 sec

  Master Down interval is 3.609 sec (expires in 2.773 sec)

 

FastEthernet0/0 - Group 2  

 [stanley12] 

  Virtual IP address is 192.168.1.2

  Virtual MAC address is 0000.5e00.0102

  Advertisement interval is 1.000 sec

  Preemption enabled

  Priority is 255 (cfgd 200)

  Master Router is 192.168.1.2 (local), priority is 255

  Master Advertisement interval is 1.000 sec

  Master Down interval is 3.003 sec

 

R2#

9、再次把R1路由器的Fa0/0接口置为DOWN状态， 两台路由器将会出现如下信息：

R1(config)#interface fastEthernet 0/0

R1(config-if)#shutdown

R1(config-if)#

*Jul  8 21:49:59.135: %VRRP-6-STATECHANGE: Fa0/0 Grp 2 state Backup -> Init[stanley13] 

 

R2#

[stanley14] 

R2#

10、再次在R1和R2上使用ping和traceroute确认：

PC1#ping 10.1.1.1

 

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.1.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 48/78/96 ms

PC1#

PC1#traceroute 10.1.1.1

 

Type escape sequence to abort.

Tracing the route to 10.1.1.1

 

  [stanley15] 

PC1#

 

PC2#ping 10.1.1.1      

 

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.1.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 72/172/452 ms

PC2#

PC2#traceroute 10.1.1.1

 

Type escape sequence to abort.

Tracing the route to 10.1.1.1

 

  1 192.168.1.2 132 msec *  168 msec

PC2#

11、由于在网络中启用了两个不同的VRRP组，所以最大限度上确保了网络冗余。同时为了更好的观察VRRP的工作过程，建议在R1和R2路由器上使用扩展的PING命令持续向目标网络发送数据包。同时在R1和R2路由器使用如下命令进行调试，具体不再列出：

debug vrrp events

debug vrrp packets

12、实验完成。