在華為的交換機上,一般採用VRRP的技術來實現交換機的冗餘,但是VRRP本身無法感知故障、自動切換,因此需要配置VRRP與接口狀態聯動,以實現設備或者鏈路故障時,交換機自動切換,從而保證數據流量的正常轉發。
本文主要涉及華為交換機的以下幾個技術點:Eth-Trunk、VRRP、Super-VLAN。
Super VLAN又稱為VLAN聚合(VLAN Aggregation),一個Super VLAN中包含多個Sub VLAN,每個Sub VLAN是一個廣播域,不同Sub VLAN之間二層相互隔離,只能三層通訊。
看上去有點亂,像只醜陋的蟲子,不過大致還原了客戶環境,將就著看吧。
按照從上到下的配置順序,演示一下Eth-Trunk、VRRP和Super-VLAN相結合的配置。
路由器和兩台核心之間,跑的是OSPF協議,區域0。各交換機之間,都是雙鏈路,全部需要配置Eth-Trunk,有點煩,先規劃好再動手。
一、路由器的配置
interface GigabitEthernet0/0/0
ip address 1.1.1.1 255.255.255.252
#
interface GigabitEthernet0/0/1
ip address 2.1.1.1 255.255.255.252
#
interface GigabitEthernet0/0/2
ip address 222.92.xx.xx 255.255.255.248
#
ospf 1
area 0
network 1.1.1.1 0.0.0.0
network 2.1.1.1 0.0.0.0
network 222.92.xx.xx 0.0.0.0
二、核心交換機的配置
兩台交換機差不多,就是關鍵部位需要做一下小修改,所以只貼出來核心1的配置了:
Sysname Core1
#
interface GigabitEthernet0/0/1
ip address 1.1.1.2 255.255.255.252
#
vlan batch 11 to 15 101 to 180 301 to 305 400 //指創建VLAN
#
vlan 11
aggregate-vlan //配置聚合VLAN
access-vlan 101 to 116 301
vlan 12
aggregate-vlan
access-vlan 117 to 132 302
vlan 13
aggregate-vlan
access-vlan 133 to 148 303
vlan 14
aggregate-vlan
access-vlan 149 to 164 304
vlan 15
aggregate-vlan
access-vlan 165 to 180 305
#
interface Vlanif11
ip address 10.1.1.2 255.255.255.0
vrrp vrid 1 virtual-ip 10.1.1.1 //vrrp1的虛擬IP為10.1.1.1
vrrp vrid 1 priority 120 //vrrp1的優先級為120
vrrp vrid 1 preempt-mode timer delay 20 //vrrp1的搶占時間為20秒
vrrp vrid 1 track interface gigabitethernet1/0/1 reduced 100 //監視上行接口,一旦斷開就降優先級,讓核心2頂上
vrrp vrid 1 track interface eth-trunk 13 reduced 100 //監視下行接口,目的同上
vrrp advertise send-mode 301
#
interface Vlanif12
ip address 10.1.2.2 255.255.255.0
vrrp vrid 2 virtual-ip 10.1.2.1
vrrp vrid 2 priority 120
vrrp vrid 2 preempt-mode timer delay 20
vrrp vrid 2 track interface gigabitethernet1/0/1 reduced 100
vrrp vrid 2 track interface eth-trunk 13 reduced 100
vrrp advertise send-mode 302
#
interface Vlanif13
ip address 10.1.3.2 255.255.255.0
vrrp vrid 3 virtual-ip 10.1.3.1
vrrp vrid 3 priority 120
vrrp vrid 3 preempt-mode timer delay 20
vrrp vrid 3 track interface gigabitethernet1/0/1 reduced 100
vrrp vrid 3 track interface eth-trunk 13 reduced 100
vrrp advertise send-mode 303
#
interface Vlanif14
ip address 10.1.4.2 255.255.255.0
vrrp vrid 4 virtual-ip 10.1.4.1
vrrp vrid 4 priority 120
vrrp vrid 4 preempt-mode timer delay 20
vrrp vrid 4 track interface gigabitethernet1/0/1 reduced 100
vrrp vrid 4 track interfaceeth-trunk 13 reduced 100
vrrp advertise send-mode 304
#
interface Vlanif15
ip address 10.1.5.2 255.255.255.0
vrrp vrid 5 virtual-ip 10.1.5.1
vrrp vrid 5 priority 120
vrrp vrid 5 preempt-mode timer delay 20
vrrp vrid 5 track interface gigabitethernet1/0/1 reduced 100
vrrp vrid 5 track interface eth-trunk 13 reduced 100
vrrp advertise send-mode 305
#
interface Eth-Trunk12 //創建eth-trunk,其實是先創建再調用的,只是在配置文件裡面排在後面而已
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 301 to 305
mode lacp
#
interface GigabitEthernet1/0/2
eth-trunk 12
#
interface GigabitEthernet1/0/3
eth-trunk 12
#
interface Eth-Trunk13
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 301 to 305
mode lacp
#
interface GigabitEthernet1/0/4
eth-trunk 13
#
interface GigabitEthernet1/0/5
eth-trunk 13
#
ospf 1
area 0.0.0.0
network 1.1.1.2 0.0.0.0
network 10.1.1.0 0.0.0.255
network 10.1.2.0 0.0.0.255
network 10.1.3.0 0.0.0.255
network 10.1.4.0 0.0.0.255
network 10.1.5.0 0.0.0.255
#
相信大伙兒都看出來了,平時流量全都在Master上面跑呢,核心2隻是個打醬油的角色,哪天核心1出問題了,才輪到它上;
按照我平時的配置習慣,肯定不是這樣的,但是客戶說,這樣的優點是:核心2不會有損耗,哪天核心1跑累了,可以切換一下角色……好吧,只能說也挺有想法的。
三、匯聚交換機的配置
以下是配置命令,不是配置完成後的配置文件——配置的時候,先在記事本裡面寫好,然後直接粘貼到交換機上的,所以也就很方便地粘貼在文檔中了。
vlan bat 11 to 15 101 to 180
int Eth-Trunk 13
mode lacp-static
p l t
p t a v a
int g0/0/3
eth-trunk 13
int g0/0/4
eth-trunk 13
int Eth-Trunk 34
mode lacp-static
p l t
p t a v a
int g0/0/1
eth-trunk 34
int g0/0/2
eth-trunk 34
int Eth-Trunk 35
mode lacp-static
p l t
p t a v a
int g0/0/5
eth-trunk 35
int g0/0/6
eth-trunk 35
int Eth-Trunk 36
mode lacp-static
p l t
p t a v a
int g0/0/7
eth-trunk 36
int g0/0/8
eth-trunk 36
int Eth-Trunk 37
mode lacp-static
p l t
p t a v a
int g0/0/9
eth-trunk 37
int g0/0/10
eth-trunk 37
int Eth-Trunk 38
mode lacp-static
p l t
p t a v a
int g0/0/11
eth-trunk 38
int g0/0/12
eth-trunk 38
全是Eth-Trunk,頭都暈了,我配置之前,是先在圖上標好的,建議你也這麼做,不然很容易搞錯的;如下圖所示,紅色數字表示Eth-Trunk編號
四、接入交換機的配置
此處省略500字,反正就是繼續Eth-Trunk,然後劃分VLAN,終端接口配置為access……這個簡單,前面好多文章裡面都有。
總算配置完了,回頭再看上面的拓撲圖,感覺更像是架飛機,也許是因為帶上了紅色的標識?
文章來源: https://twgreatdaily.com/zh-mo/0d8bc0a6947af0d9f38a315396776e16.html