1、鏈路聚合及VRRP基礎鮑中帥講師介紹鮑中帥三年講師、兩年金融行業(yè)網(wǎng)絡維護經(jīng)驗，熟悉電力與金融網(wǎng)絡情況，擅長復雜網(wǎng)絡條件下的故障分析與解決；目前已經(jīng)撰寫并發(fā)布的網(wǎng)絡相關操作手冊及配置指導文檔二十多篇，視頻教程三十多集；HCIE R&S (2083)、CCIE SP（43048） TEST鏈路聚合鏈路聚合簡介鏈路聚合的分類鏈路聚合的基本配置目錄鏈路聚合的作用增加鏈路帶寬提供鏈路可靠性Link AggregationServerPCSWASWBPCAPCB聚合鏈路負載分擔原理SWASWB聚合后鏈路基于流進行負載分擔鏈路聚合簡介鏈路聚合的分類鏈路聚合的基本配置目錄鏈路聚合分類靜態(tài)聚合 雙方系統(tǒng)間不使用

2、聚合協(xié)議來協(xié)商鏈路信息缺省為該類型動態(tài)聚合 雙方系統(tǒng)間使用聚合協(xié)議來協(xié)商鏈路信息LACP（Link Aggregation Control Protocol，鏈路聚合控制協(xié)議）是一種基于IEEE802.3ad標準的、能夠?qū)崿F(xiàn)鏈路動態(tài)聚合的協(xié)議鏈路聚合簡介鏈路聚合的分類鏈路聚合的基本配置目錄創(chuàng)建聚合端口 將以太網(wǎng)端口加入聚合組Switch interface bridge-aggregation interface-numberSwitch-Ethernet1/0/1 port link-aggregation group number靜態(tài)聚合配置鏈路聚合配置舉例E1/0/1E1/0/3E1/0

3、/3E1/0/1E1/0/2E1/0/2SWA interface bridge-aggregation 1SWA-Ethernet1/0/1 port link-aggregation group 1SWA-Ethernet1/0/2 port link-aggregation group 1SWA-Ethernet1/0/3 port link-aggregation group 1SWB interface bridge-aggregation 1SWB-Ethernet1/0/1 port link-aggregation group 1SWB-Ethernet1/0/2 port l

4、ink-aggregation group 1SWB-Ethernet1/0/3 port link-aggregation group 1SWASWB鏈路聚合顯示及維護display link-aggregation summary Aggregation Interface Type:BAGG - Bridge-Aggregation, RAGG - Route-AggregationAggregation Mode: S - Static, D - DynamicLoadsharing Type: Shar - Loadsharing, NonS - Non-LoadsharingAct

5、or System ID: 0 x8000, 000f-e267-6c6aAGG AGG Partner ID Select Unselect ShareInterface Mode Ports Ports Type-BAGG1 S none 3 0 Shar聚合端口ID為1聚合組中包含有3個端口聚合方式為靜態(tài)聚合組中端口是負載分擔類型VRRPVRRP簡介VRRP工作原理VRRP協(xié)議報文和狀態(tài)機配置VRRP目錄VRRP背景如果網(wǎng)關出現(xiàn)故障，則內(nèi)網(wǎng)設備無法訪問外網(wǎng)Gateway:10.100.10.1Gateway:10.100.10.1Gateway:10.100.10.1Gateway:10

6、.100.10.1IP address 10.100.10.1Actual IP address 10.100.10.12Actual IP address 10.100.10.13Actual IP address 10.100.10.14Actual IP address 10.100.10.11InternetVRRP主備備份VRID 1:Priority 110:Virtual IP 10.100.10.1Gateway:10.100.10.1Gateway:10.100.10.1Gateway:10.100.10.1Gateway:10.100.10.1Actual IP addre

7、ss 10.100.10.3Virtual IP address 10.100.10.4Actual IP address 10.100.10.11Actual IP address 10.100.10.12Actual IP address 10.100.10.13Actual IP address 10.100.10.14VRID 1:Priority 100:Virtual IP 10.100.10.1MasterBackupInternetVRRP將可以將多個路由器加入到備份組中，形成一臺虛擬路由器，承擔網(wǎng)關功能只要備份組中仍有一臺路由正常工作，虛擬路由器就仍然正常工作VRRP負載分擔

8、VRRP將多臺路由器同時承擔業(yè)務，形成多臺虛擬路由器，分擔內(nèi)網(wǎng)與外網(wǎng)之間的流量VRID 1:Priority 110:Virtual IP 10.100.10.1Gateway:10.100.10.1Gateway:10.100.10.1Gateway:10.100.11.1Gateway:10.100.11.1Actual IP address 10.100.10.3Virtual IP address 10.100.10.4Actual IP address 10.100.10.11Actual IP address 10.100.10.12Actual IP address 10.100

9、.11.11Actual IP address 10.100.11.12VRID 1:Priority 100:Virtual IP 10.100.10.1MasterBackupBackupMasterVirtual IP address 10.100.11.4VRID 2:Priority 110:Virtual IP 10.100.11.1Actual IP address 10.100.11.3VRID 2:Priority 100:Virtual IP 10.100.11.1InternetVRRP簡介VRRP工作原理VRRP協(xié)議報文和狀態(tài)機配置VRRP目錄VRRP概述RFC 376

10、8定義的VRRPv2是一種容錯協(xié)議，在提高可靠性的同時，簡化了主機的配置。VRRP協(xié)議報文使用固定的組播地址224.0.0.18進行發(fā)送。虛擬路由器由LAN上唯一的Virtual Router ID標識。并具有虛MAC地址：00-00-5E-00-01-vrid。VRRP相關概念MASTER路由器處于VRRP備份組1，VRRP優(yōu)先級為110，虛IP地址為10.100.10.1，為IP地址擁有者，默認VRRP搶占模式。VRID 1:Priority 110:Virtual IP 10.100.10.1Gateway:10.100.10.1Gateway:10.100.10.1Gateway:10

11、.100.10.1Gateway:10.100.10.1Actual IP address 10.100.10.1Virtual IP address 10.100.10.4Actual IP address 10.100.10.11Actual IP address 10.100.10.12Actual IP address 10.100.10.13Actual IP address 10.100.10.14VRID 1:Priority 100:Virtual IP 10.100.10.1MasterBackupInternetVRRP選舉當路由器使能VRRP功能后，會根據(jù)優(yōu)先級確定自己在

12、備份組中的角色。當優(yōu)先級變化后，根據(jù)VRRP模式確認VRRP狀態(tài)。VRID 1:Priority 110:Virtual IP 10.100.10.1VRID 1:Priority 100:Virtual IP 10.100.10.1Actual IP address 10.100.10.3Virtual IP address 10.100.10.4MasterBackupInternetReduce 30Pri=110Pri=100Pri=80Pri=100BackupMaster非搶占Pri=80Pri=100Reduce 30Backup搶占MasterVRRP監(jiān)視接口功能當Master

13、路由器連接上行鏈路的接口處于Down狀態(tài)時，路由器主動降低自己的優(yōu)先級，使得備份組內(nèi)重新選擇Master，承擔轉(zhuǎn)發(fā)任務。VRID 1:Priority 110:Virtual IP 10.100.10.1Gateway:10.100.10.1Gateway:10.100.10.1Gateway:10.100.10.1Gateway:10.100.10.1Actual IP address 10.100.10.3Virtual IP address 10.100.10.4Actual IP address 10.100.10.11Actual IP address 10.100.10.12Act

14、ual IP address 10.100.10.13Actual IP address 10.100.10.14VRID 1:Priority 100:Virtual IP 10.100.10.1MasterBackupInternetReduce 30VRRP簡介VRRP工作原理VRRP協(xié)議報文和狀態(tài)機配置VRRP目錄VRRPv2協(xié)議報文格式VRRPv2協(xié)議報文是Master路由器以組播的方式，定時發(fā)送的VRRP報文。.VersionTypeVirtual Rtr IDPriorityCount IP AddrsAuth TypeAdver IntChecksumIP address 1I

15、P address nAuthentication data 1Authentication data 2071523313VRRP協(xié)議狀態(tài)機VRRP路由器在備份組內(nèi)除Master和Backup狀態(tài)外，還可能處于Initialize狀態(tài)。InitializeMasterBackup IP地址擁有者Master down（3個間隔時間+VRRP搶占延遲時間)，或者收到VRRP協(xié)議報文，且報文攜帶的PRI小于本地PRI,且搶占模式為True接口Shutdown收到VRRP協(xié)議報文，且報文攜帶的PRI大于本地PRI,或者報文攜帶的PRI等于本地PRI，且報文攜帶接口IP大于本地接口IP接口Shutd

16、own非IP地址擁有者VRRP簡介VRRP工作原理VRRP協(xié)議報文和狀態(tài)機配置VRRP目錄VRRP相關命令配置虛擬IP地址和MAC地址的對應關系創(chuàng)建VRRP備份組并配置虛擬IP地址配置路由器在備份組中的優(yōu)先級配置備份組中的路由器工作在搶占方式，并配置搶占延遲時間Switch vrrp method real-mac | virtual-mac Switch-Ethernet1/0/1 vrrp vrid virtual-router-id virtual-ip virtual-addressSwitch-Ethernet1/0/1 vrrp vrid virtual-router-id pri

17、ority priority-valueSwitch-Ethernet1/0/1 vrrp vrid virtual-router-id preempt-mode timer delay delay-value VRRP相關命令（續(xù)）配置監(jiān)視指定接口配置備份組發(fā)送和接收VRRP報文的認證配置備份組中Master路由器發(fā)送VRRP通告報文的時間間隔顯示VRRP備份組的狀態(tài)信息Switch-Ethernet1/0/1 vrrp vrid virtual-router-id track interface interface-type interface-number reduced priorit

18、y-reduced Switch-Ethernet1/0/1 vrrp vrid virtual-router-id authentication-mode md5 | simple keySwitch-Ethernet1/0/1 vrrp vrid virtual-router-id timer advertise adver-intervalSwitch display vrrp verbose interface interface-type interface-number vrid virtual-router-id VRRP單備份組配置示例SWBinterface Vlan-interface 10SWB-Vlan-interface10ip add 192.168.0.253 255.255.255.0SWB-Vlan-interface10vrrp vrid 1 virtual-ip 192.168.0.254SWAinterface Vlan-interface 10SWA-Vlan-interface10ip add 192.168.0.252 255.255.255.0SWA-Vlan-interface10vrrp vrid 1 virtual-ip 192.168.0.254SWA-Vlan-interface10vrrp vrid 1 pri