云点课堂之链路聚合及vrrp基础

1、链路聚合及VRRP基础鲍中帅讲师介绍鲍中帅三年讲师、两年金融行业网络维护经验，熟悉电力与金融网络情况，擅长复杂网络条件下的故障分析与解决；目前已经撰写并发布的网络相关操作手册及配置指导文档二十多篇，视频教程三十多集；HCIE R&S (2083)、CCIE SP（43048） TEST链路聚合链路聚合简介链路聚合的分类链路聚合的基本配置目录链路聚合的作用增加链路带宽提供链路可靠性Link AggregationServerPCSWASWBPCAPCB聚合链路负载分担原理SWASWB聚合后链路基于流进行负载分担链路聚合简介链路聚合的分类链路聚合的基本配置目录链路聚合分类静态聚合 双方系统间不使用

2、聚合协议来协商链路信息缺省为该类型动态聚合 双方系统间使用聚合协议来协商链路信息LACP（Link Aggregation Control Protocol，链路聚合控制协议）是一种基于IEEE802.3ad标准的、能够实现链路动态聚合的协议链路聚合简介链路聚合的分类链路聚合的基本配置目录创建聚合端口 将以太网端口加入聚合组Switch interface bridge-aggregation interface-numberSwitch-Ethernet1/0/1 port link-aggregation group number静态聚合配置链路聚合配置举例E1/0/1E1/0/3E1/0

3、/3E1/0/1E1/0/2E1/0/2SWA interface bridge-aggregation 1SWA-Ethernet1/0/1 port link-aggregation group 1SWA-Ethernet1/0/2 port link-aggregation group 1SWA-Ethernet1/0/3 port link-aggregation group 1SWB interface bridge-aggregation 1SWB-Ethernet1/0/1 port link-aggregation group 1SWB-Ethernet1/0/2 port l

4、ink-aggregation group 1SWB-Ethernet1/0/3 port link-aggregation group 1SWASWB链路聚合显示及维护display link-aggregation summary Aggregation Interface Type:BAGG - Bridge-Aggregation, RAGG - Route-AggregationAggregation Mode: S - Static, D - DynamicLoadsharing Type: Shar - Loadsharing, NonS - Non-LoadsharingAct

5、or System ID: 0 x8000, 000f-e267-6c6aAGG AGG Partner ID Select Unselect ShareInterface Mode Ports Ports Type-BAGG1 S none 3 0 Shar聚合端口ID为1聚合组中包含有3个端口聚合方式为静态聚合组中端口是负载分担类型VRRPVRRP简介VRRP工作原理VRRP协议报文和状态机配置VRRP目录VRRP背景如果网关出现故障，则内网设备无法访问外网Gateway:10.100.10.1Gateway:10.100.10.1Gateway:10.100.10.1Gateway:10

6、.100.10.1IP address 10.100.10.1Actual IP address 10.100.10.12Actual IP address 10.100.10.13Actual IP address 10.100.10.14Actual IP address 10.100.10.11InternetVRRP主备备份VRID 1:Priority 110:Virtual IP 10.100.10.1Gateway:10.100.10.1Gateway:10.100.10.1Gateway:10.100.10.1Gateway:10.100.10.1Actual IP addre

7、ss 10.100.10.3Virtual IP address 10.100.10.4Actual IP address 10.100.10.11Actual IP address 10.100.10.12Actual IP address 10.100.10.13Actual IP address 10.100.10.14VRID 1:Priority 100:Virtual IP 10.100.10.1MasterBackupInternetVRRP将可以将多个路由器加入到备份组中，形成一台虚拟路由器，承担网关功能只要备份组中仍有一台路由正常工作，虚拟路由器就仍然正常工作VRRP负载分担

8、VRRP将多台路由器同时承担业务，形成多台虚拟路由器，分担内网与外网之间的流量VRID 1:Priority 110:Virtual IP 10.100.10.1Gateway:10.100.10.1Gateway:10.100.10.1Gateway:10.100.11.1Gateway:10.100.11.1Actual IP address 10.100.10.3Virtual IP address 10.100.10.4Actual IP address 10.100.10.11Actual IP address 10.100.10.12Actual IP address 10.100

9、.11.11Actual IP address 10.100.11.12VRID 1:Priority 100:Virtual IP 10.100.10.1MasterBackupBackupMasterVirtual IP address 10.100.11.4VRID 2:Priority 110:Virtual IP 10.100.11.1Actual IP address 10.100.11.3VRID 2:Priority 100:Virtual IP 10.100.11.1InternetVRRP简介VRRP工作原理VRRP协议报文和状态机配置VRRP目录VRRP概述RFC 376

10、8定义的VRRPv2是一种容错协议，在提高可靠性的同时，简化了主机的配置。VRRP协议报文使用固定的组播地址224.0.0.18进行发送。虚拟路由器由LAN上唯一的Virtual Router ID标识。并具有虚MAC地址：00-00-5E-00-01-vrid。VRRP相关概念MASTER路由器处于VRRP备份组1，VRRP优先级为110，虚IP地址为10.100.10.1，为IP地址拥有者，默认VRRP抢占模式。VRID 1:Priority 110:Virtual IP 10.100.10.1Gateway:10.100.10.1Gateway:10.100.10.1Gateway:10

11、.100.10.1Gateway:10.100.10.1Actual IP address 10.100.10.1Virtual IP address 10.100.10.4Actual IP address 10.100.10.11Actual IP address 10.100.10.12Actual IP address 10.100.10.13Actual IP address 10.100.10.14VRID 1:Priority 100:Virtual IP 10.100.10.1MasterBackupInternetVRRP选举当路由器使能VRRP功能后，会根据优先级确定自己在

12、备份组中的角色。当优先级变化后，根据VRRP模式确认VRRP状态。VRID 1:Priority 110:Virtual IP 10.100.10.1VRID 1:Priority 100:Virtual IP 10.100.10.1Actual IP address 10.100.10.3Virtual IP address 10.100.10.4MasterBackupInternetReduce 30Pri=110Pri=100Pri=80Pri=100BackupMaster非抢占Pri=80Pri=100Reduce 30Backup抢占MasterVRRP监视接口功能当Master

13、路由器连接上行链路的接口处于Down状态时，路由器主动降低自己的优先级，使得备份组内重新选择Master，承担转发任务。VRID 1:Priority 110:Virtual IP 10.100.10.1Gateway:10.100.10.1Gateway:10.100.10.1Gateway:10.100.10.1Gateway:10.100.10.1Actual IP address 10.100.10.3Virtual IP address 10.100.10.4Actual IP address 10.100.10.11Actual IP address 10.100.10.12Act

14、ual IP address 10.100.10.13Actual IP address 10.100.10.14VRID 1:Priority 100:Virtual IP 10.100.10.1MasterBackupInternetReduce 30VRRP简介VRRP工作原理VRRP协议报文和状态机配置VRRP目录VRRPv2协议报文格式VRRPv2协议报文是Master路由器以组播的方式，定时发送的VRRP报文。.VersionTypeVirtual Rtr IDPriorityCount IP AddrsAuth TypeAdver IntChecksumIP address 1I

15、P address nAuthentication data 1Authentication data 2071523313VRRP协议状态机VRRP路由器在备份组内除Master和Backup状态外，还可能处于Initialize状态。InitializeMasterBackup IP地址拥有者Master down（3个间隔时间+VRRP抢占延迟时间)，或者收到VRRP协议报文，且报文携带的PRI小于本地PRI,且抢占模式为True接口Shutdown收到VRRP协议报文，且报文携带的PRI大于本地PRI,或者报文携带的PRI等于本地PRI，且报文携带接口IP大于本地接口IP接口Shutd

16、own非IP地址拥有者VRRP简介VRRP工作原理VRRP协议报文和状态机配置VRRP目录VRRP相关命令配置虚拟IP地址和MAC地址的对应关系创建VRRP备份组并配置虚拟IP地址配置路由器在备份组中的优先级配置备份组中的路由器工作在抢占方式，并配置抢占延迟时间Switch vrrp method real-mac | virtual-mac Switch-Ethernet1/0/1 vrrp vrid virtual-router-id virtual-ip virtual-addressSwitch-Ethernet1/0/1 vrrp vrid virtual-router-id pri

17、ority priority-valueSwitch-Ethernet1/0/1 vrrp vrid virtual-router-id preempt-mode timer delay delay-value VRRP相关命令（续）配置监视指定接口配置备份组发送和接收VRRP报文的认证配置备份组中Master路由器发送VRRP通告报文的时间间隔显示VRRP备份组的状态信息Switch-Ethernet1/0/1 vrrp vrid virtual-router-id track interface interface-type interface-number reduced priorit

18、y-reduced Switch-Ethernet1/0/1 vrrp vrid virtual-router-id authentication-mode md5 | simple keySwitch-Ethernet1/0/1 vrrp vrid virtual-router-id timer advertise adver-intervalSwitch display vrrp verbose interface interface-type interface-number vrid virtual-router-id VRRP单备份组配置示例SWBinterface Vlan-interface 10SWB-Vlan-interface10ip add 192.168.0.253 255.255.255.0SWB-Vlan-interface10vrrp vrid 1 virtual-ip 192.168.0.254SWAinterface Vlan-interface 10SWA-Vlan-interface10ip add 192.168.0.252 255.255.255.0SWA-Vlan-interface10vrrp vrid 1 virtual-ip 192.168.0.254SWA-Vlan-interface10vrrp vrid 1 pri