VRRP网络技术概述

1、VRRP网络技术概述技术创新，变革未来通常，同一网段内的所有主机都设置一条相同的以网关为下一跳的缺省路由。当网关发生故障时，本网段内所有以网关为缺省路由的主机将无法与外部网络通信。通过VRRP可以避免由于局域网网关单点故障而导致的网络中断。引入掌握VRRP基本概念和工作原理掌握VRRP报文和状态机掌握VRRP的配置课程目标学习完本课程，您应该能够：VRRP简介VRRP工作原理VRRP协议报文和状态机配置VRRP目录VRRP背景如果网关出现故障，则内网设备无法访问外网Gateway:10.100.10.1Gateway:10.100.10.1Gateway:10.100.10.1Gateway:

2、10.100.10.1IP address 10.100.10.1Actual IP address 10.100.10.12Actual IP address 10.100.10.13Actual IP address 10.100.10.14Actual IP address 10.100.10.11InternetVRRP主备备份VRID 1:Priority 110:Virtual IP 10.100.10.1Gateway:10.100.10.1Gateway:10.100.10.1Gateway:10.100.10.1Gateway:10.100.10.1Actual IP add

3、ress 10.100.10.3Virtual IP address 10.100.10.4Actual IP address 10.100.10.11Actual IP address 10.100.10.12Actual IP address 10.100.10.13Actual IP address 10.100.10.14VRID 1:Priority 100:Virtual IP 10.100.10.1MasterBackupInternetVRRP将可以将多个路由器加入到备份组中，形成一台虚拟路由器，承担网关功能只要备份组中仍有一台路由正常工作，虚拟路由器就仍然正常工作VRRP负载

4、分担VRRP将多台路由器同时承担业务，形成多台虚拟路由器，分担内网与外网之间的流量VRID 1:Priority 110:Virtual IP 10.100.10.1Gateway:10.100.10.1Gateway:10.100.10.1Gateway:10.100.11.1Gateway:10.100.11.1Actual IP address 10.100.10.3Virtual IP address 10.100.10.4Actual IP address 10.100.10.11Actual IP address 10.100.10.12Actual IP address 10.1

5、00.11.11Actual IP address 10.100.11.12VRID 1:Priority 100:Virtual IP 10.100.10.1MasterBackupBackupMasterVirtual IP address 10.100.11.4VRID 2:Priority 110:Virtual IP 10.100.11.1Actual IP address 10.100.11.3VRID 2:Priority 100:Virtual IP 10.100.11.1InternetVRRP简介VRRP工作原理VRRP协议报文和状态机配置VRRP目录VRRP概述RFC 3

6、768定义的VRRPv2是一种容错协议，在提高可靠性的同时，简化了主机的配置。VRRP协议报文使用固定的组播地址224.0.0.18进行发送。虚拟路由器由LAN上唯一的Virtual Router ID标识。并具有虚MAC地址：00-00-5E-00-01-vrid。VRRP相关概念MASTER路由器处于VRRP备份组1，VRRP优先级为110，虚IP地址为10.100.10.1，为IP地址拥有者，默认VRRP抢占模式。VRID 1:Priority 110:Virtual IP 10.100.10.1Gateway:10.100.10.1Gateway:10.100.10.1Gateway:

7、10.100.10.1Gateway:10.100.10.1Actual IP address 10.100.10.3Virtual IP address 10.100.10.4Actual IP address 10.100.10.11Actual IP address 10.100.10.12Actual IP address 10.100.10.13Actual IP address 10.100.10.14VRID 1:Priority 100:Virtual IP 10.100.10.1MasterBackupInternetVRRP选举当路由器使能VRRP功能后，会根据优先级确定自

8、己在备份组中的角色。当优先级变化后，根据VRRP模式确认VRRP状态。VRID 1:Priority 110:Virtual IP 10.100.10.1VRID 1:Priority 100:Virtual IP 10.100.10.1Actual IP address 10.100.10.3Virtual IP address 10.100.10.4MasterBackupInternetReduce 30Pri=110Pri=100Pri=80Pri=100BackupMaster非抢占Pri=80Pri=100Reduce 30Backup抢占MasterVRRP监视接口功能当Mast

9、er路由器连接上行链路的接口处于Down状态时，路由器主动降低自己的优先级，使得备份组内重新选择Master，承担转发任务。VRID 1:Priority 110:Virtual IP 10.100.10.1Gateway:10.100.10.1Gateway:10.100.10.1Gateway:10.100.10.1Gateway:10.100.10.1Actual IP address 10.100.10.3Virtual IP address 10.100.10.4Actual IP address 10.100.10.11Actual IP address 10.100.10.12A

10、ctual IP address 10.100.10.13Actual IP address 10.100.10.14VRID 1:Priority 100:Virtual IP 10.100.10.1MasterBackupInternetReduce 30VRRP简介VRRP工作原理VRRP协议报文和状态机配置VRRP目录VRRPv2协议报文格式VRRPv2协议报文是Master路由器以组播的方式，定时发送的VRRP报文。.VersionTypeVirtual Rtr IDPriorityCount IP AddrsAuth TypeAdver IntChecksumIP address

11、1IP address nAuthentication data 1Authentication data 2071523313VRRP协议状态机VRRP路由器在备份组内除Master和Backup状态外，还可能处于Initialize状态。InitializeMasterBackup IP地址拥有者Master down（3个间隔时间+VRRP抢占延迟时间)，或者收到VRRP协议报文，且报文携带的PRI小于本地PRI,且抢占模式为True接口Shutdown收到VRRP协议报文，且报文携带的PRI大于本地PRI,或者报文携带的PRI等于本地PRI，且报文携带接口IP大于本地接口IP接口Shu

12、tdown非IP地址拥有者VRRP简介VRRP工作原理VRRP协议报文和状态机配置VRRP目录VRRP相关命令配置虚拟IP地址和MAC地址的对应关系创建VRRP备份组并配置虚拟IP地址配置路由器在备份组中的优先级配置备份组中的路由器工作在抢占方式，并配置抢占延迟时间Switch vrrp method real-mac | virtual-mac Switch-Ethernet1/0/1 vrrp vrid virtual-router-id virtual-ip virtual-addressSwitch-Ethernet1/0/1 vrrp vrid virtual-router-id p

13、riority priority-valueSwitch-Ethernet1/0/1 vrrp vrid virtual-router-id preempt-mode timer delay delay-value VRRP相关命令（续）配置监视指定接口配置备份组发送和接收VRRP报文的认证配置备份组中Master路由器发送VRRP通告报文的时间间隔显示VRRP备份组的状态信息Switch-Ethernet1/0/1 vrrp vrid virtual-router-id track interface interface-type interface-number reduced prior

14、ity-reduced Switch-Ethernet1/0/1 vrrp vrid virtual-router-id authentication-mode md5 | simple keySwitch-Ethernet1/0/1 vrrp vrid virtual-router-id timer advertise adver-intervalSwitch display vrrp verbose interface interface-type interface-number vrid virtual-router-id VRRP单备份组配置示例SWBinterface Vlan-i

15、nterface 10SWB-Vlan-interface10ip add 192.168.0.253 255.255.255.0SWB-Vlan-interface10vrrp vrid 1 virtual-ip 192.168.0.254SWAinterface Vlan-interface 10SWA-Vlan-interface10ip add 192.168.0.252 255.255.255.0SWA-Vlan-interface10vrrp vrid 1 virtual-ip 192.168.0.254SWA-Vlan-interface10vrrp vrid 1 priorit

16、y 120MasterBackupInternetSWBSWAVRRP监视接口配置示例SWAint vlan 10SWA-Vlan-interface10vrrp vrid 1 track interface Vlan-interface 100 reduced 30 MasterBackupInternetSWBSWAVRRP双备份组配置示例SWBint vlan 20SWB-Vlan-interface20ip add 192.168.1.253 255.255.255.0SWB-Vlan-interface20vrrp vrid 2 virtual-ip 192.168.1.254SWB-Vlan