双机热备HRSP.docx
《双机热备HRSP.docx》由会员分享，可在线阅读，更多相关《双机热备HRSP.docx（50页珍藏版）》请在冰豆网上搜索。
双机热备HRSP
两台路由器+两台三层交换机做冗余最大限度避免单点故障
网络拓扑图如下：
拓扑说明：
1．路由器Internet是一台模拟Internet环境的路由器，为了尽可能真实，我仅在路由器上配置了相应的端口IP没有任何静态或动态路由。
2．接入层交换机为傻瓜型设备，仅设置vlan端口划分。
随时可以更换，基本不用做任何配置。
3．两台交换机互相做备份，配置基本差不多。
区别在于VTPServer在MSW上，BSW作为VTPClient存在。
4．SPT没有专门配置，有设备自动生成。
5．两台路由器互相备份，配置基本差不多。
6．该配置环境中只要有一台路由器和一台核心交换机在工作，网络可以正常工作。
7．其他详细网络参数基本可以在拓扑图上找到，更详细的参数，请参照最后的配置文件。
配置情况：
基本配置
Internet
enable
configureterminal
hostnameInternet
interfaceg0/0
ipaddress8.8.8.254255.255.255.0
noshutdown
exit
interfaceg0/1
ipaddress1.1.1.1255.255.255.0
noshutdown
exit
interfaceg0/2
ipaddress2.2.2.1255.255.255.0
noshutdown
exit
exit
write
MR
enable
configureterminal
hostnameMR
interfaceg0/0
ipaddress1.1.1.2255.255.255.0
noshutdown
exit
interfaceg0/1
ipaddress192.168.10.2255.255.255.0
noshutdown
exit
interfaceg0/2
ipaddress192.168.20.2255.255.255.0
noshutdown
exit
exit
write
BR
enable
configureterminal
hostnameBR
interfaceg0/0
ipaddress2.2.2.2255.255.255.0
noshutdown
exit
interfaceg0/1
ipaddress192.168.20.3255.255.255.0
noshutdown
exit
interfaceg0/2
ipaddress192.168.10.3255.255.255.0
noshutdown
exit
exit
write
msw
enable
configureterminal
hostnameMSW
iprouting
exit
write
bsw
enable
configureterminal
hostnameBSW
iprouting
exit
write
SW1
enable
configureterminal
hostnameSW1
exit
write
SW2
enable
configureterminal
hostnameSW2
exit
write
配置交换机VLAN
MSW
enable
configureterminal
vtpdomaina
vtppassworda
vtpmodeserver
vlan10
vlan20
vlan100
vlan200
interfacevlan10
ipaddress192.168.10.253255.255.255.0
exit
interfacevlan20
ipaddress192.168.20.253255.255.255.0
exit
interfacevlan100
ipaddress192.168.100.253255.255.255.0
exit
interfacevlan200
ipaddress192.168.200.253255.255.255.0
exit
interfacerangef0/1-24
switchportmodeaccess
switchportmodetrunk
switchporttrunkallowedvlanall
exit
interfaceg0/1
switchportmodeaccess
switchportaccessvlan10
exit
interfaceg0/2
switchportmodeaccess
switchportaccessvlan20
exit
exit
write
BSW
enable
configureterminal
vtpdomaina
vtppassworda
vtpmodeclient
interfacevlan10
ipaddress192.168.10.252255.255.255.0
exit
interfacevlan20
ipaddress192.168.20.252255.255.255.0
exit
interfacevlan100
ipaddress192.168.100.253255.255.255.0
exit
interfacevlan200
ipaddress192.168.200.253255.255.255.0
exit
interfacerangef0/1-24
switchportmodeaccess
switchportmodetrunk
switchporttrunkallowedvlanall
exit
interfaceg0/1
switchportmodeaccess
switchportaccessvlan20
exit
interfaceg0/2
switchportmodeaccess
switchportaccessvlan10
exit
exit
write
SW1
enable
configureterminal
vtpdomaina
vtppassworda
vtpmodeclient
interfacerangef0/21-24
switchportmodeaccess
switchportmodetrunk
switchporttrunkallowedvlanall
exit
interfacerangef0/1-10
switchportmodeaccess
switchportaccessvlan100
exit
interfacerangef0/11-20
switchportmodeaccess
switchportaccessvlan200
exit
exit
write
SW2
enable
configureterminal
vtpdomaina
vtppassworda
vtpmodeclient
interfacerangef0/21-24
switchportmodeaccess
switchportmodetrunk
switchporttrunkallowedvlanall
exit
interfacerangef0/1-10
switchportmodeaccess
switchportaccessvlan100
exit
interfacerangef0/11-20
switchportmodeaccess
switchportaccessvlan200
exit
exit
write
配置HRSP（热备份路由协议）
MR
enable
configureterminal
interfaceg0/1
standby11ip192.168.10.1
standby11priority120
standby11preempt
exit
interfaceg0/2
standby21ip192.168.20.1
standby21priority120
standby21preempt
exit
exit
write
BR
enable
configureterminal
interfaceg0/1
standby21ip192.168.20.1
standby21priority120
standby21preempt
exit
interfaceg0/2
standby11ip192.168.10.1
standby11priority120
standby11preempt
exit
exit
write
MSW
enable
configureterminal
interfacevlan10
standby10ip192.168.10.254
standby10priority120
standby10preempt
exit
interfacevlan20
standby20ip192.168.20.254
standby20priority120
standby20preempt
exit
interfacevlan100
standby100ip192.168.100.254
standby100priority120
standby100preempt
exit
interfacevlan200
standby200ip192.168.200.254
standby200priority120
standby200preempt
exit
exit
write
BSE
enable
configureterminal
interfacevlan10
standby10ip192.168.10.254
standby10priority120
standby10preempt
exit
interfacevlan20
standby20ip192.168.20.254
standby20priority120
standby20preempt
exit
interfacevlan100
standby100ip192.168.100.254
standby100priority120
standby100preempt
exit
interfacevlan200
standby200ip192.168.200.254
standby200priority120
standby200preempt
exit
exit
write
添加静态路由
MR
enable
configureterminal
iproute0.0.0.00.0.0.01.1.1.1
iproute192.168.0.0255.255.0.0192.168.10.254
exit
write
BR
enable
configureterminal
iproute0.0.0.00.0.0.02.2.2.1
iproute192.168.0.0255.255.0.0192.168.10.254
exit
write
MSW
enable
configureterminal
iproute0.0.0.00.0.0.0192.168.10.1
exit
write
BSW
enable
configureterminal
iproute0.0.0.00.0.0.0192.168.10.1
exit
write
路由器添加NAT转换
MR
enable
configureterminal
interfaceg0/0
ipnatoutside
exit
interfaceg0/1
ipnatinside
exit
interfaceg0/2
ipnatinside
exit
ipnatpoolout1.1.1.31.1.1.3netmask255.255.255.255
access-list10permit192.168.0.00.0.255.255
ipnatinsidesourcelist10pooloutoverload
exit
write
---------------------------------------------------------------------------
BR
enable
configureterminal
interfaceg0/0
ipnatoutside
exit
interfaceg0/1
ipnatinside
exit
interfaceg0/2
ipnatinside
exit
ipnatpoolout2.2.2.32.2.2.3netmask255.255.255.255
access-list10permit192.168.0.00.0.255.255
ipnatinsidesourcelist10pooloutoverload
exit
write
配置清单
Internet
Internet#shrunn
Buildingconfiguration...
Currentconfiguration:
719bytes
!
version15.1
noservicetimestampslogdatetimemsec
noservicetimestampsdebugdatetimemsec
noservicepassword-encryption
!
hostnameInternet
!
!
!
!
!
!
!
!
ipcef
noipv6cef
!
!
!
!
licenseudipidCISCO2911/K9snFTX15240M09
!
!
!
!
!
!
!
!
!
!
!
spanning-treemodepvst
!
!
!
!
!
!
interfaceGigabitEthernet0/0
ipaddress8.8.8.254255.255.255.0
duplexauto
speedauto
!
interfaceGigabitEthernet0/1
ipaddress1.1.1.1255.255.255.0
duplexauto
speedauto
!
interfaceGigabitEthernet0/2
ipaddress2.2.2.1255.255.255.0
duplexauto
speedauto
!
interfaceVlan1
noipaddress
shutdown
!
ipclassless
!
ipflow-exportversion9
!
!
!
!
!
!
!
linecon0
!
lineaux0
!
linevty04
login
!
!
!
end
Internet#
MR
MR>EN
MR#showrunn
Buildingconfiguration...
Currentconfiguration:
1183bytes
!
version15.1
noservicetimestampslogdatetimemsec
noservicetimestampsdebugdatetimemsec
noservicepassword-encryption
!
hostnameMR
!
!
!
!
!
!
!
!
ipcef
noipv6cef
!
!
!
!
licenseudipidCISCO2911/K9snFTX152483N7
!
!
!
!
!
!
!
!
!
!
!
spanning-treemodepvst
!
!
!
!
!
!
interfaceGigabitEthernet0/0
ipaddress1.1.1.2255.255.255.0
ipnatoutside
duplexauto
speedauto
!
interfaceGigabitEthernet0/1
ipaddress192.168.10.2255.255.255.0
ipnatinside
duplexauto
speedauto
standbyversion2
standby11ip192.168.10.1
standby11priority120
standby11preempt
!
interfaceGigabitEthernet0/2
ipaddress192.168.20.2255.255.255.0
ipnatinside
duplexauto
speedauto
standbyversion2
standby21ip192.168.20.1
standby21priority120
standby21preempt
!
interfaceVlan1
noipaddress
shutdown
!
ipnatpoolout1.1.1.31.1.1.3netmask255.255.255.255
ipnatinsidesourcelist10pooloutoverload
ipclassless
iproute0.0.0.00.0.0.01.1.1.1
iproute192.168.0.0255.255.0.0192.168.10.254
!
ipflow-exportversion9
!
!
access-list10permit192.168.0.00.0.255.255
!
!
!
!
!
linecon0
!
lineaux0
!
linevty04
login
!
!
!
end
MR#
BR
BR>en
BR#shrunn
Buildingconfiguration...
Currentconfiguration:
1183bytes
!
version15.1
noservicetimestampslogdatetimemsec
noservicetimestampsdebugdatetimemsec
noservicepassword-encryption
!
hostnameBR
!
!
!
!
!
!
!
!
ipcef
noipv6cef
!
!
!
!
licenseudipidCISCO2911/K9snFTX15245NTA
!
!
!
!
!
!
!
!
!
!
!
spanning-treemodepvst
!
!
!
!
!
!
interfaceGigabitEthernet0/0
ipaddress2.2.2.2255.255.255.0
ipnatoutside
duplexauto
speedauto
!
interfaceGigabitEthernet0/1
ipaddress192.168.20.3255.255.255.0
ipnatinside
duplexauto
speedauto
standbyversion2
standby21ip192.168.20.1
standby21priority120
standby21preempt
!
interfaceGigabitEthernet0/2
ipaddress192.168.10.3255.255.255.0
ipnatinside
duplexauto
speedauto
standbyversion2
standby11ip192.168.10.1
standby11priority120
standby11preempt
!
interfaceVlan1
noipaddress
shutdown
!
ipnatpoolout2.2.2.32.2.2.3netmask255.255.255.255
ipnatinsidesourcelist10pooloutoverload
ipclassless
iproute0.0.0.00.0.0.02.2.2.1
iproute192.168.0.0255.255.0.0192.168.10.254
!
ipflow-exportversion9
!
!
access-list10permit192.168.0.00.0.255.255
!
!
!
!
!
linecon0
!
lineaux0
!
linevty04
login
!
!
!
end
BR#
MSW
MSW>en
MSW#shrunn
Buildingconfiguration...
Currentconfiguration:
3368bytes
!
version12.2
noservicetimestampslogdatetimemsec
noservicetimestampsdebugdatetimemsec
noservicepassword-encryption
!
hostnameMSW
!
!
!
!
!
!
!
iprouting
!
!
!
!
!
!
!
!
!
!
!
!
!
!
spanning-treemodepvst
!
!
!
!
!
!
interfaceFastEthernet0/1
switchporttrunkencapsulationdot1
升级会员 