云點(diǎn)課堂之鏈路聚合及vrrp基礎(chǔ)

1、鏈路聚合及VRRP基礎(chǔ)鮑中帥講師介紹鮑中帥三年講師、兩年金融行業(yè)網(wǎng)絡(luò)維護(hù)經(jīng)驗(yàn)，熟悉電力與金融網(wǎng)絡(luò)情況，擅長(zhǎng)復(fù)雜網(wǎng)絡(luò)條件下的故障分析與解決；目前已經(jīng)撰寫并發(fā)布的網(wǎng)絡(luò)相關(guān)操作手冊(cè)及配置指導(dǎo)文檔二十多篇，視頻教程三十多集；HCIE R&S (2083)、CCIE SP（43048） TEST鏈路聚合鏈路聚合簡(jiǎn)介鏈路聚合的分類鏈路聚合的基本配置目錄鏈路聚合的作用增加鏈路帶寬提供鏈路可靠性Link AggregationServerPCSWASWBPCAPCB聚合鏈路負(fù)載分擔(dān)原理SWASWB聚合后鏈路基于流進(jìn)行負(fù)載分擔(dān)鏈路聚合簡(jiǎn)介鏈路聚合的分類鏈路聚合的基本配置目錄鏈路聚合分類靜態(tài)聚合 雙方系統(tǒng)間不使用

2、聚合協(xié)議來協(xié)商鏈路信息缺省為該類型動(dòng)態(tài)聚合 雙方系統(tǒng)間使用聚合協(xié)議來協(xié)商鏈路信息LACP（Link Aggregation Control Protocol，鏈路聚合控制協(xié)議）是一種基于IEEE802.3ad標(biāo)準(zhǔn)的、能夠?qū)崿F(xiàn)鏈路動(dòng)態(tài)聚合的協(xié)議鏈路聚合簡(jiǎn)介鏈路聚合的分類鏈路聚合的基本配置目錄創(chuàng)建聚合端口 將以太網(wǎng)端口加入聚合組Switch interface bridge-aggregation interface-numberSwitch-Ethernet1/0/1 port link-aggregation group number靜態(tài)聚合配置鏈路聚合配置舉例E1/0/1E1/0/3E1/0

3、/3E1/0/1E1/0/2E1/0/2SWA interface bridge-aggregation 1SWA-Ethernet1/0/1 port link-aggregation group 1SWA-Ethernet1/0/2 port link-aggregation group 1SWA-Ethernet1/0/3 port link-aggregation group 1SWB interface bridge-aggregation 1SWB-Ethernet1/0/1 port link-aggregation group 1SWB-Ethernet1/0/2 port l

4、ink-aggregation group 1SWB-Ethernet1/0/3 port link-aggregation group 1SWASWB鏈路聚合顯示及維護(hù)display link-aggregation summary Aggregation Interface Type:BAGG - Bridge-Aggregation, RAGG - Route-AggregationAggregation Mode: S - Static, D - DynamicLoadsharing Type: Shar - Loadsharing, NonS - Non-LoadsharingAct

5、or System ID: 0 x8000, 000f-e267-6c6aAGG AGG Partner ID Select Unselect ShareInterface Mode Ports Ports Type-BAGG1 S none 3 0 Shar聚合端口ID為1聚合組中包含有3個(gè)端口聚合方式為靜態(tài)聚合組中端口是負(fù)載分擔(dān)類型VRRPVRRP簡(jiǎn)介VRRP工作原理VRRP協(xié)議報(bào)文和狀態(tài)機(jī)配置VRRP目錄VRRP背景如果網(wǎng)關(guān)出現(xiàn)故障，則內(nèi)網(wǎng)設(shè)備無法訪問外網(wǎng)Gateway:10.100.10.1Gateway:10.100.10.1Gateway:10.100.10.1Gateway:10

6、.100.10.1IP address 10.100.10.1Actual IP address 10.100.10.12Actual IP address 10.100.10.13Actual IP address 10.100.10.14Actual IP address 10.100.10.11InternetVRRP主備備份VRID 1:Priority 110:Virtual IP 10.100.10.1Gateway:10.100.10.1Gateway:10.100.10.1Gateway:10.100.10.1Gateway:10.100.10.1Actual IP addre

7、ss 10.100.10.3Virtual IP address 10.100.10.4Actual IP address 10.100.10.11Actual IP address 10.100.10.12Actual IP address 10.100.10.13Actual IP address 10.100.10.14VRID 1:Priority 100:Virtual IP 10.100.10.1MasterBackupInternetVRRP將可以將多個(gè)路由器加入到備份組中，形成一臺(tái)虛擬路由器，承擔(dān)網(wǎng)關(guān)功能只要備份組中仍有一臺(tái)路由正常工作，虛擬路由器就仍然正常工作VRRP負(fù)載分擔(dān)

8、VRRP將多臺(tái)路由器同時(shí)承擔(dān)業(yè)務(wù)，形成多臺(tái)虛擬路由器，分擔(dān)內(nèi)網(wǎng)與外網(wǎng)之間的流量VRID 1:Priority 110:Virtual IP 10.100.10.1Gateway:10.100.10.1Gateway:10.100.10.1Gateway:10.100.11.1Gateway:10.100.11.1Actual IP address 10.100.10.3Virtual IP address 10.100.10.4Actual IP address 10.100.10.11Actual IP address 10.100.10.12Actual IP address 10.100

9、.11.11Actual IP address 10.100.11.12VRID 1:Priority 100:Virtual IP 10.100.10.1MasterBackupBackupMasterVirtual IP address 10.100.11.4VRID 2:Priority 110:Virtual IP 10.100.11.1Actual IP address 10.100.11.3VRID 2:Priority 100:Virtual IP 10.100.11.1InternetVRRP簡(jiǎn)介VRRP工作原理VRRP協(xié)議報(bào)文和狀態(tài)機(jī)配置VRRP目錄VRRP概述RFC 376

10、8定義的VRRPv2是一種容錯(cuò)協(xié)議，在提高可靠性的同時(shí)，簡(jiǎn)化了主機(jī)的配置。VRRP協(xié)議報(bào)文使用固定的組播地址224.0.0.18進(jìn)行發(fā)送。虛擬路由器由LAN上唯一的Virtual Router ID標(biāo)識(shí)。并具有虛MAC地址：00-00-5E-00-01-vrid。VRRP相關(guān)概念MASTER路由器處于VRRP備份組1，VRRP優(yōu)先級(jí)為110，虛IP地址為10.100.10.1，為IP地址擁有者，默認(rèn)VRRP搶占模式。VRID 1:Priority 110:Virtual IP 10.100.10.1Gateway:10.100.10.1Gateway:10.100.10.1Gateway:10

11、.100.10.1Gateway:10.100.10.1Actual IP address 10.100.10.1Virtual IP address 10.100.10.4Actual IP address 10.100.10.11Actual IP address 10.100.10.12Actual IP address 10.100.10.13Actual IP address 10.100.10.14VRID 1:Priority 100:Virtual IP 10.100.10.1MasterBackupInternetVRRP選舉當(dāng)路由器使能VRRP功能后，會(huì)根據(jù)優(yōu)先級(jí)確定自己在

12、備份組中的角色。當(dāng)優(yōu)先級(jí)變化后，根據(jù)VRRP模式確認(rèn)VRRP狀態(tài)。VRID 1:Priority 110:Virtual IP 10.100.10.1VRID 1:Priority 100:Virtual IP 10.100.10.1Actual IP address 10.100.10.3Virtual IP address 10.100.10.4MasterBackupInternetReduce 30Pri=110Pri=100Pri=80Pri=100BackupMaster非搶占Pri=80Pri=100Reduce 30Backup搶占MasterVRRP監(jiān)視接口功能當(dāng)Master

13、路由器連接上行鏈路的接口處于Down狀態(tài)時(shí)，路由器主動(dòng)降低自己的優(yōu)先級(jí)，使得備份組內(nèi)重新選擇Master，承擔(dān)轉(zhuǎn)發(fā)任務(wù)。VRID 1:Priority 110:Virtual IP 10.100.10.1Gateway:10.100.10.1Gateway:10.100.10.1Gateway:10.100.10.1Gateway:10.100.10.1Actual IP address 10.100.10.3Virtual IP address 10.100.10.4Actual IP address 10.100.10.11Actual IP address 10.100.10.12Act

14、ual IP address 10.100.10.13Actual IP address 10.100.10.14VRID 1:Priority 100:Virtual IP 10.100.10.1MasterBackupInternetReduce 30VRRP簡(jiǎn)介VRRP工作原理VRRP協(xié)議報(bào)文和狀態(tài)機(jī)配置VRRP目錄VRRPv2協(xié)議報(bào)文格式VRRPv2協(xié)議報(bào)文是Master路由器以組播的方式，定時(shí)發(fā)送的VRRP報(bào)文。.VersionTypeVirtual Rtr IDPriorityCount IP AddrsAuth TypeAdver IntChecksumIP address 1I

15、P address nAuthentication data 1Authentication data 2071523313VRRP協(xié)議狀態(tài)機(jī)VRRP路由器在備份組內(nèi)除Master和Backup狀態(tài)外，還可能處于Initialize狀態(tài)。InitializeMasterBackup IP地址擁有者M(jìn)aster down（3個(gè)間隔時(shí)間+VRRP搶占延遲時(shí)間)，或者收到VRRP協(xié)議報(bào)文，且報(bào)文攜帶的PRI小于本地PRI,且搶占模式為True接口Shutdown收到VRRP協(xié)議報(bào)文，且報(bào)文攜帶的PRI大于本地PRI,或者報(bào)文攜帶的PRI等于本地PRI，且報(bào)文攜帶接口IP大于本地接口IP接口Shutd

16、own非IP地址擁有者VRRP簡(jiǎn)介VRRP工作原理VRRP協(xié)議報(bào)文和狀態(tài)機(jī)配置VRRP目錄VRRP相關(guān)命令配置虛擬IP地址和MAC地址的對(duì)應(yīng)關(guān)系創(chuàng)建VRRP備份組并配置虛擬IP地址配置路由器在備份組中的優(yōu)先級(jí)配置備份組中的路由器工作在搶占方式，并配置搶占延遲時(shí)間Switch vrrp method real-mac | virtual-mac Switch-Ethernet1/0/1 vrrp vrid virtual-router-id virtual-ip virtual-addressSwitch-Ethernet1/0/1 vrrp vrid virtual-router-id pri

17、ority priority-valueSwitch-Ethernet1/0/1 vrrp vrid virtual-router-id preempt-mode timer delay delay-value VRRP相關(guān)命令（續(xù)）配置監(jiān)視指定接口配置備份組發(fā)送和接收VRRP報(bào)文的認(rèn)證配置備份組中Master路由器發(fā)送VRRP通告報(bào)文的時(shí)間間隔顯示VRRP備份組的狀態(tài)信息Switch-Ethernet1/0/1 vrrp vrid virtual-router-id track interface interface-type interface-number reduced priorit

18、y-reduced Switch-Ethernet1/0/1 vrrp vrid virtual-router-id authentication-mode md5 | simple keySwitch-Ethernet1/0/1 vrrp vrid virtual-router-id timer advertise adver-intervalSwitch display vrrp verbose interface interface-type interface-number vrid virtual-router-id VRRP單備份組配置示例SWBinterface Vlan-interface 10SWB-Vlan-interface10ip add 192.168.0.253 255.255.255.0SWB-Vlan-interface10vrrp vrid 1 virtual-ip 192.168.0.254SWAinterface Vlan-interface 10SWA-Vlan-interface10ip add 192.168.0.252 255.255.255.0SWA-Vlan-interface10vrrp vrid 1 virtual-ip 192.168.0.254SWA-Vlan-interface10vrrp vrid 1 pri