思科HSRP的配置方案双机热备经典案例.doc

「提问"当主用路由器当掉以后备份路由器可以接管主用路由器的 IP地址和MAC地址回答RouterlRouter1#c on figure termi nalRouter1(co nfig)#i nterface FastEthernet 0/1Router1(co nfig-if)#ip address 172.22.1.3 255.255.255.0Router1(co nfig-if)#sta ndby 1 ip 172.22.1.1Router1(co nfig-if)#sta ndby 1 priority 120Router1(co nfig-if)#exitRouter1(co nfig)#e ndRouter1#Router2 :Router2#c on figure termi nalRouter2(co nfig)#i nterface FastEthernet 1/0Router2(co nfig-if)#ip address 172.22.1.2 255.255.255.0Router2(co nfig-if)#sta ndby 1 ip 172.22.1.1Router2(config-if)#standby 1 priority 110 (默认 priority is 100)Router2(co nfig-if)#exitRouter2(co nfig)#e ndRouter2# feedo 注释 由于HSRP虚拟出来的MAC地址跟组相关，所以可能会出现同一交换机收到多个相同的 MAC地址的情况，这时候就需要用 standby 1 mac-address 0000.0c07.ad01 命令来人工指定一个 MAC地址提问 强制某个路由器启动后一直在组中处于主用状态回答Router1#c on figure termi nalFastEthernet 0/11 ip 172.22.1.11 priority 1201 preemptRouter2(co nfig)#i nterfaceRouter2(co nfig-if)#sta ndbyRouter2(co nfig-if)#sta ndbyRouter2(co nfig-if)#sta ndbyRouter2(co nfig-if)#exitFastEthernet 1/01 ip 172.22.1.11 priority 1101 preemptdelay 60 （最好有时延）Router1(co nfig)#i nterfaceRouter1(co nfig-if)#sta ndbyRouter1(co nfig-if)#sta ndbyRouter1(co nfig-if)#sta ndbyRouter1(co nfig-if)#exitRouter1(co nfig)#e ndRouter1#Router2#c on figure term inalRouter2(co nfig)#e nd注释 正常情况下当LAN端口 up后就会发生强占，而此时可能网络还没有收敛, 所以建议配置强占延迟时间，让路由器启动后过一段时间再发起强占 sta ndby1 preempt delay 6022.3. 配置HSRP对接口问题追踪的支持提问 当主用路由器的上联端口出现问题后主动切换到备用路由器回答Router1#c on figure termi nalFastEthernetO/11 ip 172.22.1.11 priority 1201 preemptRouter1(co nfig)#i nterfaceRouter1(co nfig-if)#sta ndbyRouter1(co nfig-if)#sta ndbyRouter1(co nfig-if)#sta ndbyRouter1(co nfig-if)#exitRouter1(co nfig)#e nd从12.2(15)T 后引入更多可追踪实例 Router1#c on figure termi nalRouter1(co nfig)#track 11Router1(co nfig-track)#exitRouter1(co nfig)#i nterfaceRouter1(co nfig-if)#sta ndbyRouter1(co nfig-if)#sta ndbyRouter1(co nfig-if)#sta ndbyRouter1(co nfig-if)#sta ndbyRouter1(c on fig-if)#e nd注释 Router1#show trackin terface Serial1/1 ip rout ingFastEthernetO/O1 ip 172.22.1.11 priority 1201 preempt1 track 11 decreme nt 50Track 11In terface Serial1/1 ip rout ingIP routing is Down (hw admin-down, ip disabled)1 change, last change 00:12:48Tracked by:HSRP FastEthernet0/0 122.4. HSRP负载均衡提问 在两台或者多台HSRP路由器上实现流量的负载均衡回答Router1#c on figure termi nalRouter1(co nfig)#i nterface FastEthernetO/1Router1(c on fig-if)#ipaddress 172.22.1.3 255.255.255.0Router1(co nfig-if)#sta ndby1 ip 172.22.1.1Router1(co nfig-if)#sta ndby1 priority 120Router1(co nfig-if)#sta ndby1 preemptRouter1(co nfig-if)#sta ndby2 ip 172.22.1.2Router1(co nfig-if)#sta ndby2 priority 110Router1(co nfig-if)#sta ndby2 preemptRouter1(co nfig-if)#exitRouter1(co nfig)#e ndRouter2#c on figure termi nalRouter2(co nfig)#i nterfaceFastEthernet1/0Router2(co nfig-if)#ipaddress 172.22.1.4 255.255.255.0Router2(co nfig-if)#sta ndby1 ip 172.22.1.1Router2(co nfig-if)#sta ndby1 priority 110Router2(co nfig-if)#sta ndby1 preemptRouter2(co nfig-if)#sta ndby2 ip 172.22.1.2Router2(co nfig-if)#sta ndby2 priority 120Router2(co nfig-if)#sta ndby2 preemptRouter2(co nfig-if)#exitRouter2(co nfig)#e nd注释 由于出现两个网关，所以需要在终端设备上分开配置各自的缺省网关22.5. HSRP 中 ICMP 重定向提问在HSRP中启用ICMP重定向Router2#c on figure termi nalRouter2(config-if)#no ip redirectsRouter2(co nfig-if)#sta ndby redirects disableRouter2(co nfig-if)#exitRouter2(co nfig)#e ndRouter2# 54n 注释226 调整HSRP定时器提问 调整备份路由器接管主用路由器所需时长Router1#c on figure termi nalFastEthernetO/11 ip 172.22.1.11 priority 1201 preempt1 timers 1 3Router1(co nfig)#i nterfaceRouter1(co nfig-if)#sta ndbyRouter1(co nfig-if)#sta ndbyRouter1(co nfig-if)#sta ndbyRouter1(co nfig-if)#sta ndbyRouter1(co nfig-if)#exitRouter1(co nfig)#e ndRouter1#注释 缺省Hello包时长为3秒，10秒后会接管，如果主用路由器调整时长， 整个组内的路由器都要调整为相同的时长。

最短可以到达毫秒 Router1(co nfig-if)#standby 1 timers msec 100 msec 300Router1#c on figure termi nalRouter1(co nfig)#i nterface Toke nring0Router1(co nfig-if)#ip address 172.22.1.3ip 172.22.1.1use-biapriority 120Router1(co nfig-if)#sta ndbyRouter1(co nfig-if)#sta ndbyRouter1(co nfig-if)#sta ndbyRouter1(co nfig-if)#sta ndby preemptRouter1(co nfig-if)#exitRouter1(co nfig)#e ndRouter2#c on figure termi nalRouter2(co nfig)#i nterface Toke nringORouter2(co nfig-if)#ip address 172.22.1.2Router2(co nfig-if)#sta ndbyRouter2(co nfig-if)#sta ndbyRouter2(co nfig-if)#sta ndby Router2(co nfig-if)#sta ndbyRouter2(co nfig-if)#exitip 172.22.1.1use-biapriority 110preempt注释 由于令牌环网络会用到设备的 MAC地址信息，所以如果MAC就会出问题，因此在配置中使用了 burned-in addressC来避免出现问题HSRP用到虚拟(BIA)来代替MA。