- 产品与解决方案
- 行业解决方案
- 服务
- 支持
- 合作伙伴
- 关于我们
04-H3C S12500 VRRP典型配置举例
本章节下载： 04-H3C S12500 VRRP典型配置举例 (424.75 KB)
H3C S12500 VRRP配置举例
|
Copyright © 2013 杭州华三通信技术有限公司 版权所有，保留一切权利。 非经本公司书面许可，任何单位和个人不得擅自摘抄、复制本文档内容的部分或全部， 并不得以任何形式传播。本文档中的信息可能变动，恕不另行通知。 |
|
目 录
本文档介绍了VRRP（Virtual Router Redundancy Protocol，虚拟路由器冗余协议）的配置举例。
设备支持两种模式的VRRP：
· 标准协议模式：基于RFC实现的VRRP。备份组中只有Master路由器可以转发报文，Backup路由器处于监听状态，无法转发报文。
· 负载均衡模式：在标准协议模式的基础上实现了负载均衡功能，只需创建一个备份组，就可以实现备份组中的每台路由器都能转发流量。
除了负载均衡模式，用户还可以创建多个标准备份组实现负载分担。这种方式下，需要将设备在一个备份组中配置为Master设备，在其他备份组中配置为Backup设备，并且为局域网内的主机分配不同的备份组作为网关。
本文档中的配置均是在实验室环境下进行的配置和验证，配置前设备的所有参数均采用出厂时的缺省配置。如果您已经对设备进行了配置，为了保证配置效果，请确认现有配置和以下举例中的配置不冲突。
如图1所示，在承担网关功能的Switch A和Switch B上分别配置组号相同的VRRP备份组，用户IPv4网络中的主机将VRRP备份组作为缺省网关。要求满足如下需求：
· Switch A是VRRP备份组中的Master设备，用户网络的主机在正常情况下优先从Switch A访问外网。当Switch A故障时，Switch B能够迅速成为Master设备，承担转发任务。
· 当Switch A连接上行链路的接口故障时，用户网络中的主机能够从Switch B访问外网。
· 配置MSTP避免Switch A、Switch B和二层交换机之间存在的环路问题，并指定Master设备为根桥。
图1 IPv4 VRRP单备份组配置组网图
· 为了保证用户网络在正常情况下优先从Switch A访问外网，可以设置Switch A在备份组中具有更高的优先级，即保证Switch A优先作为备份组的Master设备。本例中将Switch A的优先级配置为120，Switch B使用缺省优先级100。
· 为了保证当Switch A出现故障时，Switch B能够迅速成为Master设备，以保证通信不会中断，可以在Switch B上配置Track项与BFD联动监视Switch A的状态。
· Switch A连接上行链路的接口出现故障时，备份组无法感知上行链路接口的故障，这将导致用户网络内的主机无法访问外部网络。可以在Switch A上配置Track项监视上行接口，当Switch A连接上行链路的接口处于Down或Removed状态时，Switch A主动降低自己的优先级，使得备份组内的Switch B优先级高于Switch A，Switch B能够成功抢占成为Master，承担转发任务。
本举例是在S12500-CMW520-R1825P01版本上进行配置和验证的。
· 同一VRRP备份组多个备份的路由器之间，虚拟IP地址及虚拟IP地址个数必须一致。
· 不要在Super VLAN对应的VLAN接口下创建VRRP备份组，以免对网络性能造成影响。
· 备份组的虚拟IP地址不能为全零地址(0.0.0.0)、广播地址(255.255.255.255)、环回地址、非A/B/C类地址和其它非法IP地址(如0.0.0.1)。
· 配置的虚拟IP地址和接口IP地址必须在同一网段，且为合法的主机地址（比如不能为接口IP地址所在网段的网络地址或网络广播地址），否则VRRP备份组无法正常工作。
# 配置VLAN101和VLAN102。
<SwitchA> system-view
[SwitchA] vlan 101
[SwitchA-vlan101] port Gigabitethernet 2/0/1
[SwitchA-vlan101] port Gigabitethernet 2/0/24
[SwitchA-vlan101] quit
[SwitchA] vlan 102
[SwitchA-vlan102] port Gigabitethernet 2/0/2
[SwitchA-vlan102] quit
[SwitchA] interface GigabitEthernet 2/0/1
[SwitchA-GigabitEthernet2/0/1] undo shutdown
[SwitchA-GigabitEthernet2/0/1] quit
[SwitchA] interface GigabitEthernet 2/0/24
[SwitchA-GigabitEthernet2/0/24] undo shutdown
[SwitchA-GigabitEthernet2/0/24] quit
[SwitchA] interface GigabitEthernet 2/0/2
[SwitchA-GigabitEthernet2/0/2] undo shutdown
[SwitchA-GigabitEthernet2/0/2] quit
# 配置上行接口。
[SwitchA] interface vlan-interface 102
[SwitchA-Vlan-interface102] ip address 100.0.0.2 24
[SwitchA–Vlan-interface102] undo shutdown
[SwitchA-Vlan-interface102] quit
# 创建VRRP备份组1。
[SwitchA] interface vlan-interface 101
[SwitchA–Vlan-interface101] undo shutdown
[SwitchA-Vlan-interface101] ip address 10.0.0.2 24
[SwitchA-Vlan-interface101] vrrp vrid 1 virtual-ip 10.0.0.1
# 配置Switch A在备份组1中的优先级为120。
[SwitchA-Vlan-interface101] vrrp vrid 1 priority 120
# 配置监视上行接口。
[SwitchA-Vlan-interface101] vrrp vrid 1 track interface Vlan-interface102 reduced 255
[SwitchA-Vlan-interface101] quit
# 配置MSTP。
[SwitchA] stp region-configuration
[SwitchA-mst-region] region-name vrrp
[SwitchA-mst-region] instance 1 vlan 101
[SwitchA-mst-region] active region-configuration
[SwitchA-mst-region] quit
[SwitchA] stp instance 1 root primary
[SwitchA] stp enable
[SwitchA] interface GigabitEthernet 2/0/2
[SwitchA-GigabitEthernet2/0/2] stp disable
# 配置BFD echo报文方式的Source IP，IP地址可以任意指定，不要与实际接口地址相同。
<SwitchB> system-view
[SwitchB] bfd echo-source-ip 10.10.10.10
# 配置VLAN101和VLAN102。
[SwitchB] vlan 101
[SwitchB-vlan101] port Gigabitethernet 3/0/1
[SwitchB-vlan101] port Gigabitethernet 3/0/24
[SwitchB-vlan101] quit
[SwitchB] vlan 102
[SwitchB-vlan102] port Gigabitethernet 3/0/2
[SwitchB-vlan102] quit
[SwitchB] interface GigabitEthernet 3/0/1
[SwitchB-GigabitEthernet3/0/1] undo shutdown
[SwitchB-GigabitEthernet3/0/1] quit
[SwitchB] interface GigabitEthernet 3/0/24
[SwitchB-GigabitEthernet3/0/24] undo shutdown
[SwitchB-GigabitEthernet3/0/24] quit
[SwitchB] interface GigabitEthernet 3/0/2
[SwitchB-GigabitEthernet3/0/2] undo shutdown
[SwitchB-GigabitEthernet3/0/2] quit
# 配置上行接口。
[SwitchB] interface vlan-interface 102
[SwitchB-Vlan-interface102] undo shutdown
[SwitchB-Vlan-interface102] ip address 100.0.0.3 24
[SwitchB-Vlan-interface102] quit
# 创建VRRP备份组1。
[SwitchB] interface vlan-interface 101
[SwitchB-Vlan-interface101] undo shutdown
[SwitchB-Vlan-interface101] ip address 10.0.0.3 24
[SwitchB-Vlan-interface101] vrrp vrid 1 virtual-ip 10.0.0.1
[SwitchB–Vlan-interface101] vrrp vrid 1 track 1 switchover
# 配置接口接收BFD echo报文的最小时间间隔。
[SwitchB–Vlan-interface101] bfd min-echo-receive-interval 10
[SwitchB–Vlan-interface101] bfd detect-multiplier 3
[SwitchB–Vlan-interface101] quit
# 配置Track对象。
[SwitchB] track 1 bfd echo interface vlan-interface 101 remote ip 10.0.0.2 local ip 10.0.0.3
# 配置MSTP。
[SwitchB] stp region-configuration
[SwitchB-mst-region] region-name vrrp
[SwitchB-mst-region] instance 1 vlan 101
[SwitchB-mst-region] active region-configuration
[SwitchB-mst-region] quit
[SwitchB] stp enable
[SwitchB] interface GigabitEthernet 3/0/2
[SwitchB-GigabitEthernet3/0/2] stp disable
配置MSTP，配置方法同Switch B。
(1) 配置完成后，用户IPv4网络中的主机可以ping通外网。
(2) 通过display vrrp verbose命令查看配置后的结果。
# 显示Switch A上备份组1的详细信息。
[SwitchA] display vrrp verbose
IPv4 Standby Information:
Run Mode : Standard
Run Method : Virtual MAC
Total number of virtual routers : 1
Interface Vlan-interface101
VRID : 1 Adver Timer : 1
Admin Status : Up State : Master
Config Pri : 120 Running Pri : 120
Preempt Mode : Yes Delay Time : 0
Auth Type : None
Virtual IP : 10.0.0.1
Virtual MAC : 0000-5e00-0101
Master IP : 10.0.0.2
VRRP Track Information:
Track Interface: Vlan102 State : Up Pri Reduced : 255
# 显示Switch B上备份组1的详细信息。
[SwitchB] display vrrp verbose
IPv4 Standby Information:
Run Mode : Standard
Run Method : Virtual MAC
Total number of virtual routers : 1
Interface Vlan-interface101
VRID : 1 Adver Timer : 1
Admin Status : Up State : Backup
Config Pri : 100 Running Pri : 100
Preempt Mode : Yes Delay Time : 0
Auth Type : None
Virtual IP : 10.0.0.1
Master IP : 10.0.0.2
VRRP Track Information:
Track Object : 1 State : Positive Switchover
# 显示MSTP状态，二层设备上的一个端口被阻塞。
[LSW]display stp instance 1 brief
MSTID Port Role STP State Protection
1 GigabitEthernet6/1/1 ALTE DISCARDING NONE
1 GigabitEthernet6/1/2 ROOT FORWARDING NONE
# Switch A出现故障或者被监视的上行VLAN接口down后，通过display vrrp verbose命令查看Switch B上备份组的详细信息，可以看到Switch B抢占为Master。
[SwitchB] display vrrp verbose
IPv4 Standby Information:
Run Mode : Standard
Run Method : Virtual MAC
Total number of virtual routers : 1
Interface Vlan-interface101
VRID : 1 Adver Timer : 1
Admin Status : Up State : Master
Config Pri : 100 Running Pri : 100
Preempt Mode : Yes Delay Time : 0
Auth Type : None
Virtual IP : 10.0.0.1
Virtual MAC : 0000-5e00-0101
Master IP : 10.0.0.3
VRRP Track Information:
Track Object : 1 State : Negative Switchover
用户IPv4网络中的主机仍然可以ping通外网。
· 设备A：
#
vlan 101 to 102
#
stp region-configuration
region-name vrrp
instance 1 vlan 101
active region-configuration
#
stp instance 1 root primary
stp enable
#
interface Vlan-interface101
ip address 10.0.0.2 255.255.255.0
vrrp vrid 1 virtual-ip 10.0.0.1
vrrp vrid 1 priority 120
vrrp vrid 1 track interface Vlan-interface102 reduced 255
#
interface Vlan-interface102
ip address 100.0.0.2 255.255.255.0
#
interface GigabitEthernet2/0/1
port link-mode bridge
port access vlan 101
#
interface GigabitEthernet2/0/2
port link-mode bridge
port access vlan 102
stp disable
#
interface GigabitEthernet2/0/24
port link-mode bridge
port access vlan 101
#
· 设备B：
#
bfd echo-source-ip 10.10.10.10
#
vlan 101 to 102
#
stp region-configuration
region-name vrrp
instance 1 vlan 101
active region-configuration
#
stp enable
#
interface Vlan-interface101
ip address 10.0.0.3 255.255.255.0
bfd min-echo-receive-interval 10
bfd detect-multiplier 3
vrrp vrid 1 virtual-ip 10.0.0.1
vrrp vrid 1 track 1 switchover
#
interface Vlan-interface102
ip address 100.0.0.3 255.255.255.0
#
interface GigabitEthernet3/0/1
port link-mode bridge
port access vlan 101
#
interface GigabitEthernet3/0/2
port link-mode bridge
port access vlan 102
stp disable
#
interface GigabitEthernet3/0/24
port link-mode bridge
port access vlan 101
#
track 1 bfd echo interface vlan-interface 101 remote ip 10.0.0.2 local ip 10.0.0.3
#
如图2所示，在承担网关功能的Switch A和Switch B上分别配置两个VRRP备份组，区域A用户将VRRP备份组1作为缺省网关，区域B用户将VRRP备份组2作为缺省网关。要求满足如下需求：
· Switch A是VRRP备份组1中的Master设备，Switch B是VRRP备份组2中的Master设备。在正常情况下，区域A用户通过Switch A进行数据转发，区域B用户通过Switch B进行数据转发。当一台网关设备出现故障时，另一台网关设备能够迅速承担受影响区域内主机流量的转发任务。
· 当备份组中的Master设备连接上行链路的接口故障时，受影响区域内的主机仍然可以通过另一台网关设备访问外部网络。
· 配置MSTP多实例避免Switch A、Switch B和二层交换机之间存在的环路问题，并使得各实例中均以Master设备为根桥。
图2 IPv4 VRRP多备份组负载分担配置组网图
· 为了保证Switch A优先作为备份组1的Master设备，设置Switch A在备份组1中具有更高的优先级（本例中Switch A在备份组1中的优先级配置为120，Switch B使用缺省优先级100）；为了保证Switch B优先作为备份组2的Master设备，设置Switch B在备份组2中具有更高的优先级（本例中Switch B在备份组2中的优先级配置为120，Switch A使用缺省优先级100）。
· 为了保证当一台网关设备出现故障时，另一台网关设备能够迅速承担受影响区域内主机流量的转发任务，可以分别在两个VRRP备份组中的Backup设备上配置Track项与BFD联动监视Master设备状态。
· Master设备连接的上行链路的接口出现故障时，备份组无法感知上行链路接口的故障，这将导致用户网络内的主机无法访问外部网络。可以分别在两个VRRP备份组中的Master设备上配置Track项监视上行接口，当Master设备连接上行链路的接口处于Down或Removed状态时，Master设备主动降低自己的优先级，使得备份组内的Backup设备优先级高于Master设备，从而能够成功抢占成为Master，承担转发任务。
本举例是在S12500-CMW520-R1825P01版本上进行配置和验证的。
· 同一VRRP备份组多个备份的路由器之间，虚拟IP地址及虚拟IP地址个数必须一致。
· 不要在Super VLAN对应的VLAN接口下创建VRRP备份组，以免对网络性能造成影响。
· 备份组的虚拟IP地址不能为全零地址(0.0.0.0)、广播地址(255.255.255.255)、环回地址、非A/B/C类地址和其它非法IP地址(如0.0.0.1)。
· 配置的虚拟IP地址和接口IP地址必须在同一网段，且为合法的主机地址（比如不能为接口IP地址所在网段的网络地址或网络广播地址），否则VRRP备份组无法正常工作。
# 配置BFD echo报文方式的Source IP，IP地址可以任意指定，不要与实际接口地址相同。
<SwitchA> system-view
[SwitchA] bfd echo-source-ip 11.11.11.11
# 配置VLAN101、VLAN102和VLAN103。两设备间采用Trunk口直连。
[SwitchA] vlan 101
[SwitchA-vlan101] port Gigabitethernet 2/0/1
[SwitchA-vlan101] quit
[SwitchA] vlan 102
[SwitchA-vlan102] port Gigabitethernet 2/0/3
[SwitchA-vlan102] quit
[SwitchA] vlan 103
[SwitchA-vlan103] port Gigabitethernet 2/0/2
[SwitchA-vlan103] quit
[SwitchA] interface GigabitEthernet2/0/24
[SwitchA-GigabitEthernet2/0/24] undo shutdown
[SwitchA-GigabitEthernet2/0/24] port link-type trunk
[SwitchA-GigabitEthernet2/0/24] undo port trunk permit vlan 1
[SwitchA-GigabitEthernet2/0/24] port trunk permit vlan 101 to 102
[SwitchA-GigabitEthernet2/0/24] port trunk pvid vlan 101
[SwitchA-GigabitEthernet2/0/24] quit
[SwitchA] interface GigabitEthernet 2/0/1
[SwitchA-GigabitEthernet2/0/1] undo shutdown
[SwitchA-GigabitEthernet2/0/1] quit
[SwitchA] interface GigabitEthernet 2/0/2
[SwitchA-GigabitEthernet2/0/2] undo shutdown
[SwitchA-GigabitEthernet2/0/2] quit
[SwitchA] interface GigabitEthernet 2/0/3
[SwitchA-GigabitEthernet2/0/3] undo shutdown
[SwitchA-GigabitEthernet2/0/3] quit
# 配置上行接口。
[SwitchA] interface vlan-interface 103
[SwitchA-Vlan-interface103] undo shutdown
[SwitchA-Vlan-interface103] ip address 100.0.0.2 24
[SwitchA-Vlan-interface103] quit
# 创建VRRP备份组1。
[SwitchA] interface vlan-interface 101
[SwitchA-Vlan-interface101] undo shutdown
[SwitchA-Vlan-interface101] ip address 10.0.0.2 24
[SwitchA-Vlan-interface101] vrrp vrid 1 virtual-ip 10.0.0.1
# 配置备份组1优先级为120。
[SwitchA-Vlan-interface101] vrrp vrid 1 priority 120
# 配置监视上行接口。
[SwitchA-Vlan-interface101] vrrp vrid 1 track interface Vlan-interface103 reduced 255
[SwitchA-Vlan-interface101] quit
# 创建VRRP备份组2。
[SwitchA] interface vlan-interface 102
[SwitchA-Vlan-interface102] undo shutdown
[SwitchA-Vlan-interface102] ip address 11.0.0.2 24
[SwitchA-Vlan-interface102] vrrp vrid 1 virtual-ip 11.0.0.1
[SwitchA–Vlan-interface102] vrrp vrid 1 track 1 switchover
# 配置接口接收BFD echo报文的最小时间间隔。
[SwitchA–Vlan-interface102] bfd min-echo-receive-interval 10
[SwitchA–Vlan-interface102] bfd detect-multiplier 3
[SwitchA–Vlan-interface102] quit
# 配置Track对象。
[SwitchA] track 1 bfd echo interface vlan-interface 101 remote ip 11.0.0.3 local ip 11.0.0.2
# 配置MSTP。
[SwitchA] stp region-configuration
[SwitchA-mst-region] region-name vrrp
[SwitchA-mst-region] instance 1 vlan 101
[SwitchA-mst-region] instance 2 vlan 102
[SwitchA-mst-region] active region-configuration
[SwitchA-mst-region] quit
[SwitchA] stp instance 1 root primary
[SwitchA] stp enable
[SwitchA] interface GigabitEthernet 2/0/2
[SwitchA-GigabitEthernet2/0/2] stp disable
# 配置BFD echo报文方式的Source IP，IP地址可以任意指定，不要与实际接口地址相同。
<SwitchB> system-view
[SwitchB] bfd echo-source-ip 10.10.10.10
# 配置VLAN101、VLAN102和VLAN103。两设备间采用trunk口直连。
[SwitchB] vlan 101
[SwitchB-vlan101] port Gigabitethernet 3/0/1
[SwitchB-vlan101] quit
[SwitchB] vlan 102
[SwitchB-vlan102] port Gigabitethernet 3/0/3
[SwitchB-vlan102] quit
[SwitchB] vlan 103
[SwitchB-vlan103] port Gigabitethernet 3/0/2
[SwitchB-vlan103] quit
[SwitchB] interface GigabitEthernet3/0/24
[SwitchB-GigabitEthernet3/0/24] port link-type trunk
[SwitchB-GigabitEthernet3/0/24] undo port trunk permit vlan 1
[SwitchB-GigabitEthernet3/0/24] port trunk permit vlan 101 to 102
[SwitchB-GigabitEthernet3/0/24] port trunk pvid vlan 101
[SwitchB-GigabitEthernet3/0/24] quit
[SwitchB] interface GigabitEthernet 3/0/1
[SwitchB-GigabitEthernet3/0/1] undo shutdown
[SwitchB-GigabitEthernet3/0/1] quit
[SwitchB] interface GigabitEthernet 3/0/2
[SwitchB-GigabitEthernet3/0/2] undo shutdown
[SwitchB-GigabitEthernet3/0/2] quit
[SwitchB] interface GigabitEthernet 3/0/3
[SwitchB-GigabitEthernet3/0/3] undo shutdown
[SwitchB-GigabitEthernet3/0/3] quit
# 配置上行接口。
[SwitchB] interface vlan-interface 103
[SwitchB-Vlan-interface103] undo shutdown
[SwitchB-Vlan-interface103] ip address 100.0.0.3 24
# 创建VRRP备份组1。
[SwitchB] interface vlan-interface 101
[SwitchB-Vlan-interface101] undo shutdown
[SwitchB-Vlan-interface101] ip address 10.0.0.3 24
[SwitchB-Vlan-interface101] vrrp vrid 1 virtual-ip 10.0.0.1
[SwitchB–Vlan-interface101] vrrp vrid 1 track 1 switchover
# 配置接口接收BFD echo报文的最小时间间隔。
[SwitchB–Vlan-interface101] bfd min-echo-receive-interval 10
[SwitchB–Vlan-interface101] bfd detect-multiplier 3
[SwitchB–Vlan-interface101] quit
# 配置Track对象。
[SwitchB] track 1 bfd echo interface vlan-interface 101 remote ip 10.0.0.2 local ip 10.0.0.3
# 创建VRRP备份组2。
[SwitchB] interface vlan-interface 102
[SwitchB-Vlan-interface102] undo shutdown
[SwitchB-Vlan-interface102] ip address 11.0.0.3 24
[SwitchB-Vlan-interface102] vrrp vrid 1 virtual-ip 11.0.0.1
# 配置备份组2优先级为120。
[SwitchB-Vlan-interface102] vrrp vrid 1 priority 120
# 配置监视上行接口。
[SwitchB-Vlan-interface102] vrrp vrid 1 track interface Vlan-interface103 reduced 255
[SwitchB-Vlan-interface102] quit
# 配置MSTP。
[SwitchB] stp region-configuration
[SwitchB-mst-region] region-name vrrp
[SwitchB-mst-region] instance 1 vlan 101
[SwitchB-mst-region] instance 2 vlan 102
[SwitchB-mst-region] active region-configuration
[SwitchB-mst-region] quit
[SwitchB] stp instance 2 root primary
[SwitchB] stp enable
[SwitchB] interface GigabitEthernet 3/0/2
[SwitchB-GigabitEthernet3/0/2] stp disable
配置MSTP，配置方法同Switch B。
(1) 配置完成后，区域A和区域B中的主机可以ping通外网。
(2) 通过display vrrp verbose命令查看配置后的结果。
# 显示Switch A上备份组1的详细信息。
[SwitchA] display vrrp verbose
IPv4 Standby Information:
Run Mode : Standard
Run Method : Virtual MAC
Total number of virtual routers : 2
Interface Vlan-interface101
VRID : 1 Adver Timer : 1
Admin Status : Up State : Master
Config Pri : 120 Running Pri : 120
Preempt Mode : Yes Delay Time : 0
Auth Type : None
Virtual IP : 10.0.0.1
Virtual MAC : 0000-5e00-0101
Master IP : 10.0.0.2
VRRP Track Information:
Track Interface: Vlan103 State : Up Pri Reduced : 255
Interface Vlan-interface102
VRID : 1 Adver Timer : 1
Admin Status : Up State : Backup
Config Pri : 100 Running Pri : 100
Preempt Mode : Yes Delay Time : 0
Auth Type : None
Virtual IP : 11.0.0.1
Master IP : 11.0.0.3
VRRP Track Information:
Track Object : 1 State : Positive Switchover
# 显示Switch B上备份组1的详细信息。
[SwitchB] display vrrp verbose
IPv4 Standby Information:
Run Mode : Standard
Run Method : Virtual MAC
Total number of virtual routers : 2
Interface Vlan-interface101
VRID : 1 Adver Timer : 1
Admin Status : Up State : Backup
Config Pri : 100 Running Pri : 100
Preempt Mode : Yes Delay Time : 0
Auth Type : None
Virtual IP : 10.0.0.1
Master IP : 10.0.0.2
VRRP Track Information:
Track Object : 1 State : Positive Switchover
Interface Vlan-interface102
VRID : 1 Adver Timer : 1
Admin Status : Up State : Master
Config Pri : 120 Running Pri : 120
Preempt Mode : Yes Delay Time : 0
Auth Type : None
Virtual IP : 11.0.0.1
Virtual MAC : 0000-5e00-0101
Master IP : 11.0.0.3
VRRP Track Information:
Track Interface: Vlan103 State : Up Pri Reduced : 255
# 显示MSTP状态。
[SwitchA] display stp brief
MSTID Port Role STP State Protection
0 GigabitEthernet2/0/1 DESI FORWARDING NONE
0 GigabitEthernet2/0/3 ROOT FORWARDING NONE
0 GigabitEthernet2/0/24 DESI FORWARDING NONE
1 GigabitEthernet2/0/1 DESI FORWARDING NONE
1 GigabitEthernet2/0/24 DESI FORWARDING NONE
2 GigabitEthernet2/0/3 ALTE DISCARDING NONE
2 GigabitEthernet2/0/24 ROOT FORWARDING NONE
[SwitchB] display stp brief
MSTID Port Role STP State Protection
0 GigabitEthernet3/0/1 DESI FORWARDING NONE
0 GigabitEthernet3/0/3 ROOT FORWARDING NONE
0 GigabitEthernet3/0/24 ALTE DISCARDING NONE
1 GigabitEthernet3/0/1 ALTE DISCARDING NONE
1 GigabitEthernet3/0/24 ROOT FORWARDING NONE
2 GigabitEthernet3/0/3 DESI FORWARDING NONE
2 GigabitEthernet3/0/24 DESI FORWARDING NONE
# Switch A出现故障或者被监视的上行VLAN接口down后，通过display vrrp verbose命令查看Switch B上备份组的详细信息。可以看到Switch B抢占为备份组1的Master。
[SwitchB] display vrrp verbose
IPv4 Standby Information:
Run Mode : Standard
Run Method : Virtual MAC
Total number of virtual routers : 2
Interface Vlan-interface101
VRID : 1 Adver Timer : 1
Admin Status : Up State : Master
Config Pri : 100 Running Pri : 100
Preempt Mode : Yes Delay Time : 0
Auth Type : None
Virtual IP : 10.0.0.1
Virtual MAC : 0000-5e00-0101
Master IP : 10.0.0.3
VRRP Track Information:
Track Object : 1 State : Positive Switchover
Interface Vlan-interface102
VRID : 1 Adver Timer : 1
Admin Status : Up State : Master
Config Pri : 120 Running Pri : 120
Preempt Mode : Yes Delay Time : 0
Auth Type : None
Virtual IP : 11.0.0.1
Virtual MAC : 0000-5e00-0101
Master IP : 11.0.0.3
VRRP Track Information:
Track Interface: Vlan103 State : Up Pri Reduced : 255
区域A和区域B中的主机仍然可以ping通外网。
· 设备A：
#
bfd echo-source-ip 11.11.11.11
#
vlan 101 to 103
#
stp region-configuration
region-name vrrp
instance 1 vlan 101
instance 2 vlan 102
active region-configuration
#
stp instance 1 root primary
stp enable
#
interface Vlan-interface101
ip address 10.0.0.2 255.255.255.0
vrrp vrid 1 virtual-ip 10.0.0.1
vrrp vrid 1 priority 120
vrrp vrid 1 track interface Vlan-interface103 reduced 255
#
interface Vlan-interface102
ip address 11.0.0.2 255.255.255.0
bfd min-echo-receive-interval 10
bfd detect-multiplier 3
vrrp vrid 1 virtual-ip 11.0.0.1
vrrp vrid 1 track 1 switchover
#
interface Vlan-interface103
ip address 100.0.0.2 255.255.255.0
#
interface GigabitEthernet2/0/1
port link-mode bridge
port access vlan 101
#
interface GigabitEthernet2/0/2
port link-mode bridge
port access vlan 103
stp disable
#
interface GigabitEthernet2/0/3
port link-mode bridge
port access vlan 102
#
interface GigabitEthernet2/0/24
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 101 to 102
port trunk pvid vlan 101
#
track 1 bfd echo interface vlan-interface 101 remote ip 11.0.0.3 local ip 11.0.0.2
#
· 设备B：
#
bfd echo-source-ip 10.10.10.10
#
vlan 101 to 103
#
stp region-configuration
region-name vrrp
instance 1 vlan 101
instance 2 vlan 102
active region-configuration
#
stp instance 2 root primary
stp enable
#
interface Vlan-interface101
ip address 10.0.0.3 255.255.255.0
bfd min-echo-receive-interval 10
bfd detect-multiplier 3
vrrp vrid 1 virtual-ip 10.0.0.1
vrrp vrid 1 track 1 switchover
#
interface Vlan-interface102
ip address 11.0.0.3 255.255.255.0
vrrp vrid 1 virtual-ip 11.0.0.1
vrrp vrid 1 priority 120
vrrp vrid 1 track interface Vlan-interface103 reduced 255
#
interface Vlan-interface103
ip address 100.0.0.3 255.255.255.0
#
interface GigabitEthernet3/0/1
port link-mode bridge
port access vlan 101
#
interface GigabitEthernet3/0/2
port link-mode bridge
port access vlan 103
stp disable
#
interface GigabitEthernet3/0/3
port link-mode bridge
port access vlan 102
#
interface GigabitEthernet3/0/24
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 101 to 102
port trunk pvid vlan 101
#
track 1 bfd echo interface vlan-interface 101 remote ip 10.0.0.2 local ip 10.0.0.3
#
如图3所示，在承担网关功能的Switch A、Switch B和Switch C上配置有VRRP备份组，虚拟IP地址为10.1.1.1/24。用户IPv4网络中的主机将VRRP备份组作为缺省网关。要求通过配置VRRP负载均衡模式满足如下需求：
· Switch A是VRRP备份组中的Master设备，Switch B、Switch C是Backup设备。某台网关设备（Switch A、Switch B或Switch C）出现故障时，用户主机仍然可以通过其他网关设备访问外部网络。
· 不同主机的流量通过备份组中不同的网关设备转发，避免流量集中在Master设备上。
· AVF（Active Virtual Forwarder，动态虚拟转发器）上行链路出现故障时，能及时通知LVF（Listening Virtual Forwarder，监听虚拟转发器）接替其转发流量。
图3 IPv4 VRRP负载均衡模式配置组网图
· 为了保证Switch A作为Master，可以将Switch A在备份组中的优先级配置为120，高于Switch B（Switch B在备份组中的优先级配置为110）、Switch C（Switch C在备份组中的优先级为缺省值100）。
· 为了保证AVF上行链路出现故障时，能及时通知LVF接替其转发流量。可以在各网关设备上配置虚拟转发器的监视功能，利用BFD监测AVF连接的上行链路的状态，并通过Track功能在虚拟转发器和BFD之间建立联动。当上行链路出现故障，Track项的状态变为Negative，虚拟转发器的权重将降低指定的数额，以便虚拟转发器优先级更高的网关设备抢占成为AVF，接替其转发流量。
本举例是在S12500-CMW520-R1825P01版本上进行配置和验证的。
· 建议不要在Super VLAN对应的VLAN接口下创建VRRP备份组，以免对网络性能造成影响。
· VRRP工作在负载均衡模式时，虚拟IP地址不能与VRRP备份组中路由器的接口IP地址相同，即负载均衡模式的VRRP备份组中不能存在IP地址拥有者。
· 备份组的虚拟IP地址不能为全零地址(0.0.0.0)、广播地址(255.255.255.255)、环回地址、非A/B/C类地址和其它非法IP地址(如0.0.0.1)。
· 配置的虚拟IP地址和接口IP地址在同一网段，且为合法的主机地址时，备份组才能够正常工作；否则，如果配置的虚拟IP地址和接口IP地址不在同一网段，或为接口IP地址所在网段的网络地址或网络广播地址，虽然可以配置成功，但是备份组会始终处于Initialize状态，此状态下VRRP不起作用。
# 配置VLAN2。
<SwitchA> system-view
[SwitchA] vlan 2
[SwitchA-vlan2] port Gigabitethernet 3/0/1
[SwitchA-vlan2] quit
[SwitchA] interface GigabitEthernet 3/0/1
[SwitchA-GigabitEthernet3/0/1] undo shutdown
[SwitchA-GigabitEthernet3/0/1] quit
# 配置VRRP工作在负载均衡模式。
[SwitchA] vrrp mode load-balance
# 创建备份组1，并配置备份组1的虚拟IP地址为10.1.1.1。
[SwitchA] interface vlan-interface 2
[SwitchA-Vlan-interface2] ip address 10.1.1.2 24
[SwitchA-Vlan-interface2] vrrp vrid 1 virtual-ip 10.1.1.1
# 配置Switch A在备份组1中的优先级为120。
[SwitchA-Vlan-interface2] vrrp vrid 1 priority 120
# 配置虚拟转发器的监视功能。
[SwitchA-Vlan-interface2] vrrp vrid 1 weight track 1 reduced 255
[SwitchA-Vlan-interface2] undo shutdown
[SwitchA-Vlan-interface2] quit
# 配置上行接口和BFD参数。BFD echo source IP仅用于报文封装，建议指定为不存在的IP地址，以避免对端设备可能发生的icmp重定向。
[SwitchA] bfd echo-source-ip 45.45.45.45
[SwitchA] vlan 1000
[SwitchA-vlan1000] port Gigabitethernet 3/0/5
[SwitchA-vlan1000] quit
[SwitchA] interface GigabitEthernet 3/0/5
[SwitchA-GigabitEthernet3/0/5] undo shutdown
[SwitchA-GigabitEthernet3/0/5] quit
[SwitchA] interface vlan-interface 1000
[SwitchA-Vlan-interface1000] ip address 100.0.0.2 24
[SwitchA-Vlan-interface1000] bfd min-echo-receive-interval 100
[SwitchA-Vlan-interface1000] bfd detect-multiplier 3
[SwitchA-Vlan-interface1000] undo shutdown
[SwitchA-Vlan-interface1000] quit
# 创建和BFD会话关联的Track项，远端IP为上行设备的接口IP地址。
[SwitchA] track 1 bfd echo interface Vlan-interface1000 remote ip 100.0.0.1 local ip 100.0.0.2
# 配置VLAN2。
<SwitchB> system-view
[SwitchB] vlan 2
[SwitchB-vlan2] port Gigabitethernet 3/0/1
[SwitchB-vlan2] quit
[SwitchB] interface GigabitEthernet 3/0/1
[SwitchB-GigabitEthernet3/0/1] undo shutdown
[SwitchB-GigabitEthernet3/0/1] quit
# 配置VRRP工作在负载均衡模式。
[SwitchB] vrrp mode load-balance
# 创建备份组1，并配置备份组1的虚拟IP地址为10.1.1.1。
[SwitchB] interface vlan-interface 2
[SwitchB-Vlan-interface2] ip address 10.1.1.3 24
[SwitchB-Vlan-interface2] vrrp vrid 1 virtual-ip 10.1.1.1
# 配置Swtich B在备份组1中的优先级为110。
[SwitchB-Vlan-interface2] vrrp vrid 1 priority 110
# 配置虚拟转发器的监视功能。
[SwitchB-Vlan-interface2] vrrp vrid 1 weight track 1 reduced 255
[SwitchB-Vlan-interface2] undo shutdown
[SwitchB-Vlan-interface2] quit
# 配置上行接口和BFD参数。BFD echo source IP仅用于报文封装，建议指定为不存在的IP地址，以避免对端设备可能发生的icmp重定向。
[SwitchB] bfd echo-source-ip 56.56.56.56
[SwitchB] vlan 1000
[SwitchB-vlan1000] port Gigabitethernet 3/0/5
[SwitchB-vlan1000] quit
[SwitchB] interface GigabitEthernet 3/0/5
[SwitchB-GigabitEthernet3/0/5] undo shutdown
[SwitchB-GigabitEthernet3/0/5] quit
[SwitchB] interface vlan-interface 1000
[SwitchB-Vlan-interface1000] ip address 100.0.0.3 24
[SwitchB-Vlan-interface1000] bfd min-echo-receive-interval 100
[SwitchB-Vlan-interface1000] bfd detect-multiplier 3
[SwitchB-Vlan-interface1000] undo shutdown
[SwitchB-Vlan-interface1000] quit
# 创建和BFD会话关联的Track项，远端IP为上行设备的接口IP地址。
[SwitchB] track 1 bfd echo interface Vlan-interface1000 remote ip 100.0.0.1 local ip 100.0.0.3
# 配置VLAN2。
<SwitchC> system-view
[SwitchC] vlan 2
[SwitchC-vlan2] port Gigabitethernet 3/0/1
[SwitchC-vlan2] quit
[SwitchC] interface GigabitEthernet 3/0/1
[SwitchC-GigabitEthernet3/0/1] undo shutdown
[SwitchC-GigabitEthernet3/0/1] quit
# 配置VRRP工作在负载均衡模式。
[SwitchC] vrrp mode load-balance
# 创建备份组1，并配置备份组1的虚拟IP地址为10.1.1.1。
[SwitchC] interface vlan-interface 2
[SwitchC-Vlan-interface2] ip address 10.1.1.4 24
[SwitchC-Vlan-interface2] vrrp vrid 1 virtual-ip 10.1.1.1
# 配置虚拟转发器的监视功能。
[SwitchC-Vlan-interface2] vrrp vrid 1 weight track 1 reduced 255
[SwitchC-Vlan-interface2] undo shutdown
[SwitchC-Vlan-interface2] quit
# 配置上行接口和BFD参数。BFD echo source IP仅用于报文封装，建议指定为不存在的IP地址，以避免对端设备可能发生的icmp重定向。
[SwitchC] bfd echo-source-ip 67.67.67.67
[SwitchC] vlan 1000
[SwitchC-vlan1000] port Gigabitethernet 3/0/5
[SwitchC-vlan1000] quit
[SwitchC] interface GigabitEthernet 3/0/5
[SwitchC-GigabitEthernet3/0/5] undo shutdown
[SwitchC-GigabitEthernet3/0/5] quit
[SwitchC] interface vlan-interface 1000
[SwitchC-Vlan-interface1000] ip address 100.0.0.4 24
[SwitchC-Vlan-interface1000] bfd min-echo-receive-interval 100
[SwitchC-Vlan-interface1000] bfd detect-multiplier 3
[SwitchC-Vlan-interface1000] undo shutdown
[SwitchC-Vlan-interface1000] quit
# 创建和BFD会话关联的Track项，远端IP为上行设备的接口IP地址。
[SwitchC] track 1 bfd echo interface Vlan-interface1000 remote ip 100.0.0.1 local ip 100.0.0.4
(1) 配置完成后，Host A、Host B和Host C都可以ping通外网。
(2) 通过display vrrp verbose命令查看配置后的结果。
# 显示Switch A上备份组1的详细信息。
[SwitchA] display vrrp verbose
IPv4 Standby Information:
Run Mode : Load Balance
Run Method : Virtual MAC
Total number of virtual routers : 1
Interface Vlan-interface2
VRID : 1 Adver Timer : 1
Admin Status : Up State : Master
Config Pri : 120 Running Pri : 120
Preempt Mode : Yes Delay Time : 0
Auth Type : None
Virtual IP : 10.1.1.1
Member IP List : 10.1.1.2 (Local, Master)
10.1.1.4 (Backup)
10.1.1.3 (Backup)
Forwarder Information: 3 Forwarders 1 Active
Config Weight : 255
Running Weight : 255
Forwarder 01
State : Active
Virtual MAC : 000f-e2ff-0011 (Owner)
Owner ID : 6697-1250-0100
Priority : 255
Active : local
Forwarder 02
State : Listening
Virtual MAC : 000f-e2ff-0012 (Learnt)
Owner ID : 00e0-6405-3100
Priority : 127
Active : 10.1.1.3
Forwarder 03
State : Listening
Virtual MAC : 000f-e2ff-0013 (Learnt)
Owner ID : 0001-0002-0103
Priority : 127
Active : 10.1.1.4
Forwarder Weight Track Information:
Track Object : 1 State : Positive Weight Reduced : 255
# 显示Switch B上备份组1的详细信息。
[SwitchB] display vrrp verbose
IPv4 Standby Information:
Run Mode : Load Balance
Run Method : Virtual MAC
Total number of virtual routers : 1
Interface Vlan-interface2
VRID : 1 Adver Timer : 1
Admin Status : Up State : Backup
Config Pri : 110 Running Pri : 110
Preempt Mode : Yes Delay Time : 0
Auth Type : None
Virtual IP : 10.1.1.1
Member IP List : 10.1.1.3 (Local, Backup)
10.1.1.4 (Backup)
10.1.1.2 (Master)
Forwarder Information: 3 Forwarders 1 Active
Config Weight : 255
Running Weight : 255
Forwarder 01
State : Listening
Virtual MAC : 000f-e2ff-0011 (Learnt)
Owner ID : 6697-1250-0100
Priority : 127
Active : 10.1.1.2
Forwarder 02
State : Active
Virtual MAC : 000f-e2ff-0012 (Owner)
Owner ID : 00e0-6405-3100
Priority : 255
Active : local
Forwarder 03
State : Listening
Virtual MAC : 000f-e2ff-0013 (Learnt)
Owner ID : 0001-0002-0103
Priority : 127
Active : 10.1.1.4
Forwarder Weight Track Information:
Track Object : 1 State : Positive Weight Reduced : 255
# 显示Switch C上备份组1的详细信息。
[SwitchC] display vrrp verbose
IPv4 Standby Information:
Run Mode : Load Balance
Run Method : Virtual MAC
Total number of virtual routers : 1
Interface Vlan-interface2
VRID : 1 Adver Timer : 1
Admin Status : Up State : Backup
Config Pri : 100 Running Pri : 100
Preempt Mode : Yes Delay Time : 0
Auth Type : None
Virtual IP : 10.1.1.1
Member IP List : 10.1.1.4 (Local, Backup)
10.1.1.2 (Master)
10.1.1.3 (Backup)
Forwarder Information: 3 Forwarders 1 Active
Config Weight : 255
Running Weight : 255
Forwarder 01
State : Listening
Virtual MAC : 000f-e2ff-0011 (Learnt)
Owner ID : 6697-1250-0100
Priority : 127
Active : 10.1.1.2
Forwarder 02
State : Listening
Virtual MAC : 000f-e2ff-0012 (Learnt)
Owner ID : 00e0-6405-3100
Priority : 127
Active : 10.1.1.3
Forwarder 03
State : Active
Virtual MAC : 000f-e2ff-0013 (Owner)
Owner ID : 0001-0002-0103
Priority : 255
Active : local
Forwarder Weight Track Information:
Track Object : 1 State : Positive Weight Reduced : 255
以上显示信息表示在备份组1中Switch A为Master路由器，Switch B和Switch C为Backup路由器。Switch A、Switch B和Switch C上各自存在一个AVF，并存在作为备份的两个LVF。
# Switch A出现故障后，通过display vrrp verbose命令查看Switch C上备份组的详细信息。
[SwitchC] display vrrp verbose
IPv4 Standby Information:
Run Mode : Load Balance
Run Method : Virtual MAC
Total number of virtual routers : 1
Interface Vlan-interface2
VRID : 1 Adver Timer : 1
Admin Status : Up State : Backup
Config Pri : 100 Running Pri : 100
Preempt Mode : Yes Delay Time : 0
Auth Type : None
Virtual IP : 10.1.1.1
Member IP List : 10.1.1.4 (Local, Backup)
10.1.1.3 (Master)
Forwarder Information: 3 Forwarders 2 Active
Config Weight : 255
Running Weight : 255
Forwarder 01
State : Active
Virtual MAC : 000f-e2ff-0011 (Take Over)
Owner ID : 6697-1250-0100
Priority : 85
Active : local
Redirect Time : 588 secs
Time-out Time : 1788 secs
Forwarder 02
State : Listening
Virtual MAC : 000f-e2ff-0012 (Learnt)
Owner ID : 00e0-6405-3100
Priority : 85
Active : 10.1.1.3
Forwarder 03
State : Active
Virtual MAC : 000f-e2ff-0013 (Owner)
Owner ID : 0001-0002-0103
Priority : 255
Active : local
Forwarder Weight Track Information:
Track Object : 1 State : Positive Weight Reduced : 255
以上显示信息表示Switch A出现故障后，Switch B成为Master路由器；Switch C成为虚拟MAC地址000f-e2ff-0011对应的虚拟转发器的AVF，Host A发送给外网的报文通过Switch C转发。
· 设备A：
#
vrrp mode load-balance
#
bfd echo-source-ip 45.45.45.45
#
vlan 2
#
vlan 1000
#
interface Vlan-interface2
ip address 10.1.1.2 255.255.255.0
vrrp vrid 1 virtual-ip 10.1.1.1
vrrp vrid 1 priority 120
vrrp vrid 1 weight track 1 reduced 255
#
interface Vlan-interface1000
ip address 100.0.0.2 255.255.255.0
bfd min-echo-receive-interval 100
bfd detect-multiplier 3
#
interface GigabitEthernet3/0/1
port link-mode bridge
port access vlan 2
#
interface GigabitEthernet3/0/5
port link-mode bridge
port access vlan 1000
#
track 1 bfd echo interface Vlan-interface1000 remote ip 100.0.0.1 local ip 100.0.0.2
#
· 设备B：
#
vrrp mode load-balance
#
bfd echo-source-ip 56.56.56.56
#
vlan 2
#
vlan 1000
#
interface Vlan-interface2
ip address 10.1.1.3 255.255.255.0
vrrp vrid 1 virtual-ip 10.1.1.1
vrrp vrid 1 priority 110
vrrp vrid 1 weight track 1 reduced 255
#
interface Vlan-interface1000
ip address 100.0.0.3 255.255.255.0
bfd min-echo-receive-interval 100
bfd detect-multiplier 3
#
interface GigabitEthernet3/0/1
port link-mode bridge
port access vlan 2
#
interface GigabitEthernet3/0/5
port link-mode bridge
port access vlan 1000
#
track 1 bfd echo interface Vlan-interface 1000 remote ip 100.0.0.1 local ip 100.0.0.3
#
· 设备C：
#
vrrp mode load-balance
#
bfd echo-source-ip 67.67.67.67
#
vlan 2
#
vlan 1000
#
interface Vlan-interface2
ip address 10.1.1.4 255.255.255.0
vrrp vrid 1 virtual-ip 10.1.1.1
vrrp vrid 1 weight track 1 reduced 255
#
interface Vlan-interface 1000
ip address 100.0.0.4 255.255.255.0
bfd min-echo-receive-interval 100
bfd detect-multiplier 3
#
interface GigabitEthernet3/0/1
port link-mode bridge
port access vlan 2
#
interface GigabitEthernet3/0/5
port link-mode bridge
port access vlan 1000
#
track 1 bfd echo interface Vlan-interface1000 remote ip 100.0.0.1 local ip 100.0.0.4
#
如图4所示，在承担网关功能的Switch A和Switch B上分别配置组号相同的IPv6 VRRP备份组，用户IPv6网络中的主机将VRRP备份组作为缺省网关。要求满足如下需求：
· Switch A是VRRP备份组中的Master设备，用户网络的主机在正常情况下优先从Switch A访问外网。当Switch A故障时，Switch B能够迅速成为Master设备，承担转发任务。
· 当Switch A连接上行链路的接口故障时，用户网络中的主机能够从Switch B访问外网。
· 配置MSTP避免Switch A、Switch B和二层交换机之间存在的环路问题，并指定Master设备为根桥。
图4 IPv6 VRRP单备份组配置组图
· 为了保证用户网络在正常情况下优先从Switch A访问外网，可以设置Switch A在备份组中具有更高的优先级，即保证Switch A优先作为备份组的Master设备。本例中将Switch A的优先级配置为120，Switch B使用缺省优先级100。
· 为了保证当Switch A出现故障时，Switch B能够迅速成为Master设备，以保证通信不会中断，可以在Switch B上配置Track项与BFD联动监视Switch A的状态。
· Switch A连接上行链路的接口出现故障时，备份组无法感知上行链路接口的故障，这将导致用户网络内的主机无法访问外部网络。可以在Switch A上配置Track项监视上行接口，当Switch A连接上行链路的接口处于Down或Removed状态时，Switch A主动降低自己的优先级，使得备份组内的Switch B优先级高于Switch A，Switch B能够成功抢占成为Master，承担转发任务。
本举例是在S12500-CMW520-R1825P01版本上进行配置和验证的。
· 为实现IPv6报文在S12500上能正常转发，必须先使能IPv6报文转发功能（缺省情况为关闭）。
· 同一VRRP备份组多个备份的路由器之间，虚拟IP地址及虚拟IP地址个数必须一致。
· 不要在Super VLAN对应的VLAN接口下创建VRRP备份组，以免对网络性能造成影响。
# 使能IPv6报文转发功能。
<SwitchA> system-view
[SwitchA] ipv6
# 配置VLAN101和VLAN103。
[SwitchA] vlan 101
[SwitchA-vlan101] port Gigabitethernet 2/0/1
[SwitchA-vlan101] port Gigabitethernet 2/0/24
[SwitchA-vlan101] quit
[SwitchA] vlan 103
[SwitchA-vlan103] port Gigabitethernet 2/0/2
[SwitchA-vlan103] quit
[SwitchA] interface GigabitEthernet 2/0/1
[SwitchA-GigabitEthernet2/0/1] undo shutdown
[SwitchA-GigabitEthernet2/0/1] quit
[SwitchA] interface GigabitEthernet 2/0/2
[SwitchA-GigabitEthernet2/0/2] undo shutdown
[SwitchA-GigabitEthernet2/0/2] quit
[SwitchA] interface GigabitEthernet 2/0/24
[SwitchA-GigabitEthernet2/0/24] undo shutdown
[SwitchA-GigabitEthernet2/0/24] quit
# 配置上行接口。
[SwitchA] interface vlan-interface 103
[SwitchA-Vlan-interface103] undo shutdown
[SwitchA-Vlan-interface103] ipv6 address 2003::2 64
[SwitchA-Vlan-interface103] quit
# 创建VRRP备份组1。
[SwitchA] interface vlan-interface 101
[SwitchA-Vlan-interface101] undo shutdown
[SwitchA-Vlan-interface101] ipv6 address 2001::2 64
[SwitchA-Vlan-interface101] vrrp ipv6 vrid 1 virtual-ip FE80::1 link-local
[SwitchA-Vlan-interface101] vrrp ipv6 vrid 1 virtual-ip 2001::1
# 配置IPv4地址，用于BFD检测。
[SwitchA-Vlan-interface101] ip address 10.0.0.2 24
# 配置Switch A在备份组1中的优先级为120。
[SwitchA-Vlan-interface101] vrrp ipv6 vrid 1 priority 120
# 配置监视上行接口。
[SwitchA-Vlan-interface101] vrrp ipv6 vrid 1 track interface Vlan-interface103 reduced 255
[SwitchA-Vlan-interface101] quit
# 配置MSTP。
[SwitchA] stp region-configuration
[SwitchA-mst-region] region-name vrrp
[SwitchA-mst-region] instance 1 vlan 101
[SwitchA-mst-region] active region-configuration
[SwitchA-mst-region] quit
[SwitchA] stp instance 1 root primary
[SwitchA] stp enable
[SwitchA] interface GigabitEthernet 2/0/2
[SwitchA-GigabitEthernet2/0/2] stp disable
# 使能IPv6报文转发功能。
<SwitchB> system-view
[SwitchB] ipv6
# 配置BFD echo报文方式的Source IP，IP地址可以任意指定，不要与实际接口地址相同。
[SwitchB] bfd echo-source-ip 10.10.10.10
# 配置VLAN101和VLAN103。
[SwitchB] vlan 101
[SwitchB-vlan101] port Gigabitethernet 3/0/1
[SwitchB-vlan101] port Gigabitethernet 3/0/24
[SwitchB-vlan101] quit
[SwitchB] vlan 103
[SwitchB-vlan103] port Gigabitethernet 3/0/2
[SwitchB-vlan103] quit
[SwitchB] interface GigabitEthernet 3/0/1
[SwitchB-GigabitEthernet3/0/1] undo shutdown
[SwitchB-GigabitEthernet3/0/1] quit
[SwitchB] interface GigabitEthernet 3/0/2
[SwitchB-GigabitEthernet3/0/2] undo shutdown
[SwitchB-GigabitEthernet3/0/2] quit
[SwitchB] interface GigabitEthernet 3/0/24
[SwitchB-GigabitEthernet3/0/24] undo shutdown
[SwitchB-GigabitEthernet3/0/24] quit
# 配置上行接口。
[SwitchB] interface vlan-interface 103
[SwitchB-Vlan-interface103] undo shutdown
[SwitchB-Vlan-interface103] ipv6 address 2003::3 64
[SwitchB-Vlan-interface103] quit
# 创建VRRP备份组1。
[SwitchB] interface vlan-interface 101
[SwitchB-Vlan-interface101] undo shutdown
[SwitchB-Vlan-interface101] ipv6 address 2001::3 64
[SwitchB-Vlan-interface101] vrrp ipv6 vrid 1 virtual-ip FE80::1 link-local
[SwitchB-Vlan-interface101] vrrp ipv6 vrid 1 virtual-ip 2001::1
[SwitchB–Vlan-interface101] vrrp ipv6 vrid 1 track 1 switchover
# 配置IPv4地址，用于BFD检测。
[SwitchB-Vlan-interface101] ip address 10.0.0.3 24
# 配置接口接收BFD echo报文的最小时间间隔。
[SwitchB–Vlan-interface101] bfd min-echo-receive-interval 10
[SwitchB–Vlan-interface101] bfd detect-multiplier 3
[SwitchB–Vlan-interface101] quit
# 配置Track对象。
[SwitchB] track 1 bfd echo interface vlan-interface 101 remote ip 10.0.0.2 local ip 10.0.0.3
# 配置MSTP。
[SwitchB] stp region-configuration
[SwitchB-mst-region] region-name vrrp
[SwitchB-mst-region] instance 1 vlan 101
[SwitchB-mst-region] active region-configuration
[SwitchB-mst-region] quit
[SwitchB] stp enable
[SwitchB] interface GigabitEthernet 3/0/2
[SwitchB-GigabitEthernet3/0/2] stp disable
配置MSTP，配置方法同Switch B。
(1) 配置完成后，用户IPv6网络中的主机可以ping通外网。
(2) 通过display vrrp ipv6 verbose命令查看配置后的结果。
# 显示Switch A上备份组1的详细信息。
[SwitchA] display vrrp ipv6 verbose
IPv6 Standby Information:
Run Mode : Standard
Run Method : Virtual MAC
Total number of virtual routers : 1
Interface Vlan-interface101
VRID : 1 Adver Timer : 100
Admin Status : Up State : Master
Config Pri : 120 Running Pri : 120
Preempt Mode : Yes Delay Time : 0
Auth Type : None
Virtual IP : FE80::1
2001::1
Virtual MAC : 0000-5e00-0201
Master IP : FE80::2E0:64FF:FE05:3100
VRRP Track Information:
Track Interface: Vlan103 State : Up Pri Reduced : 255
# 显示Switch B上备份组1的详细信息。
[SwitchB] display vrrp ipv6 verbose
IPv6 Standby Information:
Run Mode : Standard
Run Method : Virtual MAC
Total number of virtual routers : 1
Interface Vlan-interface101
VRID : 1 Adver Timer : 100
Admin Status : Up State : Backup
Config Pri : 100 Running Pri : 100
Preempt Mode : Yes Delay Time : 0
Auth Type : None
Virtual IP : FE80::1
2001::1
Master IP : FE80::2E0:64FF:FE05:3100
VRRP Track Information:
Track Object : 1 State : Positive Switchover
# 显示二层交换机上MSTP状态，其中和Backup相连的端口被阻塞。
[SwitchB]display stp instance 1 brief
MSTID Port Role STP State Protection
1 GigabitEthernet3/0/1 ALTE DISCARDING NONE
1 GigabitEthernet3/0/24 ROOT FORWARDING NONE
# Switch A出现故障或者被监视的上行VLAN接口down后，通过display vrrp ipv6 verbose命令查看Switch B上备份组的详细信息。可以看到Switch B抢占为Master。
[SwitchB] display vrrp ipv6 verbose
IPv6 Standby Information:
Run Mode : Standard
Run Method : Virtual MAC
Total number of virtual routers : 1
Interface Vlan-interface101
VRID : 1 Adver Timer : 100
Admin Status : Up State : Master
Config Pri : 100 Running Pri : 100
Preempt Mode : Yes Delay Time : 0
Auth Type : None
Virtual IP : FE80::1
2001::1
Virtual MAC : 0000-5e00-0201
Master IP : FE80::6697:12FF:FE50:100
VRRP Track Information:
Track Object : 1 State : Negative Switchover
用户IPv6网络中的主机仍然可以ping通外网。
· 设备A：
#
ipv6
#
vlan 101
#
vlan 103
#
stp region-configuration
region-name vrrp
instance 1 vlan 101
active region-configuration
#
stp instance 1 root primary
stp enable
#
interface Vlan-interface101
ipv6 address 2001::2/64
ip address 10.0.0.2 255.255.255.0
vrrp ipv6 vrid 1 virtual-ip FE80::1 link-local
vrrp ipv6 vrid 1 virtual-ip 2001::1
vrrp ipv6 vrid 1 priority 120
vrrp ipv6 vrid 1 track interface Vlan-interface103 reduced 255
#
interface Vlan-interface103
ipv6 address 2003::2/64
#
interface GigabitEthernet2/0/1
port link-mode bridge
port access vlan 101
#
interface GigabitEthernet2/0/2
port link-mode bridge
port access vlan 103
stp disable
#
interface GigabitEthernet2/0/24
port link-mode bridge
port access vlan 101
#
· 设备B：
#
ipv6
#
bfd echo-source-ip 10.10.10.10
#
vlan 101
#
vlan 103
#
stp region-configuration
region-name vrrp
instance 1 vlan 101
active region-configuration
#
stp instance 1 root primary
stp enable
#
interface Vlan-interface101
ipv6 address 2001::3/64
ip address 10.0.0.3 255.255.255.0
bfd min-echo-receive-interval 10
bfd detect-multiplier 3
vrrp ipv6 vrid 1 virtual-ip FE80::1 link-local
vrrp ipv6 vrid 1 virtual-ip 2001::1
vrrp ipv6 vrid 1 track 1 switchover
#
interface Vlan-interface103
ipv6 address 2003::3/64
#
interface GigabitEthernet3/0/1
port link-mode bridge
port access vlan 101
#
interface GigabitEthernet3/0/24
port link-mode bridge
port access vlan 101
#
interface GigabitEthernet3/0/2
port link-mode bridge
port access vlan 103
stp disable
#
track 1 bfd echo interface vlan-interface 101 remote ip 10.0.0.2 local ip 10.0.0.3
#
如图5所示，在承担网关功能的Switch A和Switch B上分别配置两个IPv6 VRRP备份组，区域A用户将VRRP备份组1作为缺省网关，区域B用户将VRRP备份组2作为缺省网关。要求满足如下需求：
· Switch A是VRRP备份组1中的Master设备，Switch B是VRRP备份组2中的Master设备。在正常情况下，区域A用户通过Switch A进行数据转发，区域B用户通过Switch B进行数据转发。当一台网关设备出现故障时，另一台网关设备能够迅速承担受影响区域内主机流量的转发任务。
· 当备份组中的Master设备连接上行链路的接口故障时，受影响区域内的主机仍然可以通过另一台网关设备访问外部网络。
· 配置MSTP多实例避免Switch A、Switch B和二层交换机之间存在的环路问题，并使得各实例中均以Master设备为根桥。
图5 IPv6 VRRP多备份组负载分担配置组网图
· 为了保证Switch A优先作为备份组1的Master设备，设置Switch A在备份组1中具有更高的优先级（本例中Switch A在备份组1中的优先级配置为120，Switch B使用缺省优先级100）；为了保证Switch B优先作为备份组2的Master设备，设置Switch B在备份组2中具有更高的优先级（本例中Switch B在备份组2中的优先级配置为120，Switch A使用缺省优先级100）。
· 为了保证当一台网关设备出现故障时，另一台网关设备能够迅速承担受影响区域内主机流量的转发任务，可以分别在两个VRRP备份组中的Backup设备上配置Track项与BFD联动监视Master设备状态。
· Master设备连接的上行链路的接口出现故障时，备份组无法感知上行链路接口的故障，这将导致用户网络内的主机无法访问外部网络。可以分别在两个VRRP备份组中的Master设备上配置Track项监视上行接口，当Master设备连接上行链路的接口处于Down或Removed状态时，Master设备主动降低自己的优先级，使得备份组内的Backup设备优先级高于Master设备，从而能够成功抢占成为Master，承担转发任务。
本举例是在S12500-CMW520-R1825P01版本上进行配置和验证的。
· 为实现IPv6报文在S12500上能正常转发，必须先使能IPv6报文转发功能（缺省情况为关闭）。
· 同一VRRP备份组多个备份的路由器之间，虚拟IP地址及虚拟IP地址个数必须一致。
· 不要在Super VLAN对应的VLAN接口下创建VRRP备份组，以免对网络性能造成影响。
# 使能IPv6报文转发功能。
<SwitchA> system-view
[SwitchA] ipv6
# 配置BFD echo报文方式的Source IP，IP地址可以任意指定，不要与实际接口地址相同。
[SwitchA] bfd echo-source-ip 11.11.11.11
# 配置VLAN101、VLAN102和VLAN103。两设备间采用trunk口直连。
[SwitchA] vlan 101
[SwitchA-vlan101] port Gigabitethernet 2/0/1
[SwitchA-vlan101] quit
[SwitchA] vlan 102
[SwitchA-vlan102] port Gigabitethernet 2/0/3
[SwitchA-vlan102] quit
[SwitchA] vlan 103
[SwitchA-vlan103] port Gigabitethernet 2/0/2
[SwitchA-vlan103] quit
[SwitchA] interface GigabitEthernet 2/0/1
[SwitchA-GigabitEthernet3/0/1] undo shutdown
[SwitchA-GigabitEthernet3/0/1] quit
[SwitchA] interface GigabitEthernet 2/0/2
[SwitchA-GigabitEthernet2/0/2] undo shutdown
[SwitchA-GigabitEthernet2/0/2] quit
[SwitchA] interface GigabitEthernet 2/0/3
[SwitchA-GigabitEthernet2/0/3] undo shutdown
[SwitchA-GigabitEthernet2/0/3] quit
[SwitchA] interface GigabitEthernet2/0/24
[SwitchA-GigabitEthernet2/0/24] undo shutdown
[SwitchA-GigabitEthernet2/0/24] port link-type trunk
[SwitchA-GigabitEthernet2/0/24] undo port trunk permit vlan 1
[SwitchA-GigabitEthernet2/0/24] port trunk permit vlan 101 to 102
[SwitchA-GigabitEthernet2/0/24] port trunk pvid vlan 101
[SwitchA-GigabitEthernet2/0/24] quit
# 配置上行接口。
[SwitchA] interface vlan-interface 103
[SwitchA-Vlan-interface103] undo shutdown
[SwitchA-Vlan-interface103] ipv6 address 2003::2 64
[SwitchA-Vlan-interface103] quit
# 创建VRRP备份组1。
[SwitchA] interface vlan-interface 101
[SwitchA-Vlan-interface101] undo shutdown
[SwitchA-Vlan-interface101] ipv6 address 2001::2 64
[SwitchA-Vlan-interface101] vrrp ipv6 vrid 1 virtual-ip FE80::1 link-local
[SwitchA-Vlan-interface101] vrrp ipv6 vrid 1 virtual-ip 2001::1
# 配置备份组1优先级为120。
[SwitchA-Vlan-interface101] vrrp ipv6 vrid 1 priority 120
# 配置监视上行接口。
[SwitchA-Vlan-interface101] vrrp ipv6 vrid 1 track interface Vlan-interface103 reduced 255
[SwitchA-Vlan-interface101] quit
# 创建VRRP备份组2。
[SwitchA] interface vlan-interface 102
[SwitchA-Vlan-interface102] undo shutdown
[SwitchA-Vlan-interface102] ipv6 address 2002::2 64
[SwitchA-Vlan-interface102] vrrp ipv6 vrid 1 virtual-ip FE80::1 link-local
[SwitchA-Vlan-interface102] vrrp ipv6 vrid 1 virtual-ip 2002::1
[SwitchA–Vlan-interface102] vrrp ipv6 vrid 1 track 1 switchover
# 配置IPv4地址，用于BFD检测。
[SwitchA-Vlan-interface102] ip address 11.0.0.2 24
# 配置接口接收BFD echo报文的最小时间间隔。
[SwitchA–Vlan-interface102] bfd min-echo-receive-interval 10
[SwitchA–Vlan-interface102] bfd detect-multiplier 3
[SwitchA–Vlan-interface102] quit
# 配置Track对象。
[SwitchA] track 1 bfd echo interface vlan-interface 101 remote ip 11.0.0.3 local ip 11.0.0.2
# 配置MSTP。
[SwitchA] stp region-configuration
[SwitchA-mst-region] region-name vrrp
[SwitchA-mst-region] instance 1 vlan 101
[SwitchA-mst-region] instance 2 vlan 102
[SwitchA-mst-region] active region-configuration
[SwitchA-mst-region] quit
[SwitchA] stp instance 1 root primary
[SwitchA] stp enable
[SwitchA] interface GigabitEthernet 2/0/2
[SwitchA-GigabitEthernet2/0/2] stp disable
# 使能IPv6报文转发功能。
<SwitchB> system-view
[SwitchB] ipv6
# 配置BFD echo报文方式的Source IP，IP地址可以任意指定，不要与实际接口地址相同。
[SwitchB] bfd echo-source-ip 10.10.10.10
# 配置VLAN101、VLAN102和VLAN103。两设备间采用trunk口直连。
[SwitchB] vlan 101
[SwitchB-vlan101] port Gigabitethernet 3/0/1
[SwitchB-vlan101] quit
[SwitchB] vlan 102
[SwitchB-vlan102] port Gigabitethernet 3/0/3
[SwitchB-vlan102] quit
[SwitchB] vlan 103
[SwitchB-vlan103] port Gigabitethernet 3/0/2
[SwitchB-vlan103] quit
[SwitchB] interface GigabitEthernet 3/0/1
[SwitchB-GigabitEthernet3/0/1] undo shutdown
[SwitchB-GigabitEthernet3/0/1] quit
[SwitchB] interface GigabitEthernet 3/0/2
[SwitchB-GigabitEthernet3/0/2] undo shutdown
[SwitchB-GigabitEthernet3/0/2] quit
[SwitchB] interface GigabitEthernet 3/0/3
[SwitchB-GigabitEthernet3/0/3] undo shutdown
[SwitchB-GigabitEthernet3/0/3] quit
[SwitchB] interface GigabitEthernet3/0/24
[SwitchB-GigabitEthernet3/0/24] undo shutdown
[SwitchB-GigabitEthernet3/0/24] port link-type trunk
[SwitchB-GigabitEthernet3/0/24] undo port trunk permit vlan 1
[SwitchB-GigabitEthernet3/0/24] port trunk permit vlan 101 to 102
[SwitchB-GigabitEthernet3/0/24] port trunk pvid vlan 101
[SwitchB-GigabitEthernet3/0/24] quit
# 配置上行接口。
[SwitchB] interface vlan-interface 103
[SwitchB-Vlan-interface103] undo shutdown
[SwitchB-Vlan-interface103] ipv6 address 2003::3 64
[SwitchB-Vlan-interface103] quit
# 创建VRRP备份组1。
[SwitchB] interface vlan-interface 101
[SwitchB-Vlan-interface101] undo shutdown
[SwitchB-Vlan-interface101] ipv6 address 2001::3 64
[SwitchB-Vlan-interface101] vrrp ipv6 vrid 1 virtual-ip FE80::1 link-local
[SwitchB-Vlan-interface101] vrrp ipv6 vrid 1 virtual-ip 2001::1
[SwitchB–Vlan-interface101] vrrp ipv6 vrid 1 track 1 switchover
# 配置IPv4地址，用于BFD检测。
[SwitchB-Vlan-interface101] ip address 10.0.0.3 24
# 配置接口接收BFD echo报文的最小时间间隔。
[SwitchB–Vlan-interface101] bfd min-echo-receive-interval 10
[SwitchB–Vlan-interface101] bfd detect-multiplier 3
[SwitchB–Vlan-interface101] quit
# 配置Track对象。
[SwitchB] track 1 bfd echo interface vlan-interface 101 remote ip 10.0.0.2 local ip 10.0.0.3
# 创建VRRP备份组2。
[SwitchB] interface vlan-interface 102
[SwitchB-Vlan-interface102] undo shutdown
[SwitchB-Vlan-interface102] ipv6 address 2002::3 64
[SwitchB-Vlan-interface102] vrrp ipv6 vrid 1 virtual-ip FE80::1 link-local
[SwitchB-Vlan-interface102] vrrp ipv6 vrid 1 virtual-ip 2002::1
# 配置备份组2优先级为120。
[SwitchB-Vlan-interface102] vrrp ipv6 vrid 1 priority 120
# 配置监视上行接口。
[SwitchB-Vlan-interface102] vrrp ipv6 vrid 1 track interface Vlan-interface103 reduced 255
[SwitchB-Vlan-interface102] quit
# 配置MSTP。
[SwitchB] stp region-configuration
[SwitchB-mst-region] region-name vrrp
[SwitchB-mst-region] instance 1 vlan 101
[SwitchB-mst-region] instance 2 vlan 102
[SwitchB-mst-region] active region-configuration
[SwitchB-mst-region] quit
[SwitchB] stp instance 2 root primary
[SwitchB] stp enable
[SwitchB] interface GigabitEthernet 3/0/2
[SwitchB-GigabitEthernet3/0/2] stp disable
配置MSTP，配置方法同Switch B。
(1) 配置完成后，区域A和区域B中的主机可以ping通外网。
(2) 通过display vrrp ipv6 verbose命令查看配置后的结果。
# 显示Switch A上备份组1的详细信息。
[SwitchA] display vrrp ipv6 verbose
IPv6 Standby Information:
Run Mode : Standard
Run Method : Virtual MAC
Total number of virtual routers : 2
Interface Vlan-interface101
VRID : 1 Adver Timer : 100
Admin Status : Up State : Master
Config Pri : 120 Running Pri : 120
Preempt Mode : Yes Delay Time : 0
Auth Type : None
Virtual IP : FE80::1
2001::1
Virtual MAC : 0000-5e00-0201
Master IP : FE80::2E0:64FF:FE05:3100
VRRP Track Information:
Track Interface: Vlan103 State : Up Pri Reduced : 255
Interface Vlan-interface102
VRID : 1 Adver Timer : 100
Admin Status : Up State : Backup
Config Pri : 100 Running Pri : 100
Preempt Mode : Yes Delay Time : 0
Auth Type : None
Virtual IP : FE80::1
2002::1
Master IP : FE80::6697:12FF:FE50:100
VRRP Track Information:
Track Object : 1 State : Positive Switchover
# 显示Switch B上备份组1的详细信息。
[SwitchB] display vrrp ipv6 verbose
IPv6 Standby Information:
Run Mode : Standard
Run Method : Virtual MAC
Total number of virtual routers : 2
Interface Vlan-interface101
VRID : 1 Adver Timer : 100
Admin Status : Up State : Backup
Config Pri : 100 Running Pri : 100
Preempt Mode : Yes Delay Time : 0
Auth Type : None
Virtual IP : FE80::1
2001::1
Master IP : FE80::2E0:64FF:FE05:3100
VRRP Track Information:
Track Object : 1 State : Positive Switchover
Interface Vlan-interface102
VRID : 1 Adver Timer : 100
Admin Status : Up State : Master
Config Pri : 120 Running Pri : 120
Preempt Mode : Yes Delay Time : 0
Auth Type : None
Virtual IP : FE80::1
2002::1
Virtual MAC : 0000-5e00-0201
Master IP : FE80::6697:12FF:FE50:100
VRRP Track Information:
Track Interface: Vlan103 State : Up Pri Reduced : 255
# 显示MSTP状态。
[SwitchA] display stp brief
MSTID Port Role STP State Protection
0 GigabitEthernet2/0/1 DESI FORWARDING NONE
0 GigabitEthernet2/0/3 ROOT FORWARDING NONE
0 GigabitEthernet2/0/24 DESI FORWARDING NONE
1 GigabitEthernet2/0/1 DESI FORWARDING NONE
1 GigabitEthernet2/0/24 DESI FORWARDING NONE
2 GigabitEthernet2/0/3 ALTE DISCARDING NONE
2 GigabitEthernet2/0/24 ROOT FORWARDING NONE
[SwitchB] display stp brief
MSTID Port Role STP State Protection
0 GigabitEthernet3/0/1 DESI FORWARDING NONE
0 GigabitEthernet3/0/3 ROOT FORWARDING NONE
0 GigabitEthernet3/0/24 ALTE DISCARDING NONE
1 GigabitEthernet3/0/1 ALTE DISCARDING NONE
1 GigabitEthernet3/0/24 ROOT FORWARDING NONE
2 GigabitEthernet3/0/3 DESI FORWARDING NONE
2 GigabitEthernet3/0/24 DESI FORWARDING NONE
# Switch A出现故障或者被监视的上行VLAN接口down后，通过display vrrp ipv6 verbose命令查看Switch B上备份组的详细信息。可以看到Switch B抢占为备份组1的Master。
[SwitchB] display vrrp ipv6 verbose
IPv6 Standby Information:
Run Mode : Standard
Run Method : Virtual MAC
Total number of virtual routers : 2
Interface Vlan-interface101
VRID : 1 Adver Timer : 100
Admin Status : Up State : Master
Config Pri : 100 Running Pri : 100
Preempt Mode : Yes Delay Time : 0
Auth Type : None
Virtual IP : FE80::1
2001::1
Virtual MAC : 0000-5e00-0201
Master IP : FE80::6697:12FF:FE50:100
VRRP Track Information:
Track Object : 1 State : Negative Switchover
Interface Vlan-interface102
VRID : 1 Adver Timer : 100
Admin Status : Up State : Master
Config Pri : 120 Running Pri : 120
Preempt Mode : Yes Delay Time : 0
Auth Type : None
Virtual IP : FE80::1
2002::1
Virtual MAC : 0000-5e00-0201
Master IP : FE80::6697:12FF:FE50:100
VRRP Track Information:
Track Interface: Vlan103 State : Up Pri Reduced : 255
区域A和区域B中的主机可以ping通外网。
· 设备A：
#
ipv6
#
bfd echo-source-ip 11.11.11.11
#
vlan 101 to 103
#
stp region-configuration
region-name vrrp
instance 1 vlan 101
instance 2 vlan 102
active region-configuration
#
stp instance 1 root primary
stp enable
#
interface Vlan-interface101
ipv6 address 2001::2/64
vrrp ipv6 vrid 1 virtual-ip FE80::1 link-local
vrrp ipv6 vrid 1 virtual-ip 2001::1
vrrp ipv6 vrid 1 priority 120
vrrp ipv6 vrid 1 track interface Vlan-interface103 reduced 255
#
interface Vlan-interface102
ipv6 address 2002::2/64
ip address 11.0.0.2 255.255.255.0
bfd min-echo-receive-interval 10
bfd detect-multiplier 3
vrrp ipv6 vrid 1 virtual-ip FE80::1 link-local
vrrp ipv6 vrid 1 virtual-ip 2002::1
vrrp ipv6 vrid 1 track 1 switchover
#
interface Vlan-interface103
ipv6 address 2003::2/64
#
interface GigabitEthernet2/0/1
port link-mode bridge
port access vlan 101
#
interface GigabitEthernet2/0/2
port link-mode bridge
port access vlan 103
stp disable
#
interface GigabitEthernet2/0/3
port link-mode bridge
port access vlan 102
#
interface GigabitEthernet2/0/24
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 101 to 102
port trunk pvid vlan 101
#
track 1 bfd echo interface vlan-interface 101 remote ip 11.0.0.3 local ip 11.0.0.2
#
· 设备B：
#
ipv6
#
bfd echo-source-ip 10.10.10.10
#
vlan 101 to 103
#
stp region-configuration
region-name vrrp
instance 1 vlan 101
instance 2 vlan 102
active region-configuration
#
stp instance 2 root primary
stp enable
#
interface Vlan-interface101
ipv6 address 2001::3/64
ip address 10.0.0.3 255.255.255.0
bfd min-echo-receive-interval 10
bfd detect-multiplier 3
vrrp ipv6 vrid 1 virtual-ip FE80::1 link-local
vrrp ipv6 vrid 1 virtual-ip 2001::1
vrrp ipv6 vrid 1 track 1 switchover
#
interface Vlan-interface102
ipv6 address 2002::3/64
vrrp ipv6 vrid 1 virtual-ip FE80::1 link-local
vrrp ipv6 vrid 1 virtual-ip 2002::1
vrrp ipv6 vrid 1 priority 120
vrrp ipv6 vrid 1 track interface Vlan-interface103 reduced 255
#
interface Vlan-interface103
ipv6 address 2003::3/64
#
interface GigabitEthernet3/0/1
port link-mode bridge
port access vlan 101
#
interface GigabitEthernet3/0/2
port link-mode bridge
port access vlan 103
stp disable
#
interface GigabitEthernet3/0/3
port link-mode bridge
port access vlan 102
#
interface GigabitEthernet3/0/24
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 101 to 102
port trunk pvid vlan 101
#
track 1 bfd echo interface vlan-interface 101 remote ip 10.0.0.2 local ip 10.0.0.3
#
如图6所示，在承担网关功能的Switch A、Switch B和Switch C上配置有IPv6 VRRP备份组，虚拟IPv6地址为FE80::10。用户IPv6网络中的主机将VRRP备份组作为缺省网关。要求通过配置VRRP负载均衡模式满足如下需求：
· Switch A是VRRP备份组中的Master设备，Switch B、Switch C是Backup设备。某台网关设备（Switch A、Switch B或Switch C）出现故障时，用户主机仍然可以通过其他网关设备访问外部网络。
· 不同主机的流量通过备份组中不同的网关设备转发，避免流量集中在Master设备上。
· AVF上行链路出现故障时，能及时通知LVF接替其转发流量。
图6 IPv6 VRRP负载均衡模式配置组网图
· 为了保证Switch A作为Master，可以将Switch A在备份组中的优先级配置为120，高于Switch B（Switch B在备份组中的优先级配置为110）、Switch C（Switch C在备份组中的优先级为缺省值100）。
· 为了保证AVF上行链路出现故障时，能及时通知LVF接替其转发流量。可以在各网关设备上配置虚拟转发器的监视功能，利用接口管理监视上行接口的状态，并通过Track功能在虚拟转发器和接口管理之间建立联动。当上行链路出现故障，Track项的状态变为Negative，虚拟转发器的权重将降低指定的数额，以便虚拟转发器优先级更高的网关设备抢占成为AVF，接替其转发流量。
本举例是在S12500-CMW520-R1825P01版本上进行配置和验证的。
· 为实现IPv6报文在S12500上能正常转发，必须先使能IPv6报文转发功能（缺省情况为关闭）。
· 建议不要在Super VLAN对应的VLAN接口下创建VRRP备份组，以免对网络性能造成影响。
· VRRP工作在负载均衡模式时，虚拟IP地址不能与VRRP备份组中路由器的接口IP地址相同，即负载均衡模式的VRRP备份组中不能存在IP地址拥有者。
# 使能IPv6报文转发功能。
<SwitchA> system-view
[SwitchA] ipv6
# 配置VLAN2。
[SwitchA] vlan 2
[SwitchA-vlan2] port Gigabitethernet 3/0/1
[SwitchA-vlan2] quit
[SwitchA] interface GigabitEthernet 3/0/1
[SwitchA-GigabitEthernet3/0/1] undo shutdown
[SwitchA-GigabitEthernet3/0/1] quit
# 配置VRRP工作在负载均衡模式。
[SwitchA] vrrp mode load-balance
# 创建备份组1，并配置备份组1的虚拟IP地址为FE80::10。
[SwitchA] interface vlan-interface 2
[SwitchA-Vlan-interface2] ipv6 address fe80::1 link-local
[SwitchA-Vlan-interface2] ipv6 address 2001::1 64
[SwitchA-Vlan-interface2] vrrp ipv6 vrid 1 virtual-ip fe80::10 link-local
[SwitchA-Vlan-interface2] vrrp ipv6 vrid 1 virtual-ip 2001::10
# 配置Switch A在备份组1中的优先级为120。
[SwitchA-Vlan-interface2] vrrp ipv6 vrid 1 priority 120
# 配置允许发布RA消息。
[SwitchA-Vlan-interface2] undo ipv6 nd ra halt
# 配置虚拟转发器的监视功能，监视上行接口。
[SwitchA-Vlan-interface2] vrrp ipv6 vrid 1 weight track 1 reduced 255
[SwitchA-Vlan-interface2] undo shutdown
[SwitchA-Vlan-interface2] quit
# 配置上行接口与Track项。
[SwitchA] vlan 1000
[SwitchA-vlan1000] port Gigabitethernet 3/0/5
[SwitchA-vlan1000] quit
[SwitchA] interface GigabitEthernet 3/0/5
[SwitchA-GigabitEthernet3/0/5] undo shutdown
[SwitchA-GigabitEthernet3/0/5] quit
[SwitchA] interface vlan-interface 1000
[SwitchA-Vlan-interface1000] ipv6 address 2002::1/64
[SwitchA-Vlan-interface1000] undo shutdown
[SwitchA-Vlan-interface1000] quit
[SwitchA] track 1 interface Vlan-interface 1000 protocol ipv6
# 使能IPv6报文转发功能。
<SwitchB> system-view
[SwitchB] ipv6
# 配置VLAN2。
[SwitchB] vlan 2
[SwitchB-vlan2] port Gigabitethernet 3/0/1
[SwitchB-vlan2] quit
[SwitchB] interface GigabitEthernet 3/0/1
[SwitchB-GigabitEthernet3/0/1] undo shutdown
[SwitchB-GigabitEthernet3/0/1] quit
# 配置VRRP工作在负载均衡模式。
[SwitchB] vrrp mode load-balance
# 创建备份组1，并配置备份组1的虚拟IP地址为FE80::10。
[SwitchB] interface vlan-interface 2
[SwitchB-Vlan-interface2] ipv6 address fe80::2 link-local
[SwitchB-Vlan-interface2] ipv6 address 2001::2 64
[SwitchB-Vlan-interface2] vrrp ipv6 vrid 1 virtual-ip fe80::10 link-local
[SwitchB-Vlan-interface2] vrrp ipv6 vrid 1 virtual-ip 2001::10
# 配置Swtich B在备份组1中的优先级为110。
[SwitchB-Vlan-interface2] vrrp ipv6 vrid 1 priority 110
# 配置允许发布RA消息。
[SwitchB-Vlan-interface2] undo ipv6 nd ra halt
# 配置虚拟转发器的监视功能，监视上行接口。
[SwitchB-Vlan-interface2] vrrp ipv6 vrid 1 weight track 1 reduced 255
[SwitchB-Vlan-interface2] undo shutdown
[SwitchB-Vlan-interface2] quit
# 配置上行接口与Track项。
[SwitchB] vlan 1000
[SwitchB-vlan1000] port Gigabitethernet 3/0/5
[SwitchB-vlan1000] quit
[SwitchB] interface GigabitEthernet 3/0/5
[SwitchB-GigabitEthernet3/0/5] undo shutdown
[SwitchB-GigabitEthernet3/0/5] quit
[SwitchB] interface vlan-interface 1000
[SwitchB-Vlan-interface1000] ipv6 address 2002::2/64
[SwitchB-Vlan-interface1000] undo shutdown
[SwitchB-Vlan-interface1000] quit
[SwitchB] track 1 interface Vlan-interface 1000 protocol ipv6
# 使能IPv6报文转发功能。
<SwitchC> system-view
[SwitchC] ipv6
# 配置VLAN2。
[SwitchC] vlan 2
[SwitchC-vlan2] port Gigabitethernet 3/0/5
[SwitchC-vlan2] quit
[SwitchC] interface GigabitEthernet 3/0/1
[SwitchC-GigabitEthernet3/0/1] undo shutdown
[SwitchC-GigabitEthernet3/0/1] quit
# 配置VRRP工作在负载均衡模式。
[SwitchC] vrrp mode load-balance
# 创建备份组1，并配置备份组1的虚拟IP地址为FE80::10。
[SwitchC] interface vlan-interface 2
[SwitchC-Vlan-interface2] ipv6 address fe80::3 link-local
[SwitchC-Vlan-interface2] ipv6 address 2001::3 64
[SwitchC-Vlan-interface2] vrrp ipv6 vrid 1 virtual-ip fe80::10 link-local
[SwitchC-Vlan-interface2] vrrp ipv6 vrid 1 virtual-ip 2001::10
# 配置允许发布RA消息。
[SwitchC-Vlan-interface2] undo ipv6 nd ra halt
# 配置虚拟转发器的监视功能，监视上行接口。
[SwitchC-Vlan-interface2] vrrp ipv6 vrid 1 weight track 1 reduced 255
[SwitchC-Vlan-interface2] undo shutdown
[SwitchC-Vlan-interface2] quit
# 配置上行接口与Track项。
[SwitchC] vlan 1000
[SwitchC-vlan1000] port Gigabitethernet 3/0/5
[SwitchC-vlan1000] quit
[SwitchC] interface GigabitEthernet 3/0/5
[SwitchC-GigabitEthernet3/0/5] undo shutdown
[SwitchC-GigabitEthernet3/0/5] quit
[SwitchC] interface vlan-interface 1000
[SwitchC-Vlan-interface1000] ipv6 address 2002::3/64
[SwitchC-Vlan-interface1000] undo shutdown
[SwitchC-Vlan-interface1000] quit
[SwitchC] track 1 interface Vlan-interface 1000 protocol ipv6
(1) 配置完成后，Host A、Host B和Host C都可以ping通外网。
(2) 通过display vrrp ipv6 verbose命令查看配置后的结果。
# 显示Switch A上备份组1的详细信息。
[SwitchA] display vrrp ipv6 verbose
IPv6 Standby Information:
Run Mode : Load Balance
Run Method : Virtual MAC
Total number of virtual routers : 1
Interface Vlan-interface2
VRID : 1 Adver Timer : 100
Admin Status : Up State : Master
Config Pri : 120 Running Pri : 120
Preempt Mode : Yes Delay Time : 0
Auth Type : None
Virtual IP : FE80::10
2001::10
Member IP List : FE80::1 (Local, Master)
FE80::3 (Backup)
FE80::2 (Backup)
Forwarder Information: 3 Forwarders 1 Active
Config Weight : 255
Running Weight : 255
Forwarder 01
State : Active
Virtual MAC : 000f-e2ff-4011 (Owner)
Owner ID : 6697-1250-0100
Priority : 255
Active : local
Forwarder 02
State : Listening
Virtual MAC : 000f-e2ff-4012 (Learnt)
Owner ID : 00e0-6405-3100
Priority : 127
Active : FE80::2
Forwarder 03
State : Listening
Virtual MAC : 000f-e2ff-4013 (Learnt)
Owner ID : 00e0-3948-0100
Priority : 127
Active : FE80::3
Forwarder Weight Track Information:
Track Object : 1 State : Positive Weight Reduced : 255
# 显示Switch B上备份组1的详细信息。
[SwitchB] display vrrp ipv6 verbose
IPv6 Standby Information:
Run Mode : Load Balance
Run Method : Virtual MAC
Total number of virtual routers : 1
Interface Vlan-interface2
VRID : 1 Adver Timer : 100
Admin Status : Up State : Backup
Config Pri : 110 Running Pri : 110
Preempt Mode : Yes Delay Time : 0
Auth Type : None
Virtual IP : FE80::10
2001::10
Member IP List : FE80::2 (Local, Backup)
FE80::3 (Backup)
FE80::1 (Master)
Forwarder Information: 3 Forwarders 1 Active
Config Weight : 255
Running Weight : 255
Forwarder 01
State : Listening
Virtual MAC : 000f-e2ff-4011 (Learnt)
Owner ID : 6697-1250-0100
Priority : 127
Active : FE80::1
Forwarder 02
State : Active
Virtual MAC : 000f-e2ff-4012 (Owner)
Owner ID : 00e0-6405-3100
Priority : 255
Active : local
Forwarder 03
State : Listening
Virtual MAC : 000f-e2ff-4013 (Learnt)
Owner ID : 00e0-3948-0100
Priority : 127
Active : FE80::3
Forwarder Weight Track Information:
Track Object : 1 State : Positive Weight Reduced : 255
# 显示Switch C上备份组1的详细信息。
IPv6 Standby Information:
Run Mode : Load Balance
Run Method : Virtual MAC
Total number of virtual routers : 1
Interface Vlan-interface2
VRID : 1 Adver Timer : 100
Admin Status : Up State : Backup
Config Pri : 100 Running Pri : 100
Preempt Mode : Yes Delay Time : 0
Auth Type : None
Virtual IP : FE80::10
2001::10
Member IP List : FE80::3 (Local, Backup)
FE80::1 (Master)
FE80::2 (Backup)
Forwarder Information: 3 Forwarders 1 Active
Config Weight : 255
Running Weight : 255
Forwarder 01
State : Listening
Virtual MAC : 000f-e2ff-4011 (Learnt)
Owner ID : 6697-1250-0100
Priority : 127
Active : FE80::1
Forwarder 02
State : Listening
Virtual MAC : 000f-e2ff-4012 (Learnt)
Owner ID : 00e0-6405-3100
Priority : 127
Active : FE80::2
Forwarder 03
State : Active
Virtual MAC : 000f-e2ff-4013 (Owner)
Owner ID : 00e0-3948-0100
Priority : 255
Active : local
Forwarder Weight Track Information:
Track Object : 1 State : Positive Weight Reduced : 255
以上显示信息表示在备份组1中Switch A为Master路由器，Switch B和Switch C 为Backup路由器。Switch A、Switch B和Switch C上各自存在一个AVF，并存在作为备份的两个LVF。
# Switch A出现故障后，通过display vrrp ipv6 verbose命令查看Switch C上备份组的详细信息。
[SwitchC] display vrrp ipv6 verbose
IPv6 Standby Information:
Run Mode : Load Balance
Run Method : Virtual MAC
Total number of virtual routers : 1
Interface Vlan-interface2
VRID : 1 Adver Timer : 100
Admin Status : Up State : Backup
Config Pri : 100 Running Pri : 100
Preempt Mode : Yes Delay Time : 0
Auth Type : None
Virtual IP : FE80::10
2001::10
Member IP List : FE80::3 (Local, Backup)
FE80::2 (Master)
Forwarder Information: 3 Forwarders 2 Active
Config Weight : 255
Running Weight : 255
Forwarder 01
State : Active
Virtual MAC : 000f-e2ff-4011 (Take Over)
Owner ID : 6697-1250-0100
Priority : 85
Active : local
Redirect Time : 549 secs
Time-out Time : 1749 secs
Forwarder 02
State : Listening
Virtual MAC : 000f-e2ff-4012 (Learnt)
Owner ID : 00e0-6405-3100
Priority : 85
Active : FE80::2
Forwarder 03
State : Active
Virtual MAC : 000f-e2ff-4013 (Owner)
Owner ID : 00e0-3948-0100
Priority : 255
Active : local
Forwarder Weight Track Information:
Track Object : 1 State : Positive Weight Reduced : 255
以上显示信息表示Switch A出现故障后，Switch B成为Master路由器；Switch C成为虚拟MAC地址000F-E2FF-4011对应的虚拟转发器的AVF，Host A发送给外网的报文通过Switch C转发。
· 设备A：
#
ipv6
#
vrrp mode load-balance
#
vlan 2
#
vlan 1000
#
interface Vlan-interface2
ipv6 address 2001::1/64
ipv6 address FE80::1 link-local
vrrp ipv6 vrid 1 virtual-ip FE80::10 link-local
vrrp ipv6 vrid 1 virtual-ip 2001::10
vrrp ipv6 vrid 1 priority 120
vrrp ipv6 vrid 1 weight track 1 reduced 255
undo ipv6 nd ra halt
#
interface Vlan-interface1000
ipv6 address 2002::1/64
#
interface GigabitEthernet3/0/1
port link-mode bridge
port access vlan 2
#
interface GigabitEthernet3/0/5
port link-mode bridge
port access vlan 1000
#
track 1 interface Vlan-interface1000 protocol ipv6
#
· 设备B：
#
ipv6
#
vrrp mode load-balance
#
vlan 2
#
vlan 1000
#
interface Vlan-interface2
ipv6 address 2001::2/64
ipv6 address FE80::2 link-local
vrrp ipv6 vrid 1 virtual-ip FE80::10 link-local
vrrp ipv6 vrid 1 virtual-ip 2001::10
vrrp ipv6 vrid 1 priority 110
vrrp ipv6 vrid 1 weight track 1 reduced 255
undo ipv6 nd ra halt
#
interface Vlan-interface1000
ipv6 address 2002::2/64
#
interface GigabitEthernet3/0/1
port link-mode bridge
port access vlan 2
#
interface GigabitEthernet3/0/5
port link-mode bridge
port access vlan 1000
#
track 1 interface Vlan-interface1000 protocol ipv6
#
· 设备C：
#
ipv6
#
vrrp mode load-balance
#
vlan 2
#
vlan 1000
#
interface Vlan-interface2
ipv6 address 2001::3/64
ipv6 address FE80::3 link-local
vrrp ipv6 vrid 1 virtual-ip FE80::10 link-local
vrrp ipv6 vrid 1 virtual-ip 2001::10
vrrp ipv6 vrid 1 weight track 1 reduced 255
undo ipv6 nd ra halt
#
interface Vlan-interface1000
ipv6 address 2002::3/64
#
interface GigabitEthernet3/0/1
port link-mode bridge
port access vlan 2
#
interface GigabitEthernet3/0/5
port link-mode bridge
port access vlan 1000
#
track 1 interface Vlan-interface1000 protocol ipv6
#
· 《H3C S12500系列路由交换机 可靠性配置指导》中的“VRRP”
· 《H3C S12500系列路由交换机 可靠性命令参考》中的“VRRP”
· 《H3C S12500系列路由交换机 可靠性配置指导》中的“BFD”
· 《H3C S12500系列路由交换机 可靠性命令参考》中的“BFD”
· 《H3C S12500系列路由交换机 可靠性配置指导》中的“Track”
· 《H3C S12500系列路由交换机 可靠性命令参考》中的“Track”
· 《H3C S12500系列路由交换机 二层技术-以太网交换配置指导》中的“生成树”
· 《H3C S12500系列路由交换机 二层技术-以太网交换命令参考》中的“生成树”
不同款型规格的资料略有差异, 详细信息请向具体销售和400咨询。H3C保留在没有任何通知或提示的情况下对资料内容进行修改的权利!
支持
