双机热备旁挂组网实验

双机热备旁挂组网实验

一、实验拓扑

二、实验需求
1、SW3的流量
正常情况下：SW1_VRF—>FW1—>SW1_Public—>R5
故障情况下：SW2_VRF—>FW2—>SW2_Public—>R6
2、SW4的流量
正常情况下：SW2_VRF—>FW2—>SW2_Public—>R6
故障情况下：SW1_VRF—>FW1—>SW1_Public—>R5
3、交换网络负载均衡
三、实验配置
二层交换机配置

使用传统三层架构中MSTP+VRRP组网形式：
VLAN 2 ----> SW3,Sw4作为备份
VLAN 3 ----> SW4,SW3作为备份

MSTP设计---->SW3、4、5运行
    实例1：VLAN 2
    实例2：VLAN 3
        SW3是实例1的主根，实例2的备份根；
        SW4是实例2的主根，实例1的备份根；

```
配置如下：

SW3:
```\
[SW3]vlan batch 2 3
[SW3]interface GigabitEthernet 0/0/3
[SW3-GigabitEthernet0/0/3] port link-type trunk
[SW3-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 3
[SW3]interface GigabitEthernet 0/0/4
[SW3-GigabitEthernet0/0/4] port link-type trunk
[SW3-GigabitEthernet0/0/4] port trunk allow-pass vlan 2 to 3

[SW3]stp enable 
[SW3]stp mode mstp
[SW3]stp region-configuration 
[SW3-mst-region]region-name aa
[SW3-mst-region]instance 1 vlan 2    ------实例1映射VLAN 2
[SW3-mst-region]instance 2 vlan 3    ------实例2映射VLAN 3
[SW3-mst-region]active region-configuration    ------激活配置
[SW3]stp instance 1 root primary      -----让实例1成为主根
[SW3]stp instance 2 root secondary      -----让实例2成为备份根
[SW3]stp instance 0 root primary    ---让实例0成为主根（可不写）

[SW3]interface Vlanif 2
[SW3-Vlanif2]ip address 192.168.2.1 24
[SW3-Vlanif2]vrrp vrid 1 virtual-ip 192.168.2.254     ----设置虚拟IP
[SW3-Vlanif2]vrrp vrid 1 priority 120    -----修改优先级
[SW3-Vlanif2]vrrp vrid 1 preempt-mode timer delay 20    ----设置抢占延迟时间为20s
[SW3-Vlanif2]vrrp vrid 1 track interface GigabitEthernet 0/0/1 reduced 15      ------监控上行接口
[SW3-Vlanif2]vrrp vrid 1 track interface GigabitEthernet 0/0/2 reduced 15

[SW3]interface Vlanif 3
[SW3-Vlanif3]ip add 192.168.3.1 24
[SW3-Vlanif3]vrrp vrid 1 virtual-ip 192.168.3.254

SW4：

[SW4]vlan batch 2 3
[SW4]interface GigabitEthernet 0/0/3
[SW4-GigabitEthernet0/0/3] port link-type trunk
[SW4-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 3
[SW4]interface GigabitEthernet 0/0/4
[SW4-GigabitEthernet0/0/4] port link-type trunk
[SW4-GigabitEthernet0/0/4] port trunk allow-pass vlan 2 to 3

[SW4]stp enable 
[SW4]stp mode mstp
[SW4]stp region-configuration 
[SW4-mst-region]region-name aa
[SW4-mst-region]instance 1 vlan 2
[SW4-mst-region]instance 2 vlan 3
[SW4-mst-region]active region-configuration 
[SW4]stp instance 1 root secondary 
[SW4]stp instance 2 root primary
[SW4]stp instance 0 root secondary

[SW4]interface Vlanif 2
[SW4-Vlanif2]ip add 192.168.2.2 24
[SW4-Vlanif2]vrrp vrid 1 virtual-ip 192.168.2.254

interface Vlanif3
 ip address 192.168.3.2 255.255.255.0
 vrrp vrid 1 virtual-ip 192.168.3.254
 vrrp vrid 1 priority 120
 vrrp vrid 1 preempt-mode timer delay 20
 vrrp vrid 1 track interface GigabitEthernet0/0/1 reduced 15
 vrrp vrid 1 track interface GigabitEthernet0/0/2 reduced 15

SW5：

[SW5]vlan batch 2 3
[SW5]interface GigabitEthernet 0/0/3
[SW5-GigabitEthernet0/0/3]port link-type access 
[SW5-GigabitEthernet0/0/3]port default vlan 2
[SW5]interface GigabitEthernet 0/0/4
[SW5-GigabitEthernet0/0/4]port link-type access     
[SW5-GigabitEthernet0/0/4]port default vlan 3
[SW5]interface GigabitEthernet 0/0/1
[SW5-GigabitEthernet0/0/1]port link-type trunk 
[SW5-GigabitEthernet0/0/1]port trunk allow-pass vlan 2 3
[SW5]interface GigabitEthernet 0/0/2
[SW5-GigabitEthernet0/0/2]port link-type trunk
[SW5-GigabitEthernet0/0/2]port trunk allow-pass vlan 2 to 3

[SW5]stp enable 
[SW5]stp mode mstp
[SW5]stp region-configuration 
[SW5-mst-region]region-name aa
[SW5-mst-region]instance 1 vlan 2
[SW5-mst-region]instance 2 vlan 3
[SW5-mst-region]active region-configuration 

 查看STP生成树测试二层交换网络互通

汇聚到核心层配置

配置如下：

SW3：

[SW3]vlan batch 103 203
[SW3]interface GigabitEthernet 0/0/1
[SW3-GigabitEthernet0/0/1]port link-type access 
[SW3-GigabitEthernet0/0/1]port default vlan 103
[SW3-GigabitEthernet0/0/1]undo stp enable   -----关闭该接口的STP生成树
[SW3]interface GigabitEthernet 0/0/2    
[SW3-GigabitEthernet0/