华为Ensp,路由热备份VRRP

本文介绍了一个使用华为设备进行热备路由实验的配置过程。实验中采用了三层交换机,并通过配置不同的VLAN来实现不同网段之间的通信。通过设置主备路由、VRRP及RIP等协议确保了网络的高可用性和稳定性。

摘要生成于 C知道 ,由 DeepSeek-R1 满血版支持, 前往体验 >

构建实验拓扑

实验思路:华为与思科热备路由大同小异,区别在于,思科是写在路由器上的,而华为是基于端口的,而本实验采用三层交换机,故不同IP需要写在vlan虚接口上。STP只需要创建一个区域,两个生成树即可,互相指向对方。最后三层交换物理接口G0/0/1无法直接写入IP,需单独创建不同vlan,将vlan绑定在接口上。配置路由表,主机网关分别指向自己所属网段的虚拟网关,实现全网互通。

LSW1配置

[Huawei]vl batch 1 2 3 4 5

[Huawei]stp region-configuration

[Huawei-mst-region]region-name qwe

[Huawei-mst-region]instance 1 vl 1 to 2

[Huawei-mst-region]instance 2 vl 3 to 4

[Huawei-mst-region]active region-configuration

[Huawei-mst-region]q

[Huawei]stp instance 1 root primary

[Huawei]stp instance 2 root secondary

[Huawei]stp pathcost-standard legacy

[Huawei-GigabitEthernet0/0/1]int g 0/0/2

[Huawei-GigabitEthernet0/0/2]port link tr

[Huawei-GigabitEthernet0/0/2]port tr al vl al

[Huawei-GigabitEthernet0/0/2]int g 0/0/3

[Huawei-GigabitEthernet0/0/3]port link tr

[Huawei-GigabitEthernet0/0/3]port tr al vl al

[Huawei-GigabitEthernet0/0/3]int g 0/0/3

[Huawei-GigabitEthernet0/0/3]int g 0/0/4

[Huawei-GigabitEthernet0/0/4]port link tr

[Huawei-GigabitEthernet0/0/4]port tr al vl al

[Huawei-GigabitEthernet0/0/4]q

[Huawei]int vl 1

[Huawei-Vlanif1]ip add 1.1.1.10 24

[Huawei-Vlanif1]int vl 2

[Huawei-Vlanif2]ip add 2.1.1.10 24

[Huawei-Vlanif2]int vl 3

[Huawei-Vlanif3]ip add 3.1.1.10 24

[Huawei-Vlanif3]int vl 4

[Huawei-Vlanif4]ip add 4.1.1.10 24

[Huawei-Vlanif4]q

[Huawei]display stp brief

 MSTID  Port                        Role  STP State     Protection

   0    GigabitEthernet0/0/1        DESI  FORWARDING      NONE

   0    GigabitEthernet0/0/2        DESI  FORWARDING      NONE

   0    GigabitEthernet0/0/3        ROOT  FORWARDING      NONE

   0    GigabitEthernet0/0/4        DESI  FORWARDING      NONE

   1    GigabitEthernet0/0/1        DESI  FORWARDING      NONE

   1    GigabitEthernet0/0/2        DESI  FORWARDING      NONE

   1    GigabitEthernet0/0/3        DESI  FORWARDING      NONE

   1    GigabitEthernet0/0/4        DESI  FORWARDING      NONE

   2    GigabitEthernet0/0/1        DESI  FORWARDING      NONE

   2    GigabitEthernet0/0/2        DESI  FORWARDING      NONE

   2    GigabitEthernet0/0/3        ROOT  FORWARDING      NONE

   2    GigabitEthernet0/0/4        DESI  FORWARDING      NONE

[Huawei]int g0/0/1

[Huawei-GigabitEthernet0/0/1]port link ac

[Huawei-GigabitEthernet0/0/1]port de vl 5

[Huawei-GigabitEthernet0/0/1]q

[Huawei]int vl 5

[Huawei-Vlanif5]ip add 5.1.1.2 24

[Huawei-Vlanif5]q

[Huawei]int vl 1

[Huawei-Vlanif1]vrrp vrid 1 virtual-ip 1.1.1.100

[Huawei-Vlanif1]vrrp vrid 1 priority 120

[Huawei-Vlanif1]vrrp vrid 1 preempt-mode timer delay 0

[Huawei-Vlanif1]vrrp vrid 1 track interface g0/0/1

[Huawei-Vlanif1]int vl 2

[Huawei-Vlanif2]vrrp vrid 2 virtual-ip 2.1.1.100

[Huawei-Vlanif2]vrrp vrid 2 preempt-mode timer delay 0

[Huawei-Vlanif2]vrrp vrid 2 track interface g0/0/1

[Huawei-Vlanif2]vrrp vrid 2 priority 120

[Huawei-Vlanif2]q

[Huawei]int vl 3

[Huawei-Vlanif3]vrrp vrid 3 virtual-ip 3.1.1.100

[Huawei-Vlanif3]vrrp vrid 3 priority 100

[Huawei-Vlanif3]vrrp vrid 3 preempt-mode timer delay 0

[Huawei-Vlanif3]vrrp vrid 3 track interface g0/0/1

[Huawei-Vlanif3]int vl 4

[Huawei-Vlanif4]vrrp vrid 4 virtual-ip 4.1.1.100

[Huawei-Vlanif4]vrrp vrid 4 preempt-mode timer delay 0

[Huawei-Vlanif4]vrrp vrid 4 priority 100

[Huawei-Vlanif4]vrrp vrid 4 track interface g0/0/1

[Huawei-Vlanif4]q

[Huawei]rip

[Huawei-rip-1]version 2

[Huawei-rip-1]undo summary

[Huawei-rip-1]network 1.0.0.0

[Huawei-rip-1]network 2.0.0.0

[Huawei-rip-1]network 3.0.0.0

[Huawei-rip-1]network 4.0.0.0

[Huawei-rip-1]network 5.0.0.0

[Huawei-rip-1]q

[Huawei]stp enable

[Huawei]display vrrp brief

VRID  State        Interface                Type     Virtual IP    

----------------------------------------------------------------

1     Master       Vlanif1                  Normal   1.1.1.100     

2     Master       Vlanif2                  Normal   2.1.1.100     

3     Backup       Vlanif3                  Normal   3.1.1.100      

4     Backup       Vlanif4                  Normal   4.1.1.100     

----------------------------------------------------------------

Total:4     Master:2     Backup:2     Non-active:0    

LSW2配置

[Huawei]vl batch 1 2 3 4

[Huawei]stp region-configuration

[Huawei-mst-region]region-name qwe

[Huawei-mst-region]instance 1 vl 1 to 2

[Huawei-mst-region]instance 2 vl 3 to 4

[Huawei-mst-region]active region-configuration

[Huawei-mst-region]q

[Huawei]stp instance 2 root primary

[Huawei]stp instance 1 root secondary

[Huawei]stp pathcost-standard legacy

[Huawei]int g0/0/2

[Huawei-GigabitEthernet0/0/2]port link tr

[Huawei-GigabitEthernet0/0/2]port tr al vl al

[Huawei-GigabitEthernet0/0/2]int g0/0/3

[Huawei-GigabitEthernet0/0/3]port link tr

[Huawei-GigabitEthernet0/0/3]port tr al vl al

[Huawei-GigabitEthernet0/0/3]int g0/0/4

[Huawei-GigabitEthernet0/0/4]port link tr

[Huawei-GigabitEthernet0/0/4]port tr al vl al

[Huawei-GigabitEthernet0/0/4]q

[Huawei]int vl 1

[Huawei-Vlanif1]ip add 1.1.1.20 24

[Huawei-Vlanif1]int vl 2

[Huawei-Vlanif2]ip add 2.1.1.20 24

[Huawei-Vlanif2]int vl 3

[Huawei-Vlanif3]ip add 3.1.1.20 24

[Huawei-Vlanif3]int vl 4

[Huawei-Vlanif4]ip add 4.1.1.20 24

[Huawei]display stp brief

 MSTID  Port                        Role  STP State     Protection

   0    GigabitEthernet0/0/1        DESI  FORWARDING      NONE

   0    GigabitEthernet0/0/2        DESI  FORWARDING      NONE

   0    GigabitEthernet0/0/3        DESI  FORWARDING      NONE

   0    GigabitEthernet0/0/4        DESI  FORWARDING      NONE

   1    GigabitEthernet0/0/1        DESI  FORWARDING      NONE

   1    GigabitEthernet0/0/2        DESI  FORWARDING      NONE

   1    GigabitEthernet0/0/3        ROOT  FORWARDING      NONE

   1    GigabitEthernet0/0/4        DESI  FORWARDING      NONE

   2    GigabitEthernet0/0/1        DESI  FORWARDING      NONE

   2    GigabitEthernet0/0/2        DESI  FORWARDING      NONE

   2    GigabitEthernet0/0/3        DESI  FORWARDING      NONE

   2    GigabitEthernet0/0/4        DESI  FORWARDING      NONE

[Huawei]vl batch 5 6

[Huawei]int vl 6

[Huawei-Vlanif6]ip add 6.1.1.2 24

[Huawei-Vlanif6]q

[Huawei]int g0/0/1

[Huawei-GigabitEthernet0/0/1]port de

[Huawei-GigabitEthernet0/0/1]port link ac   

[Huawei-GigabitEthernet0/0/1]port link ac

Error: Please renew the default configurations.

[Huawei-GigabitEthernet0/0/1]port link acc 

[Huawei-GigabitEthernet0/0/1]port link acc

Error: Please renew the default configurations.

[Huawei-GigabitEthernet0/0/1]

[Huawei-GigabitEthernet0/0/1]

[Huawei-GigabitEthernet0/0/1]

[Huawei-GigabitEthernet0/0/1]undo port link-type

Error: Please renew the default configurations.

[Huawei-GigabitEthernet0/0/1]q

[Huawei]display stp brief

 MSTID  Port                        Role  STP State     Protection

   0    GigabitEthernet0/0/1        DESI  FORWARDING      NONE

   0    GigabitEthernet0/0/2        DESI  FORWARDING      NONE

   0    GigabitEthernet0/0/3        DESI  FORWARDING      NONE

   0    GigabitEthernet0/0/4        DESI  FORWARDING      NONE

   1    GigabitEthernet0/0/1        DESI  FORWARDING      NONE

   1    GigabitEthernet0/0/2        DESI  FORWARDING      NONE

   1    GigabitEthernet0/0/3        ROOT  FORWARDING      NONE

   1    GigabitEthernet0/0/4        DESI  FORWARDING      NONE

   2    GigabitEthernet0/0/2        DESI  FORWARDING      NONE

   2    GigabitEthernet0/0/3        DESI  FORWARDING      NONE

   2    GigabitEthernet0/0/4        DESI  FORWARDING      NONE

[Huawei]int g0/0/1

[Huawei-GigabitEthernet0/0/1]port link ac

[Huawei-GigabitEthernet0/0/1]port de vl 6

[Huawei-GigabitEthernet0/0/1]q

[Huawei-Vlanif1]vrrp vrid 1 virtual-ip 1.1.1.100

[Huawei-Vlanif1]vrrp vrid 1 priority 100

[Huawei-Vlanif1]vrrp vrid 1 preempt-mode timer delay 0

[Huawei-Vlanif1]vrrp vrid 1 track interface g0/0/1

[Huawei-Vlanif2]vrrp vrid 2 virtual-ip 2.1.1.100

[Huawei-Vlanif2]vrrp vrid 2 priority 100

[Huawei-Vlanif2]vrrp vrid 2 preempt-mode timer delay 0

[Huawei-Vlanif2]vrrp vrid 2 track interface g0/0/1

[Huawei-Vlanif2]int vl 3

[Huawei-Vlanif3]vrrp vrid 3 virtual-ip 3.1.1.100

[Huawei-Vlanif3]vrrp vrid 3 priority 120

[Huawei-Vlanif3]vrrp vrid 3 preempt-mode timer delay 0

[Huawei-Vlanif3]vrrp vrid 3 track interface g0/0/1

[Huawei-Vlanif3]int vl 4

[Huawei-Vlanif4]vrrp vrid 4 virtual-ip 4.1.1.100

[Huawei-Vlanif4]vrrp vrid 4 priority 120

[Huawei-Vlanif4]vrrp vrid 4 preempt-mode timer delay 0

[Huawei-Vlanif4]vrrp vrid 4 track interface g0/0/1

[Huawei-Vlanif4]q

[Huawei]rip

[Huawei-rip-1]version 2

[Huawei-rip-1]undo summary

[Huawei-rip-1]network 1.0.0.0

[Huawei-rip-1]network 2.0.0.0

[Huawei-rip-1]network 3.0.0.0

[Huawei-rip-1]network 4.0.0.0

[Huawei-rip-1]network 6.0.0.0

[Huawei-rip-1]q

[Huawei]stp enable

[Huawei]display vrrp brief

VRID  State        Interface                Type     Virtual IP    

----------------------------------------------------------------

1     Backup       Vlanif1                  Normal   1.1.1.100     

2     Backup       Vlanif2                  Normal   2.1.1.100     

3     Master       Vlanif3                  Normal   3.1.1.100     

4     Master       Vlanif4                  Normal   4.1.1.100      

----------------------------------------------------------------

Total:4     Master:2     Backup:2     Non-active:0    

LSW3配置

[Huawei]stp region-configuration

[Huawei-mst-region]region-name qwe

[Huawei-mst-region]instance 1 vl 1 to 2

[Huawei-mst-region]instance 2 vl 3 to 4

[Huawei-mst-region]active region-configuration

[Huawei-mst-region]q

[Huawei]stp pathcost-standard legacy

[Huawei]int g0/0/1

[Huawei-GigabitEthernet0/0/1]port link tr

[Huawei-GigabitEthernet0/0/1]port tr al vl al

[Huawei-GigabitEthernet0/0/1]int g0/0/2

[Huawei-GigabitEthernet0/0/2]port link tr

[Huawei-GigabitEthernet0/0/2]port tr al vl al

[Huawei-GigabitEthernet0/0/2]int g0/0/3

[Huawei-GigabitEthernet0/0/3]q

[Huawei]vl batch 1 2 3 4

[Huawei]int g0/0/3

[Huawei-GigabitEthernet0/0/3]port link ac

[Huawei-GigabitEthernet0/0/3]port de vl 1

[Huawei-GigabitEthernet0/0/3]int g0/0/4

[Huawei-GigabitEthernet0/0/4]port link ac

[Huawei-GigabitEthernet0/0/4]port de vl 2

[Huawei-GigabitEthernet0/0/4]stp disable

[Huawei-GigabitEthernet0/0/4]int g0/0/3

[Huawei-GigabitEthernet0/0/3]stp disable

[Huawei]stp enable

LSW4配置

[Huawei]stp region-configuration

[Huawei-mst-region]region-name qwe

[Huawei-mst-region]instance 1 vl 1 to 2

[Huawei-mst-region]instance 2 vl 3 to 4

[Huawei-mst-region]active region-configuration

[Huawei-mst-region]q

[Huawei]stp pathcost-standard legacy

[Huawei]int g0/0/1

[Huawei-GigabitEthernet0/0/1]port link tr

[Huawei-GigabitEthernet0/0/1]port tr al vl al

[Huawei-GigabitEthernet0/0/1]int g0/0/2

[Huawei-GigabitEthernet0/0/2]port link tr

[Huawei-GigabitEthernet0/0/2]port tr al vl al

[Huawei-GigabitEthernet0/0/2]q

[Huawei]vl batch 1 2 3 4

[Huawei]int g0/0/3

[Huawei-GigabitEthernet0/0/3]port link ac

[Huawei-GigabitEthernet0/0/3]port de vl 3

[Huawei-GigabitEthernet0/0/3]int g0/0/3

[Huawei-GigabitEthernet0/0/3]int g0/0/4

[Huawei-GigabitEthernet0/0/4]port link ac

[Huawei-GigabitEthernet0/0/4]port de vl 4

[Huawei]stp enable

R1 配置

[Huawei]int g0/0/0

[Huawei-GigabitEthernet0/0/0]ip add 5.1.1.1 24

[Huawei-GigabitEthernet0/0/0]int g0/0/1

[Huawei-GigabitEthernet0/0/1]ip add 6.1.1.1 24

[Huawei]rip

[Huawei-rip-1]version 2

[Huawei-rip-1]un summary

[Huawei-rip-1]network 5.0.0.0

[Huawei-rip-1]network 6.0.0.0

 

### 配置DHCP #### 设置设备名称 为了便于管理和识别,在开始配置之前先更改各台设备的名字。例如,对于一台作为服务器的路由器可以命名为`Server`。 ```shell <Device> system-view [Device] sysname Server ``` #### 关闭泛洪信息 减少不必要的调试信息干扰实际操作过程中的判断。 ```shell [Server] info-center disable ``` #### 接口IP地址设定 给定提供服务所需的网络接口分配合适的IPv4地址及其对应的子网掩码。这里假设使用的是GigabitEthernet0/0/1端口来连接内部局域网,并给予该端口一个特定范围内的私有IP地址以便后续用于构建DHCP池。 ```shell [Server]interface GigabitEthernet 0/0/1 [Server-GigabitEthernet0/0/1] ip address 192.168.1.1 255.255.255.0 ``` #### DHCP Pool创建 定义一个名为`dhcp_pool_1`的DHCP地址池,它会自动为客户端分配来自192.168.1.x系列的可用IP地址;同时指定了默认网关以及DNS服务器的信息。 ```shell [Server] dhcp enable [Server] ip pool dhcp_pool_1 [Server-ip-pool-dhcp_pool_1] network 192.168.1.0 mask 255.255.255.0 [Server-ip-pool-dhcp_pool_1] gateway-list 192.168.1.1 [Server-ip-pool-dhcp_pool_1] dns-list 8.8.8.8 [Server-ip-pool-dhcp_pool_1] expired day 7 ``` 以上步骤完成了基于华为ENSP平台上的简单DHCP服务器部署[^3]。 --- ### 配置VRRP #### 基础接口地址配置 确保参与VRRP组的所有成员都拥有相同子网下的有效IP地址。这一步已经在上述DHCP部分完成。 #### 创建并启动VRRP实例 在每台负责处理外部流量的核心交换机上建立相应的VRRP实例,比如编号为1的实例。此过程中还需要指定虚拟IP地址(VIP),即对外宣称的服务入口点。 ```shell [CoreSwitch]interface Vlanif 100 [CoreSwitch-Vlanif100] vrrp vrid 1 virtual-ip 192.168.1.254 ``` #### 设定优先级与抢占模式 调整不同节点间的相对权重以决定谁将成为Master角色承担主要职责,默认情况下启用抢占功能允许更高优先级者接管控制权。 ```shell [CoreSwitch-Vlanif100]vrrp vrid 1 priority 120 [CoreSwitch-Vlanif100]vrrp vrid 1 preempt-mode timer delay 20 ``` #### 安全增强措施 按照最佳实践建议,应该对VRRP通信实施认证机制从而提高安全性,防止未经授权第三方非法介入造成潜在风险。 ```shell [CoreSwitch-Vlanif100]vrrp vrid 1 authentication-mode simple cipher HUAWEI@123 ``` 最后记得保存所做的全部修改以免重启后丢失设置成果: ```shell [CoreSwitch] save force ``` 综上所述,已经展示了如何利用华为ENSP工具来进行基本的DHCP和VRRP协议的相关配置[^1][^2]。
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包

打赏作者

404谜

你的鼓励将是我创作的最大动力

¥1 ¥2 ¥4 ¥6 ¥10 ¥20
扫码支付:¥1
获取中
扫码支付

您的余额不足,请更换扫码支付或充值

打赏作者

实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值