学习精彩网络技术老师:华为HCIA和HCIP数通eNSP实战视频课
学习精彩网络技术老师:华为、华三、锐捷、WLAN、IPv6等全套视频课程
学习IPv6全套课程:IPv6组网实战从入门到精通视频课程
配置公网IP FRR后,当主链路出现故障时,流量可以快速切换到备份链路上。
组网需求
如图1所示,要求使链路B为链路A的备份。当链路A出现故障时,流量可以快速切换到链路B上。
配置思路
采用如下的思路配置公网IP FRR功能:
在各路由器上使能OSPF基本功能,使各路由器之间可以相互学习路由。
在RouterT和RouterC的接口GE3/0/0上配置较大的Cost值,使OSPF优选链路A。
在RouterT上配置Route-Policy,配置备份下一跳和备份出接口,使能公网IP FRR功能,使链路B为链路A的备份。
数据准备
为完成此配置例,需准备如下的数据:
OSPF接口的Cost值100。
配置Route-Policy名称和节点号,配置备份下一跳192.168.20.2以及备份出接口GE3/0/0。
操作步骤
- 配置各接口的IP地址(略)
- 在RouterT、RouterA、RouterB和RouterC上配置OSPF(略)
- 配置OSPF接口的Cost值
# 在RouterT的GigabitEthernet3/0/0接口上配置Cost值,使OSPF优选链路A。
[RouterT] interface gigabitethernet 3/0/0
[RouterT-GigabitEthernet3/0/0] ospf cost 100
[RouterT-GigabitEthernet3/0/0] quit
# 在RouterC的GigabitEthernet3/0/0接口上配置较大的Cost值,使OSPF优选链路A。
[RouterC] interface gigabitethernet 3/0/0
[RouterC-GigabitEthernet3/0/0] ospf cost 100
[RouterC-GigabitEthernet3/0/0] quit
- 配置Route-Policy
# 在RouterT上配置Route-Policy,配置备份下一跳和备份出接口。同时配置if-match项,限制应用范围。
[RouterT] ip ip-prefix frr1 permit 172.17.1.1 24
[RouterT] route-policy ip_frr_rp permit node 10
[RouterT-route-policy] if-match ip-prefix frr1
[RouterT-route-policy] apply backup-nexthop 192.168.20.2
[RouterT-route-policy] apply backup-interface gigabitethernet 3/0/0
[RouterT-route-policy] quit
- 使能公网IP FRR功能
[RouterT] ip frr route-policy ip_frr_rp
# 在RouterT上查看备份出接口和备份下一跳信息。
[RouterT] display ip routing-table 172.17.1.0 verboseRoute Flags: R - relay, D - download
to fib
------------------------------------------------------------------------------
Routing Table : Public
Summary Count : 1
Destination: 172.17.1.0/24
Protocol: OSPF Process ID: 1
Preference: 10 Cost: 3
NextHop: 192.168.10.2 Neighbour: 0.0.0.0
State: Active Adv Age: 00h06m49s
Tag: 0 Priority: low
Label: NULL QoSInfo: 0x0
IndirectID: 0x0
RelayNextHop: 0.0.0.0 Interface: GigabitEthernet2/0/0
TunnelID: 0x0 Flags: D
BkNextHop: 192.168.20.2 BkInterface: GigabitEthernet3/0/0
BkLabel: NULL SecTunnelID: 0x0
BkPETunnelID: 0x0 BkPESecTunnelID: 0x0
BkIndirectID: 0x0
- 当不需要IP FRR功能时,配置undo ip frr命令进行去使能操作
[RouterT] undo ip frr
# IP FRR去使能后,查看备份出接口和备份下一跳的信息。
[RouterT] display ip routing-table 172.17.1.0 verboseRoute Flags: R - relay, D - download
to fib
------------------------------------------------------------------------------
Routing Table : Public
Summary Count : 1
Destination: 172.17.1.0/24
Protocol: OSPF Process ID: 1
Preference: 10 Cost: 3
NextHop: 192.168.10.2 Neighbour: 0.0.0.0
State: Active Adv Age: 00h00m01s
Tag: 0 Priority: low
Label: NULL QoSInfo: 0x0
IndirectID: 0x0
RelayNextHop: 0.0.0.0 Interface: GigabitEthernet2/0/0
TunnelID: 0x0 Flags: D
配置文件
RouterT的配置文件
#
sysname RouterT
#
ip frr route-policy ip_frr_rp
#
interface GigabitEthernet2/0/0
ip address 192.168.10.1 255.255.255.0
#
interface GigabitEthernet3/0/0
ip address 192.168.20.1 255.255.255.0
ospf cost 100
#
interface GigabitEthernet1/0/0
ip address 172.18.1.1 255.255.255.0
#
ospf 1
area 0.0.0.0
network 192.168.10.0 0.0.0.255
network 192.168.20.0 0.0.0.255
area 0.0.0.1
network 172.18.1.0 0.0.0.255
#
ip ip-prefix frr1 index 10 permit 172.17.1.0 24
#
route-policy ip_frr_rp permit node 10
if-match ip-prefix frrl
apply backup-nexthop 192.168.20.2
apply backup-interface GigabitEthernet3/0/0
#
return
RouterA的配置文件
#
sysname RouterA
#
interface GigabitEthernet1/0/0
ip address 192.168.10.2 255.255.255.0
#
interface GigabitEthernet2/0/0
ip address 192.168.11.2 255.255.255.0
#
ospf 1
area 0.0.0.0
network 192.168.10.0 0.0.0.255
network 192.168.11.0 0.0.0.255
#
return
RouterB的配置文件
#
sysname RouterB
#
interface GigabitEthernet1/0/0
ip address 192.168.20.2 255.255.255.0
#
interface GigabitEthernet2/0/0
ip address 192.168.21.2 255.255.255.0
#
ospf 1
area 0.0.0.0
network 192.168.20.0 0.0.0.255
network 192.168.21.0 0.0.0.255
#
return
RouterC的配置文件
#
sysname RouterC
#
interface GigabitEthernet1/0/0
ip address 172.17.1.1 255.255.255.0
#
interface GigabitEthernet2/0/0
ip address 192.168.11.1 255.255.255.0
#
interface GigabitEthernet3/0/0
ip address 192.168.21.1 255.255.255.0
ospf cost 100
#
ospf 1
area 0.0.0.0
network 192.168.11.0 0.0.0.255
network 192.168.21.0 0.0.0.255
area 0.0.0.2
network 172.17.1.0 0.0.0.255
#
return