H3C-IRF堆叠-VRRP双机热备-IPSecvpan

原创

已于 2022-12-07 13:40:27 修改

· 2k 阅读

14 ·

版权

文章标签：

#网络

于 2022-12-06 17:35:30 首次发布

该博客详细介绍了如何配置H3C设备的VRRP双机热备，包括链路聚合、VLAN、MSTP、VRRP、BFD监测和DHCP服务。同时，还阐述了IRF堆叠的步骤，包括成员设备配置、堆叠接口设置、链路聚合和MAD多主检测，以及DHCP服务在堆叠上的应用。最后，博客讨论了IPSecvpan配置，包括GRE隧道、IKE预共享密钥、IPsec策略和NAT地址转换，确保网络通信的安全性和可达性。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

第一部分： VRRP双机热备

1:链路聚合

[H3C]sys Sw1
[Sw1]int GigabitEthernet 1/0/6
[Sw1-GigabitEthernet1/0/6]port link-mode route
[Sw1-GigabitEthernet1/0/6]ip address 192.168.100.2 24

[H3C]sys R1
[R1]int GigabitEthernet 0/0
[R1-GigabitEthernet0/0]ip address 192.168.100.1 24

[R1]int GigabitEthernet 0/1
[R1-GigabitEthernet0/1]ip address 192.168.101.1 24
[R1-GigabitEthernet0/1]quit
[R1]int GigabitEthernet 0/2
[R1-GigabitEthernet0/2]ip address 12.1.1.1 24

[H3C]sys Sw2
[Sw2]int GigabitEthernet 1/0/6
[Sw2-GigabitEthernet1/0/6]port link-mode route
[Sw2-GigabitEthernet1/0/6]ip address 192.168.101.2 24

[R2]undo in en
[R2]sys R2
[R2]int GigabitEthernet 0/0
[R2-GigabitEthernet0/0]ip add 12.1.1.2 24
[R2-GigabitEthernet0/0]int gi 0/1
[R2-GigabitEthernet0/1]ip add 23.1.1.2 24
[R2-GigabitEthernet0/1]quit
[R2]int LoopBack 0
[R2-LoopBack0]ip address 2.2.2.2 24

[H3C]undo in en
[H3C]sys R3
[R3]int gi 0/0
[R3-GigabitEthernet0/0]ip add 23.1.1.3 24
[R3-GigabitEthernet0/0]int gi 5/0
[R3-GigabitEthernet5/0]ip address 13.1.1.3 24

[Sw1]int Bridge-Aggregation 1
[Sw1-Bridge-Aggregation1]quit
[Sw1]int range GigabitEthernet 1/0/1 GigabitEthernet 1/0/2
[Sw1-if-range]port link-aggregation group 1
[Sw1-if-range]quit
[Sw1]dis link-aggregation verbose (查看链路聚合)

[Sw2]int Bridge-Aggregation 1
[Sw2-Bridge-Aggregation1]quit
[Sw2]int range GigabitEthernet 1/0/1 GigabitEthernet 1/0/2
[Sw2-if-range]port link-aggregation group 1

[H3C]undo in en
[H3C]sys SW3
[SW3]vlan 2
[SW3-vlan2]vlan 999
[SW3]int range GigabitEthernet 1/0/3 GigabitEthernet 1/0/4
[SW3-if-range]port access vlan 2
[SW3-if-range]quit
[SW3]int range GigabitEthernet 1/0/1 GigabitEthernet 1/0/2
[SW3-if-range]port link-type trunk
[SW3-if-range]port trunk permit vlan 2 999

[SW4]undo in en
[SW4]vlan 3
[SW4-vlan3]vlan 999
[SW4-vlan999]quit
[SW4]int GigabitEthernet 1/0/4
[SW4-GigabitEthernet1/0/4]port access vlan 3
[SW4-GigabitEthernet1/0/4]quit
[SW4]int range GigabitEthernet 1/0/2 GigabitEthernet 1/0/1
[SW4-if-range]port link-type trunk
[SW4-if-range]port trunk permit vlan 3 999

[Sw1]vlan 2
[Sw1-vlan2]vlan 3
[Sw1-vlan3]vlan 999
[Sw1-vlan999]quit
[Sw1]int GigabitEthernet 1/0/3
[Sw1-GigabitEthernet1/0/3]port link-type trunk
[Sw1-GigabitEthernet1/0/3]port trunk permit vlan 2 999
[Sw1-GigabitEthernet1/0/3]quit
[Sw1]int GigabitEthernet 1/0/4
[Sw1-GigabitEthernet1/0/4]port link-type trunk
[Sw1-GigabitEthernet1/0/4]port trunk permit vlan 3 999
[Sw1-GigabitEthernet1/0/4]quit
[Sw1]int Bridge-Aggregation 1
[Sw1-Bridge-Aggregation1]port link-type trunk
Configuring GigabitEthernet1/0/1 done.
Configuring GigabitEthernet1/0/2 done.
[Sw1-Bridge-Aggregation1]port trunk permit vlan 2 3 999
Configuring GigabitEthernet1/0/1 done.
Configuring GigabitEthernet1/0/2 done.

[Sw2]vlan 2
[Sw2-vlan2]vlan 3
[Sw2-vlan3]vlan 999
[Sw2-vlan999]quit
[Sw2]int GigabitEthernet 1/0/3
[Sw2-GigabitEthernet1/0/3]port link-type trunk
[Sw2-GigabitEthernet1/0/3]port trunk permit vlan 3 999
[Sw2-GigabitEthernet1/0/3]quit
[Sw2]int GigabitEthernet 1/0/4
[Sw2-GigabitEthernet1/0/4]port link-type trunk
[Sw2-GigabitEthernet1/0/4]port trunk perm

最低0.47元/天解锁文章