三层交换机C和D与二层交换机组成。

在三层中建立VLAN 10 并设置SVI地址和VRRP浮动地址。并在主交换机C上设置了优先级。

主交换机配置例：interface Vlan-interface 10
                      ip address 192.168.1.252 255.255.255.0
                     vrrp vrid 10virtual-ip 192.168.1.254
                     vrrp vrid 10 priority 120

备交换机配置例：：interface Vlan-interface 10
                      ip address 192.168.1.253 255.255.255.0
                     vrrp vrid 10 virtual-ip 192.168.1.254
                      vrrp vrid 10 priority 100
其中virtual-ip 192.168.1.254就是192.168.1.0(VLAN10)内主机的网关。

三层交换机C配置如下（我这是千M电口和百M混用，你们可以实际情况来定）

vlan 10

interface Vlan-interface 10
ip address 192.168.1.252 255.255.255.0
vrrp vrid 30 virtual-ip 192.168.1.254
vrrp vrid 30 priority 120

interface GigabitEthernet1/0/1
desc to_SWITCH-D
duplex full
speed 1000
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 10

#
interface GigabitEthernet1/0/2
desc to ercheng-switch
duplex full
speed 100
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 10

三层交换机D配置如下：

vlan 10

interface Vlan-interface 10
ip address 192.168.1.253 255.255.255.0
vrrp vrid 30 virtual-ip 192.168.1.254

interface GigabitEthernet1/0/1
desc to_SWITCH-C
duplex full
speed 1000
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 10

#
interface GigabitEthernet1/0/2
desc to ercheng-switch
duplex full
speed 100
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 10

两台三层交换机互联接口起TRUNK，并将VLAN 10允许通过。就行了，其他的三层配置这里不再罗嗦了。

二层配置也比较简单：

1、在二层中必须开启STP协议。

2、二层与三层互联接口为TRUNK，并允许VLAN 10能过。互联接口强制为全双工和100M

3、二层其他配置没有特殊的地方。。建立VLAN 10 ，把端口划到VLAN10中就可以接终端了。。

二层配置如下：

sysname IDC-3026
#
super password level 3 cipher B3+8V
#
radius scheme system
server-type huawei
primary authentication 127.0.0.1 1645
primary accounting 127.0.0.1 1646
user-name-format without-domain

domain system
radius-scheme system
access-limit disable
state active
vlan-assignment-mode integer
idle-cut disable
self-service-url disable
messenger time disable

domain default enable system
#
local-server nas-ip 127.0.0.1 key huawei
#
stp enable
#
vlan 1
#
vlan 10
#

二层交换机的IP，如果不需要对二层交换机做TELETN管理，可以不配。
interface Vlan-interface10
ip address 192.168.1.1 255.255.255.0
#
interface Aux0/0
#
interface Ethernet0/1
port access vlan 10
#
interface Ethernet0/2
port access vlan 10
#
interface Ethernet0/3
port access vlan 10
#
interface Ethernet0/4
port access vlan 10
#
interface Ethernet0/5
port access vlan 10
#
interface Ethernet0/6
port access vlan 10
#
interface Ethernet0/7
port access vlan 10
#
interface Ethernet0/8
port access vlan 10
#
interface Ethernet0/9
port access vlan 10
#
interface Ethernet0/10
port access vlan 10
#
interface Ethernet0/11
port access vlan 10
#
interface Ethernet0/12
port access vlan 10
#
interface Ethernet0/13
port access vlan 10
#
interface Ethernet0/14
port access vlan 10
#
interface Ethernet0/15
port access vlan 10
#
interface Ethernet0/16
port access vlan 10
#
interface Ethernet0/17
port access vlan 10
#
interface Ethernet0/18
port access vlan 10
#
interface Ethernet0/19
port access vlan 10
#
interface Ethernet0/20
port access vlan 10
#
interface Ethernet0/21
port access vlan 10
#
interface Ethernet0/22
port access vlan 10
#
interface Ethernet0/23
duplex full
speed 100
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 10
#
interface Ethernet0/24
duplex full
speed 100
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 2 to 10
#
interface GigabitEthernet1/1
#
interface GigabitEthernet2/1
#
interface NULL0
#
二层交换机的网关，如果不需要对二层交换机做TELETN管理，可以不配。
ip route-static 0.0.0.0 0.0.0.0 192.168.1.254 preference 60
#

user-interface aux 0
authentication-mode password
set authentication password cipher IG.X/5-4I#XS@
user-interface vty 0 4
set authentication password cipher IG.X/5-4I#XNI

#
return

ITPub博客

华为VRRP高可靠网络设计与配置（转）

最新文章