在華為的交換機(jī)上,，一般采用VRRP的技術(shù)來(lái)實(shí)現(xiàn)交換機(jī)的冗余，但是VRRP本身無(wú)法感知故障,、自動(dòng)切換,，因此需要配置VRRP與接口狀態(tài)聯(lián)動(dòng)，以實(shí)現(xiàn)設(shè)備或者鏈路故障時(shí),，交換機(jī)自動(dòng)切換,，從而保證數(shù)據(jù)流量的正常轉(zhuǎn)發(fā)。

本文主要涉及華為交換機(jī)的以下幾個(gè)技術(shù)點(diǎn)：Eth-Trunk,、VRRP,、Super-VLAN。

Super VLAN又稱(chēng)為VLAN聚合（VLAN Aggregation）,，一個(gè)Super VLAN中包含多個(gè)Sub VLAN,，每個(gè)Sub VLAN是一個(gè)廣播域，不同Sub VLAN之間二層相互隔離,，只能三層通訊,。

看上去有點(diǎn)亂，像只丑陋的蟲(chóng)子,，不過(guò)大致還原了客戶環(huán)境,，將就著看吧。

按照從上到下的配置順序,，演示一下Eth-Trunk,、VRRP和Super-VLAN相結(jié)合的配置。

路由器和兩臺(tái)核心之間,，跑的是OSPF協(xié)議,，區(qū)域0。各交換機(jī)之間,，都是雙鏈路,，全部需要配置Eth-Trunk，有點(diǎn)煩,，先規(guī)劃好再動(dòng)手,。

一、路由器的配置

interface GigabitEthernet0/0/0

ip address 1.1.1.1 255.255.255.252

#

interface GigabitEthernet0/0/1

ip address 2.1.1.1 255.255.255.252

#

interface GigabitEthernet0/0/2

ip address 222.92.xx.xx 255.255.255.248

#

ospf 1

area 0

network 1.1.1.1 0.0.0.0

network 2.1.1.1 0.0.0.0

network 222.92.xx.xx 0.0.0.0

二,、核心交換機(jī)的配置

兩臺(tái)交換機(jī)差不多,，就是關(guān)鍵部位需要做一下小修改，所以只貼出來(lái)核心1的配置了：

Sysname Core1

#

interface GigabitEthernet0/0/1

ip address 1.1.1.2 255.255.255.252

#

vlan batch 11 to 15 101 to 180 301 to 305 400 //指創(chuàng)建VLAN

#

vlan 11

aggregate-vlan //配置聚合VLAN

access-vlan 101 to 116 301

vlan 12

aggregate-vlan

access-vlan 117 to 132 302

vlan 13

aggregate-vlan

access-vlan 133 to 148 303

vlan 14

aggregate-vlan

access-vlan 149 to 164 304

vlan 15

aggregate-vlan

access-vlan 165 to 180 305

#

interface Vlanif11

ip address 10.1.1.2 255.255.255.0

vrrp vrid 1 virtual-ip 10.1.1.1 //vrrp1的虛擬IP為10.1.1.1

vrrp vrid 1 priority 120 //vrrp1的優(yōu)先級(jí)為120

vrrp vrid 1 preempt-mode timer delay 20 //vrrp1的搶占時(shí)間為20秒

vrrp vrid 1 track interface gigabitethernet1/0/1 reduced 100 //監(jiān)視上行接口,，一旦斷開(kāi)就降優(yōu)先級(jí),，讓核心2頂上

vrrp vrid 1 track interface eth-trunk 13 reduced 100 //監(jiān)視下行接口，目的同上

vrrp advertise send-mode 301

#

interface Vlanif12

ip address 10.1.2.2 255.255.255.0

vrrp vrid 2 virtual-ip 10.1.2.1

vrrp vrid 2 priority 120

vrrp vrid 2 preempt-mode timer delay 20

vrrp vrid 2 track interface gigabitethernet1/0/1 reduced 100

vrrp vrid 2 track interface eth-trunk 13 reduced 100

vrrp advertise send-mode 302

#

interface Vlanif13

ip address 10.1.3.2 255.255.255.0

vrrp vrid 3 virtual-ip 10.1.3.1

vrrp vrid 3 priority 120

vrrp vrid 3 preempt-mode timer delay 20

vrrp vrid 3 track interface gigabitethernet1/0/1 reduced 100

vrrp vrid 3 track interface eth-trunk 13 reduced 100

vrrp advertise send-mode 303

#

interface Vlanif14

ip address 10.1.4.2 255.255.255.0

vrrp vrid 4 virtual-ip 10.1.4.1

vrrp vrid 4 priority 120

vrrp vrid 4 preempt-mode timer delay 20

vrrp vrid 4 track interface gigabitethernet1/0/1 reduced 100

vrrp vrid 4 track interfaceeth-trunk 13 reduced 100

vrrp advertise send-mode 304

#

interface Vlanif15

ip address 10.1.5.2 255.255.255.0

vrrp vrid 5 virtual-ip 10.1.5.1

vrrp vrid 5 priority 120

vrrp vrid 5 preempt-mode timer delay 20

vrrp vrid 5 track interface gigabitethernet1/0/1 reduced 100

vrrp vrid 5 track interface eth-trunk 13 reduced 100

vrrp advertise send-mode 305

#

interface Eth-Trunk12 //創(chuàng)建eth-trunk,，其實(shí)是先創(chuàng)建再調(diào)用的,，只是在配置文件里面排在后面而已

port link-type trunk

undo port trunk allow-pass vlan 1

port trunk allow-pass vlan 301 to 305

mode lacp

#

interface GigabitEthernet1/0/2

eth-trunk 12

#

interface GigabitEthernet1/0/3

eth-trunk 12

#

interface Eth-Trunk13

port link-type trunk

undo port trunk allow-pass vlan 1

port trunk allow-pass vlan 301 to 305

mode lacp

#

interface GigabitEthernet1/0/4

eth-trunk 13

#

interface GigabitEthernet1/0/5

eth-trunk 13

#

ospf 1

area 0.0.0.0

network 1.1.1.2 0.0.0.0

network 10.1.1.0 0.0.0.255

network 10.1.2.0 0.0.0.255

network 10.1.3.0 0.0.0.255

network 10.1.4.0 0.0.0.255

network 10.1.5.0 0.0.0.255

#

相信大伙兒都看出來(lái)了，平時(shí)流量全都在Master上面跑呢,，核心2只是個(gè)打醬油的角色,，哪天核心1出問(wèn)題了，才輪到它上,；

按照我平時(shí)的配置習(xí)慣,，肯定不是這樣的，但是客戶說(shuō),，這樣的優(yōu)點(diǎn)是：核心2不會(huì)有損耗,，哪天核心1跑累了，可以切換一下角色……好吧,，只能說(shuō)也挺有想法的,。

三、匯聚交換機(jī)的配置

以下是配置命令,，不是配置完成后的配置文件——配置的時(shí)候,，先在記事本里面寫(xiě)好，然后直接粘貼到交換機(jī)上的,，所以也就很方便地粘貼在文檔中了,。

vlan bat 11 to 15 101 to 180

int Eth-Trunk 13

mode lacp-static

p l t

p t a v a

int g0/0/3

eth-trunk 13

int g0/0/4

eth-trunk 13

int Eth-Trunk 34

mode lacp-static

p l t

p t a v a

int g0/0/1

eth-trunk 34

int g0/0/2

eth-trunk 34

int Eth-Trunk 35

mode lacp-static

p l t

p t a v a

int g0/0/5

eth-trunk 35

int g0/0/6

eth-trunk 35

int Eth-Trunk 36

mode lacp-static

p l t

p t a v a

int g0/0/7

eth-trunk 36

int g0/0/8

eth-trunk 36

int Eth-Trunk 37

mode lacp-static

p l t

p t a v a

int g0/0/9

eth-trunk 37

int g0/0/10

eth-trunk 37

int Eth-Trunk 38

mode lacp-static

p l t

p t a v a

int g0/0/11

eth-trunk 38

int g0/0/12

eth-trunk 38

全是Eth-Trunk,，頭都暈了，我配置之前,，是先在圖上標(biāo)好的,，建議你也這么做，不然很容易搞錯(cuò)的,；如下圖所示,，紅色數(shù)字表示Eth-Trunk編號(hào)

四、接入交換機(jī)的配置

此處省略500字,，反正就是繼續(xù)Eth-Trunk,，然后劃分VLAN，終端接口配置為access……這個(gè)簡(jiǎn)單,，前面好多文章里面都有,。

總算配置完了，回頭再看上面的拓?fù)鋱D,，感覺(jué)更像是架飛機(jī),，也許是因?yàn)閹狭思t色的標(biāo)識(shí)？