按照要求使用vrrp配置内网，使不同VLAN的PC可以访问外网。

原创

wo1v10 2019-01-14 23:13:55 ©著作权

©著作权归作者所有：来自51CTO博客作者wo1v10的原创作品，请联系作者获取转载授权，否则将追究法律责任

一.要求 1：VLAN10，VLAN30，VLAN20和VLAN40位于同一个交换机； 2：VLAN10和VLAN30 的主网关与VLAN20和VLAN40的主网关不同； 3：网络存在冗余功能。 4：所有VLAN都可以访问外部网络。二.拓扑图

三.配置 PC1 :IP 192.168.10.1/24 网关192.168.10.254 PC2 :IP 192.168.20.1/24 网关192.168.20.254 PC3 :IP 192.168.30.1/24 网关192.168.30.254 PC4 :IP 192.168.40.1/24 网关192.168.40.254 SWITCH3 sys sys sw3 vlan batch 10 20 30 40 100 200 int g0/0/1 port link-type access port default vlan 10 int g0/0/2 port link-type access port default vlan 20 int g0/0/3 port link-type access port default vlan 30 int g0/0/4 port link-type access port default vlan 40 int g0/0/11 port link-type trunk port trunk allow-pass vlan all int g0/0/12 port link-type trunk port trunk allow-pass vlan all

SWITCH1 sys sys sw1 vlan batch 10 20 30 40 100 200 int g0/0/1 port link-type trunk port trunk allow-pass vlan all int g0/0/2 port link-type access port default vlan 100 int vlanif 100 ip addr 192.168.100.254 24 int vlanif 10 ip addr 192.168.10.253 24 vrrp vrid 10 virtual-ip 192.168.10.254 vrrp vrid 10 pri 200 vrrp vrid 10 track interface g0/0/2 reduced 110 int vlanif 30 ip addr 192.168.30.253 24 vrrp vrid 30 virtual-ip 192.168.30.254 vrrp vrid 30 pri 200 vrrp vrid 30 track interface g0/0/2 reduced 110 int vlanif 20 ip addr 192.168.20.252 24 vrrp vrid 20 virtual-ip 192.168.20.254 vrrp vrid 20 pri 100 int vlanif 40 ip addr 192.168.40.252 24 vrrp vrid 40 virtual-ip 192.168.40.254 vrrp vrid 40 pri 100 q ip route- 0.0.0.0 0.0.0.0 192.168.100.1

SWITCH2 sys sys sw2 vlan batch 10 20 30 40 100 200 int g0/0/1 port link-type trunk port trunk allow-pass vlan all int g0/0/2 port link-type access port default vlan 200 int vlanif 200 ip addr 192.168.200.254 24 int vlanif 10 ip addr 192.168.10.252 24 vrrp vrid 10 virtual-ip 192.168.10.254 vrrp vrid 10 pri 100 int vlanif 30 ip addr 192.168.30.252 24 vrrp vrid 30 virtual-ip 192.168.30.254 vrrp vrid 30 pri 100 int vlanif 20 ip addr 192.168.20.253 24 vrrp vrid 20 virtual-ip 192.168.20.254 vrrp vrid 20 pri 200 vrrp vrid 20 track interface g0/0/2 reduced 110 int vlanif 40 ip addr 192.168.40.253 24 vrrp vrid 40 virtual-ip 192.168.40.254 vrrp vrid 40 pri 200 vrrp vrid 40 track interface g0/0/2 reduced 110 q ip route- 0.0.0.0 0.0.0.0 192.168.200.1

r1 sys sys r1 int g0/0/0 ip addr 192.168.100.1 24 int g0/0/1 ip addr 192.168.200.1 24 int g2/0/0 ip addr 1.1.1.1 24 q ip route- 192.168.10.0 24 192.168.100.254
ip route- 192.168.30.0 24 192.168.100.254 ip route- 192.168.20.0 24 192.168.100.254 preference 100 ip route- 192.168.40.0 24 192.168.100.254 preference 100 ip route- 192.168.10.0 24 192.168.200.254 preference 100
ip route- 192.168.30.0 24 192.168.200.254 preference 100 ip route- 192.168.20.0 24 192.168.200.254 ip route- 192.168.40.0 24 192.168.200.254

四.验证 PC1连同外网，且抓包，只走一侧链路。关闭通的上行接口，PC1连同外网，抓包，走另一侧链路。 PC2连同外网，且抓包，只走一侧链路。关闭通的上行接口，PC1连同外网，抓包，走另一侧链路。