VRRP双机热备
通过VRRP和HSB实现的双机热备份称为VRRP热备份。VRRP协议协商出主备AC,主AC管理AP并为AP提供业务服务,备AC做为备份接收主AC同步的信息并监控主AC的工作状态。工作状态的AC通过HSB功能将表项信息实时备份到备份状态的AC上,一旦工作中的主AC意外故障,备份状态下的备AC能迅速切换到主AC的角色顶替工作。
AP和VRRP虚拟IP地址建立一条CAPWAP链路,此时AP由主AC管理。
VRRP热备份只支持主备方式的组网,不支持负载分担方式的组网。
VRRP热备份流程包括主备协商、数据备份、主备倒换和主备回切几个阶段。
拓扑图
配置
sysname SW1
#
vlan batch 10 254
#
interface Vlanif10
ip address 10.1.1.254 255.255.255.0
dhcp select interface
#
interface Vlanif254
ip address 10.1.254.254 255.255.255.0
dhcp select interface
dhcp server excluded-ip-address 10.1.254.100
dhcp server excluded-ip-address 10.1.254.200 10.1.254.253
#
interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
interface GigabitEthernet0/0/2
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
interface GigabitEthernet0/0/3
port link-type trunk
port trunk pvid vlan 254
port trunk allow-pass vlan 2 to 4094
#
sysname AC1
#
vlan batch 254
#
interface Vlanif254
ip address 10.1.254.100 255.255.255.0
vrrp vrid 1 virtual-ip 10.1.254.253
vrrp vrid 1 priority 105
#
interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
hsb-service 0
service-ip-port local-ip 10.1.254.100 peer-ip 10.1.254.200 local-data-port 1024
0 peer-data-port 10240
#
hsb-group 0
track vrrp vrid 1 interface Vlanif254
bind-service 0
hsb enable
#
wlan
security-profile name SEC_HUAWEI
security wpa2 psk pass-phrase huawei@123 aes
ssid-profile name SSID_HUAWEI
ssid HUAWEI
vap-profile name VAP_HUAWEI
service-vlan vlan-id 10
ssid-profile SSID_HUAWEI
security-profile SEC_HUAWEI
ap-id 1 ap-mac 00e0-fcb4-4810
ap-name AP1
radio 0
vap-profile VAP_HUAWEI wlan 1
radio 1
vap-profile VAP_HUAWEI wlan 1
#
capwap source ip-address 10.1.254.253
sysname AC2
#
vlan batch 254
#
interface Vlanif254
ip address 10.1.254.200 255.255.255.0
vrrp vrid 1 virtual-ip 10.1.254.253
#
interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
hsb-service 0
service-ip-port local-ip 10.1.254.200 peer-ip 10.1.254.100 local-data-port 1024
0 peer-data-port 10240
#
hsb-group 0
track vrrp vrid 1 interface Vlanif254
bind-service 0
hsb enable
#
wlan
security-profile name SEC_HUAWEI
security wpa2 psk pass-phrase huawei@123 aes
ssid-profile name SSID_HUAWEI
ssid HUAWEI
vap-profile name VAP_HUAWEI
service-vlan vlan-id 10
ssid-profile SSID_HUAWEI
security-profile SEC_HUAWEI
ap-id 1 ap-mac 00e0-fcb4-4810
ap-name AP1
radio 0
vap-profile VAP_HUAWEI wlan 1
radio 1
vap-profile VAP_HUAWEI wlan 1
#
capwap source ip-address 10.1.254.253
结果查看
查看VRRP状态,AC1为主,AC2为备份
查看ap上线情况
查看STA上线情况
查看hsb-service
查看hsb-group
模拟AC1故障,shutdown交换机SW1的G0/0/1接口
查看hsb-service状态
查看hsb-group,AC2成为master
查看AP状态,已经在AC2上上线
AC2上查看STA状态
STA在模拟AC1故障期间长ping网关,在AC切换主备期间,中间丢了若干包后恢复正常
AC1恢复正常后,AP切换回AC1