1.拓扑图：
2.接口配置：
①R1、R2：
int f1/0
switchport mode trunk
int f1/1
switchport mode access
switchport access
switchport access vlan 10
int f1/15
switchport mode access
switchport access vlan 30
②R3、R4：
int f1/0
switchport mode trunk
int f1/1
switchport mode access
switchport access
switchport access vlan 20
int f1/15
switchport mode access
switchport access vlan 30
2.HSRP配置：
①R1：
int vlan 10
ip add 10.1.1.1 255.255.255.248
standby 10 ip 10.1.1.5
standby 10 priority 20
standby 10 preempt
standby 10 track fastEthernet 1/1 15
standby 10 authentication md5 key-string cisco
int vlan 30
ip add 192.168.1.1 255.255.255.0
standby 30 ip 192.168.1.254
standby 30 priority 20
standby 30 preempt
standby 30 track fastEthernet 1/1 15
standby 30 authentication md5 key-string cisco
②R2：
int vlan 10
ip add 10.1.1.2 255.255.255.248
standby 10 ip 10.1.1.5
standby 10 priority 10
standby 10 preempt
standby 10 track fastEthernet 1/1 15
standby 10 authentication md5 key-string cisco
int vlan 30
ip add 192.168.1.2 255.255.255.0
standby 30 ip 192.168.1.254
standby 30 priority 10
standby 30 preempt
standby 30 track fastEthernet 1/1 15
standby 30 authentication md5 key-string cisco
③R3：
int vlan 20
ip add 10.1.1.3 255.255.255.248
standby 20 ip 10.1.1.6
standby 20 priority 20
standby 20 preempt
standby 20 track fastEthernet 1/1 15
standby 20 authentication md5 key-string ciscocisco
int vlan 30
ip add 192.168.2.1 255.255.255.0
standby 30 ip 192.168.2.254
standby 30 priority 20
standby 30 preempt
standby 30 track fastEthernet 1/1 15
standby 30 authentication md5 key-string cisco
④R4：
int vlan 20
ip add 10.1.1.4 255.255.255.248
standby 20 ip 10.1.1.6
standby 20 priority 10
standby 20 preempt
standby 20 track fastEthernet 1/1 15
standby 20 authentication md5 key-string ciscocisco
int vlan 30
ip add 192.168.2.2 255.255.255.0
standby 30 ip 192.168.2.254
standby 30 priority 10
standby 30 preempt
standby 30 track fastEthernet 1/1 15
standby 30 authentication md5 key-string cisco
⑤验证HSRP状态：
R1#show standby
Vlan10 - Group 10
State is Active
2 state changes, last state change 00:21:00
Virtual IP address is 10.1.1.5
Active virtual MAC address is 0000.0c07.ac0a
Local virtual MAC address is 0000.0c07.ac0a (v1 default)
Hello time 3 sec, hold time 10 sec
Next hello sent in 2.592 secs
Authentication MD5, key-string "cisco"
Preemption enabled
Active router is local
Standby router is 10.1.1.2, priority 10 (expires in 8.728 sec)
Priority 20 (configured 20)
IP redundancy name is "hsrp-Vl10-10" (default)
Vlan30 - Group 30
State is Active
2 state changes, last state change 00:10:58
Virtual IP address is 192.168.1.254
Active virtual MAC address is 0000.0c07.ac1e
Local virtual MAC address is 0000.0c07.ac1e (v1 default)
Hello time 3 sec, hold time 10 sec
Next hello sent in 1.060 secs
Authentication MD5, key-string "cisco"
Preemption enabled
Active router is local
Standby router is 192.168.1.2, priority 10 (expires in 7.740 sec)
Priority 20 (configured 20)
Track interface FastEthernet1/1 state Up decrement 10
IP redundancy name is "hsrp-Vl30-30" (default)
R1#
R2#show standby
Vlan10 - Group 10
State is Standby
1 state change, last state change 00:17:14
Virtual IP address is 10.1.1.5
Active virtual MAC address is 0000.0c07.ac0a
Local virtual MAC address is 0000.0c07.ac0a (v1 default)
Hello time 3 sec, hold time 10 sec
Next hello sent in 1.044 secs
Authentication MD5, key-string "cisco"
Preemption enabled
Active router is 10.1.1.1, priority 20 (expires in 9.924 sec)
Standby router is local
Priority 10 (configured 10)
IP redundancy name is "hsrp-Vl10-10" (default)
Vlan30 - Group 30
State is Standby
1 state change, last state change 00:11:01
Virtual IP address is 192.168.1.254
Active virtual MAC address is 0000.0c07.ac1e
Local virtual MAC address is 0000.0c07.ac1e (v1 default)
Hello time 3 sec, hold time 10 sec
Next hello sent in 1.992 secs
Authentication MD5, key-string "cisco"
Preemption enabled
Active router is 192.168.1.1, priority 20 (expires in 9.156 sec)
Standby router is local
Priority 10 (configured 10)
Track interface FastEthernet1/1 state Up decrement 10
IP redundancy name is "hsrp-Vl30-30" (default)
R2#
R3#show standby
Vlan20 - Group 20
State is Active
2 state changes, last state change 00:06:54
Virtual IP address is 10.1.1.6
Active virtual MAC address is 0000.0c07.ac14
Local virtual MAC address is 0000.0c07.ac14 (v1 default)
Hello time 3 sec, hold time 10 sec
Next hello sent in 2.064 secs
Authentication MD5, key-string "ciscocisco"
Preemption enabled
Active router is local
Standby router is 10.1.1.4, priority 10 (expires in 7.072 sec)
Priority 20 (configured 20)
IP redundancy name is "hsrp-Vl20-20" (default)
Vlan30 - Group 30
State is Active
2 state changes, last state change 00:06:54
Virtual IP address is 192.168.2.254
Active virtual MAC address is 0000.0c07.ac1e
Local virtual MAC address is 0000.0c07.ac1e (v1 default)
Hello time 3 sec, hold time 10 sec
Next hello sent in 2.372 secs
Authentication MD5, key-string "cisco"
Preemption enabled
Active router is local
Standby router is 192.168.2.2, priority 10 (expires in 8.684 sec)
Priority 20 (configured 20)
Track interface FastEthernet1/1 state Up decrement 10
IP redundancy name is "hsrp-Vl30-30" (default)
R3#
R4#show standby
Vlan20 - Group 20
State is Standby
1 state change, last state change 00:06:22
Virtual IP address is 10.1.1.6
Active virtual MAC address is 0000.0c07.ac14
Local virtual MAC address is 0000.0c07.ac14 (v1 default)
Hello time 3 sec, hold time 10 sec
Next hello sent in 1.740 secs
Authentication MD5, key-string "ciscocisco"
Preemption enabled
Active router is 10.1.1.3, priority 20 (expires in 7.792 sec)
Standby router is local
Priority 10 (configured 10)
IP redundancy name is "hsrp-Vl20-20" (default)
Vlan30 - Group 30
State is Standby
1 state change, last state change 00:06:21
Virtual IP address is 192.168.2.254
Active virtual MAC address is 0000.0c07.ac1e
Local virtual MAC address is 0000.0c07.ac1e (v1 default)
Hello time 3 sec, hold time 10 sec
Next hello sent in 2.084 secs
Authentication MD5, key-string "cisco"
Preemption enabled
Active router is 192.168.2.1, priority 20 (expires in 9.268 sec)
Standby router is local
Priority 10 (configured 10)
Track interface FastEthernet1/1 state Up decrement 10
IP redundancy name is "hsrp-Vl30-30" (default)
R4#
3.静态路由配置：
①R1、R2：
ip route 192.168.2.0 255.255.255.0 10.1.1.6
②R3、R4：
ip route 192.168.1.0 255.255.255.0 10.1.1.5
③测试
R1#ping 192.168.2.254 source 192.168.1.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.2.254, timeout is 2 seconds:
Packet sent with a source address of 192.168.1.1
.!!!!
Success rate is 80 percent (4/5), round-trip min/avg/max = 20/32/44 ms
R1#
R1#traceroute 192.168.2.254 source 192.168.1.1
Type escape sequence to abort.
Tracing the route to 192.168.2.254
1 10.1.1.3 56 msec * 40 msec
4.LINUX主机双网卡bonding配置：
参考：http://candon123.blog.51cto.com/704299/402677
①LINUX1：
A.编辑虚拟网卡band0的配置文件ifcfg-bond0,加入以下内容：
[root@Linux1~]# cat /etc/sysconfig/network-scripts/ifcfg-bond0
# Advanced Micro Devices [AMD] 79c970 [PCnet32 LANCE]
DEVICE=bond0
ONBOOT=yes
BOOTPROTO=none
IPADDR=192.168.1.8
BROADCAST=192.168.1.255
NETMASK=255.255.255.0
NETWORK=192.168.1.0
GATEWAY=192.168.1.254
USERCTL=no
B、编辑eth0和eth1网卡的配置文件
[root@Linux1 ~]# cat /etc/sysconfig/network-scripts/ifcfg-eth0
# Advanced Micro Devices [AMD] 79c970 [PCnet32 LANCE]
DEVICE=eth0
ONBOOT=yes
BOOTPROTO=none
HWADDR=00:0c:29:e4:65:78
TYPE=Ethernet
MASTER=bond0
SLAVE=yes
PEERDNS=yes
USERCTL=no
IPV6INIT=no
[root@Linux1 ~]# cat /etc/sysconfig/network-scripts/ifcfg-eth1
# Advanced Micro Devices [AMD] 79c970 [PCnet32 LANCE]
DEVICE=eth1
ONBOOT=yes
BOOTPROTO=none
HWADDR=00:0c:29:e4:65:82
TYPE=Ethernet
MASTER=bond0
SLAVE=yes
USERCTL=no
IPV6INIT=no
PEERDNS=yes
C、修改/etc/modprobe.conf 文件，加入以下内容：
alias bond0 bonding
options bond0 miimon=100 mode=1
注：
（1）、miimon 是链路监测的时间间隔单位是毫秒，miimon=100的意思就是，每100毫秒检测网卡和交换机之间是否连通，如不通则使用另外的链路。
（2）、mode=0 表示负载均衡方式，两块网卡都工作，需要交换机作支持。
mode=1 表示冗余方式，网卡只有一个工作，一个出问题启用另外的。
mode=6 表示负载均衡方式，两块网卡都工作，不需要交换机作支持。
D、重启网络：
# service network restart
E、查看bond0的工作状态：
[root@Linux1~]# more /proc/net/bonding/bond0
Ethernet Channel Bonding Driver: v2.6.3-rh (June 8, 2005)
Bonding Mode: fault-tolerance (active-backup)
Primary Slave: None
Currently Active Slave: eth0
MII Status: up
MII Polling Interval (ms): 100
Up Delay (ms): 0
Down Delay (ms): 0
Slave Interface: eth0
MII Status: up
Link Failure Count: 0
Permanent HW addr: 00:0c:29:e4:65:78
Slave Interface: eth1
MII Status: up
Link Failure Count: 0
Permanent HW addr: 00:0c:29:e4:65:82
F、查看绑定后的结果：
[root@Linux1~]# ifconfig -a
bond0 Link encap:Ethernet HWaddr 00:0C:29:E4:65:78
inet addr:192.168.1.8 Bcast:192.168.1.255 Mask:255.255.255.0
inet6 addr: fe80::20c:29ff:fee4:6578/64 Scope:Link
UP BROADCAST RUNNING MASTER MULTICAST MTU:1500 Metric:1
RX packets:874 errors:0 dropped:0 overruns:0 frame:0
TX packets:685 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:74567 (72.8 KiB) TX bytes:62797 (61.3 KiB)
eth0 Link encap:Ethernet HWaddr 00:0C:29:E4:65:78
UP BROADCAST RUNNING SLAVE MULTICAST MTU:1500 Metric:1
RX packets:805 errors:0 dropped:0 overruns:0 frame:0
TX packets:694 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:67571 (65.9 KiB) TX bytes:64199 (62.6 KiB)
Interrupt:185 Base address:0x2024
eth1 Link encap:Ethernet HWaddr 00:0C:29:E4:65:78
UP BROADCAST RUNNING SLAVE MULTICAST MTU:1500 Metric:1
RX packets:74 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:7296 (7.1 KiB) TX bytes:0 (0.0 b)
Interrupt:177 Base address:0x20a4
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:10 errors:0 dropped:0 overruns:0 frame:0
TX packets:10 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:760 (760.0 b) TX bytes:760 (760.0 b)
sit0 Link encap:IPv6-in-IPv4
NOARP MTU:1480 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)
[root@AMS ~]#
②LINUX2
A.编辑虚拟网卡band0的配置文件ifcfg-bond0,加入以下内容：
[root@Linux2 ~]# cat /etc/sysconfig/network-scripts/ifcfg-bond0
# Advanced Micro Devices [AMD] 79c970 [PCnet32 LANCE]
DEVICE=bond0
BOOTPROTO=none
ONBOOT=yes
NETMASK=255.255.255.0
IPADDR=192.168.2.8
BROADCAST=192.168.2.255
GATEWAY=192.168.2.254
NETWORK=192.168.2.0
USERCTL=no
B、编辑eth0和eth1网卡的配置文件
[root@Linux2 ~]# cat /etc/sysconfig/network-scripts/ifcfg-eth0
# Advanced Micro Devices [AMD] 79c970 [PCnet32 LANCE]
DEVICE=eth0
BOOTPROTO=none
ONBOOT=yes
HWADDR=00:0c:29:08:48:63
TYPE=Ethernet
USERCTL=no
MASTER=bond0
SLAVE=yes
[root@Linux2 ~]# cat /etc/sysconfig/network-scripts/ifcfg-eth1
# Advanced Micro Devices [AMD] 79c970 [PCnet32 LANCE]
DEVICE=eth1
BOOTPROTO=none
ONBOOT=yes
HWADDR=00:0c:29:08:48:6d
MASTER=bond0
SLAVE=yes
C、修改/etc/modprobe.conf 文件，加入以下内容：
alias bond0 bonding
options bond0 miimon=100 mode=1
D、重启网络：
# service network restart
E、查看bond0的工作状态：
[root@Linux2 ~]# more /proc/net/bonding/bond0
Ethernet Channel Bonding Driver: v3.4.0 (October 7, 2008)
Bonding Mode: fault-tolerance (active-backup)
Primary Slave: None
Currently Active Slave: eth0
MII Status: up
MII Polling Interval (ms): 100
Up Delay (ms): 0
Down Delay (ms): 0
Slave Interface: eth0
MII Status: up
Link Failure Count: 0
Permanent HW addr: 00:0c:29:08:48:63
Slave Interface: eth1
MII Status: up
Link Failure Count: 0
Permanent HW addr: 00:0c:29:08:48:6d
F、查看绑定后的结果：
Permanent HW addr: 00:0c:29:08:48:6d
[root@Linux2 ~]# ifconfig -a
bond0 Link encap:Ethernet HWaddr 00:0C:29:08:48:63
inet addr:192.168.2.8 Bcast:192.168.2.255 Mask:255.255.255.0
inet6 addr: fe80::20c:29ff:fe08:4863/64 Scope:Link
UP BROADCAST RUNNING MASTER MULTICAST MTU:1500 Metric:1
RX packets:233 errors:0 dropped:0 overruns:0 frame:0
TX packets:217 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:18827 (18.3 KiB) TX bytes:25194 (24.6 KiB)
eth0 Link encap:Ethernet HWaddr 00:0C:29:08:48:63
UP BROADCAST RUNNING SLAVE MULTICAST MTU:1500 Metric:1
RX packets:165 errors:0 dropped:0 overruns:0 frame:0
TX packets:226 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:14171 (13.8 KiB) TX bytes:26596 (25.9 KiB)
Interrupt:75 Base address:0x2000
eth1 Link encap:Ethernet HWaddr 00:0C:29:08:48:63
UP BROADCAST RUNNING SLAVE MULTICAST MTU:1500 Metric:1
RX packets:73 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:4956 (4.8 KiB) TX bytes:0 (0.0 b)
Interrupt:59 Base address:0x2080
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:104 errors:0 dropped:0 overruns:0 frame:0
TX packets:104 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:13740 (13.4 KiB) TX bytes:13740 (13.4 KiB)
sit0 Link encap:IPv6-in-IPv4
NOARP MTU:1480 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)
6.测试配置：
①正常状态
[root@Linux1 ~]# ping 192.168.2.8
PING 192.168.2.8 (192.168.2.8) 56(84) bytes of data.
64 bytes from 192.168.2.8: icmp_seq=1 ttl=62 time=55.1 ms
64 bytes from 192.168.2.8: icmp_seq=2 ttl=62 time=43.0 ms
--- 192.168.2.8 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1599ms
rtt min/avg/max/mdev = 43.047/49.103/55.160/6.060 ms
[root@Linux1 ~]# traceroute 192.168.2.8
traceroute to 192.168.2.8 (192.168.2.8), 30 hops max, 40 byte packets
1 (192.168.1.1) 176.939 ms 184.770 ms 194.904 ms
2 (10.1.1.3) 215.089 ms 226.090 ms 235.590 ms
3 (192.168.2.8) 246.020 ms 256.903 ms 270.429 ms
[root@Linux2 ~]# ping 192.168.1.8
PING 192.168.1.8 (192.168.1.8) 56(84) bytes of data.
64 bytes from 192.168.1.8: icmp_seq=0 ttl=62 time=41.0 ms
--- 192.168.1.8 ping statistics ---
2 packets transmitted, 1 received, 50% packet loss, time 1002ms
rtt min/avg/max/mdev = 41.081/41.081/41.081/0.000 ms, pipe 2
[root@Linux2 ~]# traceroute 192.168.1.8
traceroute to 192.168.1.8 (192.168.1.8), 30 hops max, 38 byte packets
1 192.168.2.1 (192.168.2.1) 17.759 ms 27.659 ms 11.916 ms
2 10.1.1.1 (10.1.1.1) 84.242 ms 46.798 ms 41.362 ms
3 192.168.1.8 (192.168.1.8) 65.179 ms 45.004 ms 46.726 ms
②删除R1和R3互联的线路，并且关闭接口，从日志中可以看出交换机主备发生了切换：
R1(config-if)#
*Mar 1 02:36:22.991: %HSRP-5-STATECHANGE: Vlan10 Grp 10 state Active -> Speak
R1(config-if)#int vlan 20
R1(config-if)#t
*Mar 1 02:36:32.987: %HSRP-5-STATECHANGE: Vlan10 Grp 10 state Speak -> Standby
R1(config-if)#
*Mar 1 02:37:34.891: %HSRP-5-STATECHANGE: Vlan30 Grp 30 state Active -> Speak
R1(config-if)#
*Mar 1 02:37:44.891: %HSRP-5-STATECHANGE: Vlan30 Grp 30 state Speak -> Standby
R1(config-if)#
R2#
*Mar 1 00:29:40.651: %HSRP-5-STATECHANGE: Vlan10 Grp 10 state Speak -> Standby
R2(config-if)#
*Mar 1 00:35:53.687: %HSRP-5-STATECHANGE: Vlan30 Grp 30 state Speak -> Standby
R2#
*Mar 1 02:33:53.935: %HSRP-5-STATECHANGE: Vlan10 Grp 10 state Standby -> Active
R2#
*Mar 1 02:35:05.835: %HSRP-5-STATECHANGE: Vlan30 Grp 30 state Standby -> Active
R2#
R3(config-if)#
*Mar 1 02:36:00.499: %HSRP-5-STATECHANGE: Vlan20 Grp 20 state Active -> Speak
R3(config-if)#int vlan 30
R3(config-if)#st
R3(config-if)#standby
*Mar 1 02:36:10.499: %HSRP-5-STATECHANGE: Vlan20 Grp 20 state Speak -> Standby
R3(config-if)#standby 30 t
R3(config-if)#standby 30 tr
R3(config-if)#standby 30 track f
R3(config-if)#standby 30 track fastEthernet 1/1 15
R3(config-if)#
*Mar 1 02:36:20.255: %HSRP-5-STATECHANGE: Vlan30 Grp 30 state Active -> Speak
R3(config-if)#
*Mar 1 02:36:30.255: %HSRP-5-STATECHANGE: Vlan30 Grp 30 state Speak -> Standby
R4#
*Mar 1 02:18:42.407: %HSRP-5-STATECHANGE: Vlan20 Grp 20 state Standby -> Active
R4#
*Mar 1 02:19:20.379: %HSRP-5-STATECHANGE: Vlan20 Grp 20 state Active -> Speak
R4#
*Mar 1 02:19:30.375: %HSRP-5-STATECHANGE: Vlan20 Grp 20 state Speak -> Standby
R4#
R4#
R4#
*Mar 1 02:34:16.159: %HSRP-5-STATECHANGE: Vlan20 Grp 20 state Standby -> Active
R4#
*Mar 1 02:34:35.899: %HSRP-5-STATECHANGE: Vlan30 Grp 30 state Standby -> Active
③再次traceroute，确认路径也发生了变化：
[root@Linux1 ~]# traceroute 192.168.2.8
traceroute to 192.168.2.8 (192.168.2.8), 30 hops max, 40 byte packets
1 (192.168.1.2) 196.404 ms 204.818 ms 213.794 ms
2 (10.1.1.4) 228.587 ms 272.285 ms 278.259 ms
3 (192.168.2.1) 251.404 ms (192.168.2.8) 305.621 ms 328.609 ms
[root@Linux1 ~]#
[root@Linux2 ~]# traceroute 192.168.1.8
traceroute to 192.168.1.8 (192.168.1.8), 30 hops max, 38 byte packets
1 192.168.2.2 (192.168.2.2) 64.399 ms 51.977 ms 10.650 ms
2 10.1.1.2 (10.1.1.2) 68.322 ms 42.056 ms 64.082 ms
3 192.168.1.1 (192.168.1.1) 69.768 ms 192.168.1.8 (192.168.1.8) 72.562 ms 61.597 ms
[root@Linux2 ~]#
本文转自 碧云天 51CTO博客，原文链接：http://blog.51cto.com/333234/938325，如需转载请自行联系原作者
