返回列表 回复 发帖

华为4640和思科3660做vrrp的问题?

网络结构是:4640和3660分别通过2M线路接入MPLS专网。
4640的e0/0/0口和3660的f0/0口接在一台华为3026-1上(有vlan50和vlan70应用);
4640的e2/0/0口和3660的f0/1口接在另外一台华为3026-2上(有vlan30、vlan40、vlan41、vlan60应用);
两台路由起了vrrp热备后,发现只有在3026-2上的vlan,vrrp状态能正常转换。而3026-1上的vlan50和70,状态不能正常转换。
具体情况是:当4640的e0/0/0口和e2/0/0口都down掉后,提示信息:e2/0/0口上的vlan30、vlan40、vlan41、 vlan60状态从master变为backup;而e0/0/0口上的vlan50和70状态从master变为Initia。
在3660上f0/1口上的vlan30、vlan40、vlan41、vlan60状态从backup变为master;而f0/0口上的vlan50和70状态始终是Initia。
哪位大侠能帮忙分析一下!
附配置:
4640配置
[r-Ar4640-1.SYF]dis cu
#
sysname r-Ar4640-1.SYF
#
FTP server enable
#
l2tp domain suffix-separator @
#
info-center loghost 10.41.254.253 facility local0
#
router id 10.41.215.232
#
firewall enable
#
mpls lsr-id 10.41.215.232
#
radius scheme system
#
mpls
lsp-trigger all
#
mpls ldp
#
ip vpn-instance vpn-nrt
route-distinguisher 30041:3702
vpn-target 30041:2 export-extcommunity
vpn-target 30041:3702 export-extcommunity
vpn-target 30041:2002 import-extcommunity
vpn-target 30041:3702 import-extcommunity
#
ip vpn-instance vpn-rt
route-distinguisher 30041:3701
vpn-target 30041:1 export-extcommunity
vpn-target 30041:3701 export-extcommunity
vpn-target 30041:2001 import-extcommunity
vpn-target 30041:3701 import-extcommunity
#
domain system
#
traffic classifier class_vpn_rt_ems operator or
if-match mpls-exp 4 6 7
#
traffic behavior behavior_vpn_rt_ems
#
qos policy policy_vpn_rt
classifier class_vpn_rt_ems behavior behavior_vpn_rt_ems
#
interface Aux0
async mode flow
#
interface Ethernet0/0/0
#
interface Ethernet0/0/0.50
description 50 virtual-ip 10.41.124.65
ip binding vpn-instance vpn-rt
ip address 10.41.124.66 255.255.255.248
vrrp vrid 50 virtual-ip 10.41.124.65
vrrp vrid 50 priorty 150
vlan-type dot1q vid 50
#
interface Ethernet0/0/0.70
description 70 virtual-ip 10.41.124.81
ip binding vpn-instance vpn-rt
ip address 10.41.124.82 255.255.255.248
vrrp vrid 70 virtual-ip 10.41.124.81
vrrp vrid 70 priorty 150
vlan-type dot1q vid 70
#
interface Ethernet0/0/0.100
description Connect-s-S-3026C-1
shutdown
ip binding vpn-instance vpn-rt
ip address 10.41.233.82 255.255.255.248
vrrp vrid 100 virtual-ip 10.41.233.81
vlan-type dot1q vid 100
#
#
interface Ethernet0/0/1
shutdown
#
interface Ethernet2/0/0
#
interface Ethernet2/0/0.30
description 30 virtual-ip 10.41.124.73
ip binding vpn-instance vpn-nrt
ip address 10.41.124.74 255.255.255.248
vrrp vrid 30 virtual-ip 10.41.124.73
vrrp vrid 30 priorty 150
vlan-type dot1q vid 30
#
interface Ethernet2/0/0.40
description 40 virtual-ip 10.41.124.1
ip binding vpn-instance vpn-nrt
ip address 10.41.124.2 255.255.255.224
vrrp vrid 40 virtual-ip 10.41.124.1
vrrp vrid 40 priorty 150
vlan-type dot1q vid 40
#
interface Ethernet2/0/0.41
description 41 virtual-ip 10.41.124.33
ip binding vpn-instance vpn-nrt
ip address 10.41.124.34 255.255.255.224
vrrp vrid 41 virtual-ip 10.41.124.33
vrrp vrid 41 priorty 150
vlan-type dot1q vid 41
#
interface Ethernet2/0/0.60
description 60 virtual-ip 10.41.124.89
ip binding vpn-instance vpn-nrt
ip address 10.41.124.90 255.255.255.248
vrrp vrid 60 virtual-ip 10.41.124.89
vrrp vrid 60 priorty 150
vlan-type dot1q vid 60
#
interface Ethernet2/0/0.101
description Connect-s-S-3026C-2
shutdown
ip address 10.41.233.90 255.255.255.248
vrrp vrid 2 virtual-ip 10.41.233.89
vlan-type dot1q vid 101
#
interface Ethernet2/0/1
shutdown
#
interface Serial1/0/0
link-protocol ppp
fe1 timeslot-list 1-31
description Connect
ip address 10.41.233.74 255.255.255.252
mpls
mpls ldp enable
mpls ldp transport-ip interface
#
interface NULL0
#
interface Logic-Channel0
#
interface LoopBack0
ip address 10.41.215.232 255.255.255.255
ospf cost 1
#
bgp 30041
undo synchronization
group DD internal
peer DD connect-interface LoopBack0
peer 10.41.215.254 group DD
#
ipv4-family vpn-instance vpn-rt
import-route direct
import-route static
undo synchronization
#
ipv4-family vpn-instance vpn-nrt
import-route direct
import-route static
undo synchronization
#
ipv4-family vpnv4
peer DD enable
peer 10.41.215.254 group DD
#
ospf 1
area 0.0.0.4
network 10.41.215.232 0.0.0.0
network 10.41.233.72 0.0.0.3
network 10.41.233.80 0.0.0.7
network 10.41.233.88 0.0.0.7
#
ntp-service source-interface LoopBack0
ntp-service unicast-server 10.41.215.254
#
user-interface con 0
user-interface aux 0
user-interface vty 0 4

#
return

3660配置
Building configuration...

Current configuration : 4591 bytes
!
version 12.3
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname r-3662-1.SYF
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
ip subnet-zero
!
!
ip cef
no ip domain lookup
ip vrf vpn-nrt
rd 30041:3702
route-target export 30041:3702
route-target export 30041:2
route-target import 30041:3702
route-target import 30041:2002
!
ip vrf vpn-rt
rd 30041:3701
route-target export 30041:3701
route-target export 30041:1
route-target import 30041:3701
route-target import 30041:2001
!
mpls label range 16 204799
mpls label protocol ldp
tag-switching tdp router-id Loopback0
no ftp-server write-enable
!
!
controller E1 1/0
framing NO-CRC4
channel-group 0 timeslots 1-31
!
class-map match-any class_vpn_rt_ems
match mpls experimental topmost 4 6 7
match input-interface FastEthernet0/0
match access-group 50
!
!
policy-map policy_vpn_rt
class class_vpn_rt_ems
bandwidth percent 20
!
!
!
interface Loopback0
ip address 10.41.215.231 255.255.255.255
ip ospf cost 1
!
interface FastEthernet0/0
no ip address
duplex auto
speed auto
!
interface FastEthernet0/0.50
description rtu
encapsulation dot1Q 50
ip vrf forwarding vpn-rt
ip address 10.41.124.67 255.255.255.248
no snmp trap link-status
vrrp 50 ip 10.41.124.65
vrrp 50 priority 120
!
interface FastEthernet0/0.70
description gongjiao
encapsulation dot1Q 70
ip vrf forwarding vpn-rt
ip address 10.41.124.83 255.255.255.248
no snmp trap link-status
vrrp 70 ip 10.41.124.81
vrrp 70 priority 120
!
interface FastEthernet0/0.100
encapsulation dot1Q 100
ip vrf forwarding vpn-nrt
ip address 10.41.233.83 255.255.255.248
ip ospf cost 1
shutdown
no snmp trap link-status
vrrp 1 ip 10.41.233.81
vrrp 1 priority 120
!
interface FastEthernet0/1
no ip address
duplex auto
speed auto
!
interface FastEthernet0/1.30
description dianliangjifei
encapsulation dot1Q 30
ip vrf forwarding vpn-nrt
ip address 10.41.124.75 255.255.255.248
no snmp trap link-status
vrrp 30 ip 10.41.124.73
vrrp 30 priority 120
!
interface FastEthernet0/1.40
description dianlishichang
encapsulation dot1Q 40
ip vrf forwarding vpn-nrt
ip address 10.41.124.3 255.255.255.224
no snmp trap link-status
vrrp 40 ip 10.41.124.1
vrrp 40 priority 120
!
interface FastEthernet0/1.41
description dianlishichang1
encapsulation dot1Q 41
ip vrf forwarding vpn-nrt
ip address 10.41.124.35 255.255.255.224
no snmp trap link-status
vrrp 41 ip 10.41.124.33
vrrp 41 priority 120
!
interface FastEthernet0/1.60
description baohu
encapsulation dot1Q 60
ip vrf forwarding vpn-nrt
ip address 10.41.124.91 255.255.255.248
no snmp trap link-status
vrrp 60 ip 10.41.124.89
vrrp 60 priority 120
!
interface FastEthernet0/1.101
description xhf-s2
encapsulation dot1Q 101
ip vrf forwarding vpn-nrt
ip address 10.41.233.91 255.255.255.248
ip ospf cost 1
shutdown
no snmp trap link-status
vrrp 2 ip 10.41.233.89
vrrp 2 priority 120
!1
interface Serial1/0:0
description Connect
ip address 10.41.233.78 255.255.255.252
encapsulation ppp
ip ospf cost 50
mpls ldp discovery transport-address interface
tag-switching ip
!
interface BRI2/0
no ip address
shutdown
!
interface BRI2/1
no ip address
shutdown
!
interface BRI2/2
no ip address
shutdown
!
interface BRI2/3
no ip address
shutdown
!
interface Async225
no ip address
!
router ospf 1
log-adjacency-changes
network 10.41.215.231 0.0.0.0 area 4
network 10.41.233.76 0.0.0.3 area 4
network 10.41.233.80 0.0.0.7 area 4
network 10.41.233.88 0.0.0.7 area 4
!
router bgp 30041
no synchronization
bgp log-neighbor-changes
neighbor 10.41.215.254 remote-as 30041
neighbor 10.41.215.254 update-source Loopback0
no auto-summary
!
address-family vpnv4
neighbor 10.41.215.254 activate
neighbor 10.41.215.254 send-community extended
exit-address-family
!
address-family ipv4 vrf vpn-rt
redistribute connected
redistribute static
no auto-summary
no synchronization
exit-address-family
!
address-family ipv4 vrf vpn-nrt
redistribute connected
redistribute static
no auto-summary
no synchronization
exit-address-family
!
no ip http server
ip classless
!
!
logging facility local0
logging 10.41.254.253
access-list 40 deny 10.41.124.32 0.0.0.31
access-list 40 permit any
access-list 50 deny any
access-list 140 deny ip 10.41.124.32 0.0.0.31 any
access-list 140 permit ip any any
!
!
line con 0
transport preferred all
transport output all
line aux 0
modem InOut
transport preferred all
transport input all
transport output all
speed 38400
flowcontrol hardware
line vty 0 4
!
ntp clock-period 17180869
ntp source Loopback0
ntp server 10.41.215.254
end



网友:

我也遇到过相同的问题。是华为和北电的设备。而将cisco与北电做就没有。


网友2:

升级IOS我遇过这样的问题
最后升级后就解决了

网友3:


你的描述看不明白当4640的e0/0/0口和e2/0/0口都down掉后,提示信息:e2/0/0口上的vlan30、vlan40、vlan41、vlan60状态从master变为backup;而e0/0/0口上的vlan50和70状态从master变为Initia。

down 掉了怎么还能变为BACKK呢
返回列表