VRRP con Tracking

Tarea 1

• Formar conectividad entre sitios utilizando enrutamiento estático.
• R1 debe crear la puerta de enlace (Gateway) 172.16.1.100.
• R6 debe crear la puerta de enlace (Gateway) 172.16.2.100.

Sitio1

R1

ip route 0.0.0.0 0.0.0.0 172.16.1.100 1

R2

ip route 200.0.0.1 255.255.255.255 172.16.1.1

ip route 172.16.2.0 255.255.255.0 10.1.24.4

R3

ip route 200.0.0.1 255.255.255.255 172.16.1.1

ip route 172.16.2.0 255.255.255.0 10.1.35.5

Sitio2

R6

ip route 0.0.0.0 0.0.0.0 172.16.2.100

R4

ip route 200.0.0.6 255.255.255.255 172.16.2.6

ip route 172.16.1.0 255.255.255.0 10.1.24.2

R5

ip route 200.0.0.6 255.255.255.255 172.16.2.6

ip route 172.16.1.0 255.255.255.0 10.1.35.3

R2#sh ip route static

200.0.0.0/32 is subnetted, 1 subnets

S 200.0.0.1 [1/0] via 172.16.1.1

172.16.0.0/24 is subnetted, 2 subnets

S 172.16.2.0 [1/0] via 10.1.24.4

R2#ping 172.16.2.0

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 172.16.2.0, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 16/44/80 ms

R3#sh ip route static

200.0.0.0/32 is subnetted, 1 subnets

S 200.0.0.1 [1/0] via 172.16.1.1

172.16.0.0/24 is subnetted, 2 subnets

S 172.16.2.0 [1/0] via 10.1.35.5

R3#ping 172.16.2.0

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 172.16.2.0, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 16/41/60 ms

Tarea 2

• Configurar R2 como Master VRRP y R3 Backup para la ip address 172.16.1.100
• Configurar R2 como Master VRRP y R3 Backup para la ip address 172.16.2.100

R2

interface FastEthernet0/0

vrrp 10 ip 172.16.1.100

vrrp 10 priority 150

vrrp 10 preempt

R3

interface FastEthernet0/0

vrrp 10 ip 172.16.1.100

vrrp 10 priority 100

vrrp 10 preempt

R2#show vrrp

FastEthernet0/0 - Group 10

State is Master

Virtual IP address is 172.16.1.100

Virtual MAC address is 0000.5e00.010a

Advertisement interval is 1.000 sec

Preemption enabled

Priority is 150

Master Router is 172.16.1.2 (local), priority is 150

Master Advertisement interval is 1.000 sec

Master Down interval is 3.414 sec

R3#show vrrp

FastEthernet0/0 - Group 10

State is Backup

Virtual IP address is 172.16.1.100

Virtual MAC address is 0000.5e00.010a

Advertisement interval is 1.000 sec

Preemption enabled

Priority is 100

Master Router is 172.16.1.2, priority is 150

Master Advertisement interval is 1.000 sec

Master Down interval is 3.609 sec (expires in 3.253 sec)

R4

interface FastEthernet0/0

vrrp 10 ip 172.16.2.100

vrrp 10 priority 150

vrrp 10 preempt

R5

interface FastEthernet0/0

vrrp 10 ip 172.16.2.100

vrrp 10 priority 100

vrrp 10 preempt

R4#show vrrp

FastEthernet0/0 - Group 10

State is Master

Virtual IP address is 172.16.2.100

Virtual MAC address is 0000.5e00.010a

Advertisement interval is 1.000 sec

Preemption enabled

Priority is 150

Master Router is 172.16.2.4 (local), priority is 150

Master Advertisement interval is 1.000 sec

Master Down interval is 3.414 sec

R5#show vrrp

FastEthernet0/0 - Group 10

State is Backup

Virtual IP address is 172.16.2.100

Virtual MAC address is 0000.5e00.010a

Advertisement interval is 1.000 sec

Preemption enabled

Priority is 100

Master Router is 172.16.2.4, priority is 150

Master Advertisement interval is 1.000 sec

Master Down interval is 3.609 sec (expires in 3.545 sec)

R1#ping 172.16.1.100

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 172.16.1.100, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 20/46/80 ms

R2 es el Master VRRP por tanto es el GW de salida para alcanzar a R6.

R1#traceroute 172.16.2.6

Type escape sequence to abort.

Tracing the route to 172.16.2.6

1 172.16.1.2 128 msec 64 msec 28 msec

2 10.1.24.4 72 msec 60 msec 52 msec

3 172.16.2.6 108 msec * 116 msec

Tarea 3
Un router de respaldo debe tomar el rol activo si:

• El enlace HDLC en el router activo no presenta señal de línea (L2)
• El router activo deja de funcionar.

Esta tarea requiere utilizar el comando track para determinar el estado de la interface serial. Considerar que el valor de decremento de VRRP para el track es de 10, este valor no es suficiente para que el router Backup asuma el papel de Master. Lo modificamos a 60 en R2 y R4.

R2

track 10 interface Serial1/0 line-protocol

carrier-delay

interface FastEthernet0/0

vrrp 10 track 10 decrement 60

R3

track 10 interface Serial1/0 line-protocol

carrier-delay

interface FastEthernet0/0

vrrp 10 track 10

R4

track 10 interface Serial1/0 line-protocol

carrier-delay

interface FastEthernet0/0

vrrp 10 track 10 decrement 60

R5

track 10 interface Serial1/0 line-protocol

carrier-delay

interface FastEthernet0/0

vrrp 10 track 10

Verificación:

R2(config)#interface serial 1/0

R2(config-if)#shutdown

R2(config-if)#

%LINK-5-CHANGED: Interface Serial1/0, changed state to administratively down

%ENTITY_ALARM-6-INFO: ASSERT INFO Se1/0 Physical Port Administrative State Down

R2(config-if)#

%TRACKING-5-STATE: 10 interface Se1/0 line-protocol Up->Down

%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial1/0, changed state to down

R2(config-if)#

%VRRP-6-STATECHANGE: Fa0/0 Grp 10 state Master -> Backup

R2#show vrrp

FastEthernet0/0 - Group 10

State is Backup

Virtual IP address is 172.16.1.100

Virtual MAC address is 0000.5e00.010a

Advertisement interval is 1.000 sec

Preemption enabled

Priority is 90 (cfgd 150)

Track object 10 state Down decrement 60

Master Router is 172.16.1.3, priority is 100

Master Advertisement interval is 1.000 sec

Master Down interval is 3.414 sec (expires in 2.918 sec)

R3#show vrrp

FastEthernet0/0 - Group 10

State is Master

Virtual IP address is 172.16.1.100

Virtual MAC address is 0000.5e00.010a

Advertisement interval is 1.000 sec

Preemption enabled

Priority is 100

Track object 10 state Up decrement 10

Master Router is 172.16.1.3 (local), priority is 100

Master Advertisement interval is 1.000 sec

Master Down interval is 3.609 sec

Los routers R2 y R4 bajan su prioridad al no detectar señal , por tanto el camino (path) que sigue R1 para alcanzar a R6 es ahora a través del enlace R3/R5.
Tanto R2 como R4 ahora son Backup. Notar que el decremento de las prioridades en ambos es de 90. Como R3 y R5 tienen la prioridad por defecto 100 son ahora routers VRRP Masters.

R1#traceroute 172.16.2.6

Type escape sequence to abort.

Tracing the route to 172.16.2.6

1 172.16.1.3 68 msec 60 msec 40 msec

2 10.1.35.5 84 msec 40 msec 60 msec

3 172.16.2.6 124 msec * 104 msec

Tarea 4 (Load Sharing)

• Borrar configuración VRRP anterior y subir interface serial de R2.

En R2/R3/R4/R5
(config-if)#no vrrp 10

R2(config-if)#int s1/0
R2(config-if)#no shutdown

• Configurar R2 como Master VRRP y R3 Backup para la dirección IP 172.16.1.100.
• Configurar R2 como Backup VRRP y R3 Master para la dirección IP 172.16.1.101.
• Configurar R4 como Master VRRP y R5 Backup para la dirección IP 172.16.2.100.
• Configurar R4 como Backup VRRP y R5 Master para la dirección IP 172.16.2.101.

R1 y R6 deben tener dos rutas estaticas con igual distancia administrativa (AD 69)para que exista balance de carga.

R1

ip route 0.0.0.0 0.0.0.0 172.16.1.101 69

ip route 0.0.0.0 0.0.0.0 172.16.1.100 69

R1#sh ip route static

S* 0.0.0.0/0 [69/0] via 172.16.1.101

[69/0] via 172.16.1.100

R6

ip route 0.0.0.0 0.0.0.0 172.16.2.101 69

ip route 0.0.0.0 0.0.0.0 172.16.2.100 69

R6#sh ip route static

S* 0.0.0.0/0 [69/0] via 172.16.2.101

[69/0] via 172.16.2.100

Para lograr que la carga se comparta entre los dos puntos de salida, debemos crear dos procesos en VRRP. Un router actúa para un proceso como Master y para el otro como Backup.

R2

interface FastEthernet0/0

vrrp 10 ip 172.16.1.100

vrrp 10 priority 200

vrrp 20 ip 172.16.1.101

no vrrp 20 preempt

R3

interface FastEthernet0/0

vrrp 10 ip 172.16.1.100

no vrrp 10 preempt

vrrp 20 ip 172.16.1.101

vrrp 20 priority 200

R2#show vrrp brief

Interface Grp Pri Time Own Pre State Master addr Group addr

Fa0/0 10 200 3218 Y Master 172.16.1.2 172.16.1.100

Fa0/0 20 100 3609 Backup 172.16.1.3 172.16.1.101

R3#show vrrp brief

Interface Grp Pri Time Own Pre State Master addr Group addr

Fa0/0 10 100 3609 Backup 172.16.1.2 172.16.1.100

Fa0/0 20 200 3218 Y Master 172.16.1.3 172.16.1.101

R4

interface FastEthernet0/0

vrrp 10 ip 172.16.2.100

vrrp 10 priority 200

vrrp 20 ip 172.16.2.101

no vrrp 20 preempt

R5

interface FastEthernet0/0

vrrp 10 ip 172.16.2.100

no vrrp 10 preempt

vrrp 20 ip 172.16.2.101

vrrp 20 priority 200

R4#show vrrp brief

Interface Grp Pri Time Own Pre State Master addr Group addr

Fa0/0 10 200 3218 Y Master 172.16.2.4 172.16.2.100

Fa0/0 20 100 3609 Backup 172.16.2.5 172.16.2.101

R5#show vrrp brief

Interface Grp Pri Time Own Pre State Master addr Group addr

Fa0/0 10 100 3609 Backup 172.16.2.4 172.16.2.100

Fa0/0 20 200 3218 Y Master 172.16.2.5 172.16.2.101

Verificamos que el trafico fluya a través de ambos routers R2/R3 en Sitio1

R1#traceroute 172.16.2.6

Type escape sequence to abort.

Tracing the route to 172.16.2.6

1 172.16.1.3 120 msec

172.16.1.2 60 msec

172.16.1.3 44 msec

2 10.1.24.4 44 msec

10.1.35.5 48 msec

10.1.24.4 44 msec

3 172.16.2.6 168 msec * 176 msec

Verificamos que el trafico fluya a través de ambos routers R4/R5 en Sitio2

R6#traceroute 172.16.1.1

Type escape sequence to abort.

Tracing the route to 172.16.1.1

1 172.16.2.4 64 msec

172.16.2.5 108 msec

172.16.2.4 44 msec

2 10.1.35.3 56 msec

10.1.24.2 88 msec

10.1.35.3 68 msec

3 172.16.1.1 180 msec * 128 msec