Isebenza kanjani iphrothokholi ye-VRRP

I-FHRP (First Hop Redundancy Protocol) iwumndeni wamaphrothokholi aklanyelwe ukuhlinzeka ngokuphindaphinda kwesango elizenzakalelayo. Umqondo ojwayelekile wale migomo uwukuhlanganisa amarutha amaningana abe umzila owodwa obonakalayo onekheli le-IP elivamile. Leli kheli lasesizindeni se-inthanethi lizonikezwa abasingathi njengekheli lesango elizenzakalelayo. Ukuqaliswa kwamahhala kwalo mbono yi-VRRP (I-Virtual Router Redundancy Protocol). Kulesi sihloko sizobheka izisekelo zephrothokholi ye-VRRP.

Amarutha e-VRRP ahlanganiswe abe irutha eyodwa ebonakalayo. Wonke amarutha eqenjini anekheli elivamile le-virtual IP (VIP) kanye nenombolo yeqembu evamile noma i-VRID (Isihlonzi Somzila Obonakalayo). Irutha eyodwa ingaba yilungu lamaqembu amaningana, ngalinye okufanele libe nepheya yalo ehlukile ye-VIP/VRID.

Endabeni ye-Cisco, i-router ebonakalayo isethwe ku-interface esiyithandayo ngomyalo:

R1(config-if)# vrrp <group-number> ip <ip-address>

Wonke amarutha ahlukaniswe abe izinhlobo ezimbili: I-VRRP Master kanye ne-VRRP Backup.

I-VRRP Master iyirutha edlulisela phambili amaphakethe eqembu elibonakalayo elinikeziwe.

Isipele se-VRRP iyirutha elindele iphakethe ku-Master. Uma amaphakethe asuka ku-Master eyeka ukufika, Isipele sizama ukudlulela ku-Master state.

Irutha iba Master uma inokubaluleka okuphezulu kakhulu. I-Master ngokuqhubekayo ithumela imilayezo ekhelini lokusakaza elithi 224.0.0.18 ukuze itshele amarutha eSipele ukuthi kuyasebenza. I-Master ithumela imiyalezo ngokweSibali-sikhathi Sokukhangisa, esilingana nomzuzwana owodwa ngokuzenzakalelayo.

Kulokhu, ikheli leqembu 00:00:5E:00:01:xx lisetshenziswa njengekheli le-MAC lomthumeli, lapho i-xx iyi-VRID ngefomethi ye-hexadecimal. Lesi sibonelo sisebenzisa iqembu lokuqala.

Uma ama-backup routers engayitholi imilayezo phakathi Nezibali-sikhathi ze-Adver ezintathu (Izibali-sikhathi Esiyinhloko), khona-ke irutha enokubaluleka okuphezulu kakhulu noma irutha ene-IP ephezulu iba Umphathi omusha. Kulokhu, irutha Yokwenza Ikhophi yasenqolobaneni ebaluleke kakhulu izothatha indima Eyinhloko ngokuza kuqala okuphansi. Kodwa-ke, lapho imodi yokulungiselela ye-Backup's preempt ikhutshaziwe, Ukwenza Ikhophi Yasenqolobaneni ngeke kuthathe indima evela ku-Master.

R1(config-if)# no vrrp <group-number> preempt

Uma irutha ye-VRRP ingumnikazi wekheli le-VIP, ngakho-ke ihlala ithatha indima Eyinhloko.

Okubalulekile kwe-VRRP kusethwe ngamavelu asuka ku-1 kuye ku-254. Inani 0 ligcinelwe izimo lapho i-Master idingeka susa thatha isibopho sokuthatha umzila. Inani 255 libekwe kumzila ongumnikazi we-VIP. Okubalulekile okuzenzakalelayo kungu-100, kodwa kungasethwa ngokokulawula:

R1(config-if)#vrrp <group-number> priority <priority 1-254>

Lapha singabona ukubaluleka kwerutha uma isethwe ngokokuphatha:

Futhi nali icala lapho i-router ingumnikazi we-VIP:

Irutha ye-VRRP ingaba nezimo ezintathu: Qalisa, Yenza Ikhophi Yasenqolobaneni, Inkosi. I-router ishintsha lezi zifunda ngokulandelana.

Esimeni Sokuqalisa, irutha ilinde ukuqalisa ukusebenza. Uma le router ingumnikazi wekheli le-VIP (okubalulekile ngu-255), khona-ke i-router ithumela imilayezo ebonisa ukuthi isiyi-Master. Naye uyathumela isicelo samahhala se-ARP, lapho ikheli le-MAC eliwumthombo lilingana nekheli lerutha ebonakalayo. Bese ingena ku-Master state. Uma i-router ingeyena umnikazi we-VIP, bese ingena kusimo se-Backup.

Esimeni Sokwenza Ikhophi Yasenqolobaneni, umzila ulinda amaphakethe avela ku-Master. Irutha ekulesi simo ayiphenduli kuzicelo ze-ARP ezivela ekhelini le-VIP. Futhi ayiwamukeli amaphakethe anekheli le-MAC lerutha elibonakalayo njengekheli lawo okuyiwa kuwo.

Uma i-Backup ingawutholi umlayezo ovela ku-Master ngesikhathi se-Master Down Timer, bese ithumela umlayezo we-VRRP obonisa ukuthi isizoba Inkosi. Bese ithumela umlayezo wokusakaza we-VRRP lapho ikheli lomthombo le-MAC lilingana nekheli lale router ebonakalayo. Kulo mlayezo, i-router ibonisa ukubaluleka kwayo.

Esimweni Esiyinhloko, irutha icubungula amaphakethe aqondiswe kumzila obonakalayo. Iphinde iphendule izicelo ze-ARP ku-VIP. I-Master ithumela imilayezo ye-VRRP ngaso sonke isikhathi Isibali-sikhathi Somkhangisi ukuze siqinisekise ukuthi siyasebenza.

*May 13 19:52:18.531: %VRRP-6-STATECHANGE: Et1/0 Grp 1 state Init -> Backup
*May 13 19:52:21.751: %VRRP-6-STATECHANGE: Et1/0 Grp 1 state Backup -> Master

I-VRRP iphinde ivumele ukulinganisa komthwalo kuwo wonke amarutha amaningi. Ukwenza lokhu, amaqembu amabili e-VRRP adalwa esibonakalayo esisodwa. Iqembu elilodwa labelwa ukubaluleka okuphezulu kunelinye. Kulokhu, ku-router yesibili okubalulekile kusethwe ngendlela ehlukile. Labo. uma ku-router eyodwa ukubaluleka kweqembu lokuqala kungu-100, futhi iqembu lesibili lingu-200, khona-ke kwenye i-router okubaluleke kakhulu kweqembu lokuqala kuzoba ngu-200, kanti okwesibili 100.

Njengoba kushiwo ngaphambili, iqembu ngalinye kufanele libe ne-VIP yalo ehlukile. Ngenxa yalokho, sithola amakheli amabili e-IP anikezwa amarutha amabili, ngalinye elingasebenza njengesango elizenzakalelayo.

Ingxenye yamakhompuyutha inikezwe ikheli elilodwa lesango elizenzakalelayo, enye ingxenye. Ngakho-ke, ingxenye yethrafikhi izodlula kumzila owodwa, futhi ingxenye idlule kwenye. Uma omunye wama-routers ehluleka, owesibili uthatha umsebenzi wawo womabili ama-VIP.

Ngakho, i-VRRP ikuvumela ukuthi uhlele ukubekezelelana kwephutha kwesango elizenzakalelayo, okwandisa ukuthembeka kwenethiwekhi. Futhi uma usebenzisa ama-router amaningana abonakalayo, ungakwazi futhi ukulinganisa umthwalo phakathi kwamarutha wangempela. Isivinini sokuphendula ngokuhluleka singancishiswa ngokunciphisa izibali sikhathi.

Source: www.habr.com