STP HSRP NAT和SLA实验配置及说明.pdfVIP

此文档为原创，如需转发，请注明来源。 注：以下实验在 GNS3 0.8.6 版本中完成，IOS （c3640-ik9o3s-mz.124-25c ） C R1 Interface Loopback0 Ip address 1.1.1.1 255.255.255.255 Interface FastEthernet0/0 Ip address 12.1.1.1 255.255.255.0 Interface FastEthernet1/0 Ip address 13.1.1.1 255.255.255.0 R2 Ip sla monitor 100 Type echo protocol ipIcmpEcho 1.1.1.1 source-interface FastEthernet0/0 Frequency 5 Ip Sla monitor schedule 100 life forever start-time nowtrack 100 rtr 100 reachability Interface FastEthernet0/0 Ip address 12.1.1.2 255.255.255.0 注：监视去往1.1.1.1 的路由 Track 100 rtr 100 reachability //Track 关联SLA Spanning-tree vlan 100 priority 8192 //VLAN 100 为主根桥 Spanning-tree vlan 200 priority 16384 //VLAN 200 为备份根桥 Interface FastEthernet0/0 Ip address 12.1.1.2 255.255.255.0 Ip Nat outside Interface FastEthernet1/0 Switchport mode trunk ! Interface FastEthernet1/1 Switchport mode trunk ! Interface Vlan100 Ip address 10.1.1.253 255.255.255.0 Ip Nat inside Standby 100 ip 10.1.1.254 // PC 的网关 Standby 100 priority 120 // Standby 100 的Active Standby 100 preempt // Standby 100 的抢占 Standby 100 track FastEthernet1/0 30 //关联Fa0/0 Down 了并惩罚30 Standby 100 track 100 decrement 30 //关联Track 100 Down 了并惩罚30 ! Interface Vlan200 Ip address 20.1.1.252 255.255.255.0 Ip Nat inside Ip virtual-reassembly Standby 200 ip 20.1.1.254 Standby 200 preempt ! Ip route 0.0.0.0 0.0.0.0 12.1.1.1 ! Ip Nat inside source list 100 interface FastEthernet0/0 overload Ip Nat inside source list 101 interface FastEthernet0/0 overload ! Access-list 100 permit ip 10.1.1.0 0.0.0.255 any Access-list 101 permit ip 20.1.1.0 0.0.0.255 any 实验说明： 如下图，R2 Fa0/0 和Fa1/0 正常状态，VLAN100 为Active 如下图，如R2 Fa0/0 和Fa1/0 Down 了，VLAN100 为Standby R3# Ip Sla monitor 200 Type echo protocol ipIcmpEcho 1.1.1.1 source-interface FastEthernet0/0 Frequency 5 Ip Sla monitor schedule 200 life forever start-ti