RBM透明双主部署典型配置

SW1

SW2

接口配置

vlan 101

#

vlan 102

#

interface Bridge-Aggregation16

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 101

 link-aggregation mode dynamic

#

interface Bridge-Aggregation26

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 102

 link-aggregation mode dynamic

#

interface Vlan-interface101

 ip address 10.101.68.1 255.255.255.0

 ospf network-type p2p

#

interface Vlan-interface102

 ip address 10.102.68.1 255.255.255.0

 ospf network-type p2p

#

vlan 101

#

vlan 102

#

interface Bridge-Aggregation16

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 101

 link-aggregation mode dynamic

#

interface Bridge-Aggregation26

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 102

 link-aggregation mode dynamic

#

interface Vlan-interface101

 ip address 10.101.68.2 255.255.255.0

 ospf network-type p2p

#

interface Vlan-interface102

 ip address 10.102.68.2 255.255.255.0

 ospf network-type p2p

#

ospf

#

interface LoopBack0

 ip address 68.1.1.1 255.255.255.255

#

ospf 1 router-id 68.1.1.1

 area 0.0.0.0

  network 10.101.68.0 0.0.0.255

  network 10.102.68.0 0.0.0.255

  network 68.1.1.1 0.0.0.0

#

#

interface LoopBack0

 ip address 68.1.1.2 255.255.255.255

#

ospf 1 router-id 68.1.1.2

 area 0.0.0.0

  network 10.101.68.0 0.0.0.255

  network 10.102.68.0 0.0.0.255

  network 68.1.1.2 0.0.0.0

#

FW1

FW2

接口、安全域、安全策略配置

#

interface Route-Aggregation64

 ip address 192.60.12.1 255.255.255.252

#

interface Bridge-Aggregation1

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 101

 link-aggregation mode dynamic

#

interface Bridge-Aggregation2

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 101

 link-aggregation mode dynamic

#

security-zone name Trust

 import interface Bridge-Aggregation1 vlan 101 to 102

 import interface Bridge-Aggregation2 vlan 101 to 102

#

security-policy ip

 rule 0 name any

  action pass

#

interface Route-Aggregation64

 ip address 192.60.12.1 255.255.255.252

#

interface Bridge-Aggregation1

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 102

 link-aggregation mode dynamic

#

interface Bridge-Aggregation2

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 102

 link-aggregation mode dynamic

#

security-zone name Trust

 import interface Bridge-Aggregation1 vlan 101 to 102

 import interface Bridge-Aggregation2 vlan 101 to 102

#

security-policy ip

 rule 0 name any

  action pass

RBM部分

#

remote-backup group

 backup-mode dual-active

 data-channel interface Route-Aggregation64

 configuration sync-check interval 1

 delay-time 5

 track interface GigabitEthernet1/0/2

 track interface GigabitEthernet1/0/4

 local-ip 192.60.12.1

 remote-ip 192.60.12.2

 device-role primary

#

undo bridge fast-forwarding check-vlan-id

#

remote-backup group

 backup-mode dual-active

 data-channel interface Route-Aggregation64

 configuration sync-check interval 1

 delay-time 5

 track interface GigabitEthernet1/0/2

 track interface GigabitEthernet1/0/4

 local-ip 192.60.12.2

 remote-ip 192.60.12.1

 device-role secondary

#

undo bridge fast-forwarding check-vlan-id