WX3510X在WX3500X-CMW910-R1608P01版本中支持VRRP,可用于实现主备网关的高可用性,但不支持“双活” 模式,且配置与使用上有重要限制。
R1608P01版本作为基于Comware V9平台的最新软件,是支持VRRP的。
VRRP功能定位:VRRP主要用于实现网关的1+1快速热备。其核心作用是当主用设备(Master)故障时,备用设备(Backup)能快速接管,保证网络不中断。VRRP配置通常在VLAN接口上执行。
核心限制:不能用于管理VLAN。在WX3510X上使用VRRP时,用于AP管理的网段(VLAN)不建议再配置VRRP备份,因为其机制上存在冲突。管理VLAN应作为纯二层网络部署,通过其他方式保证高可用。
VRRP标准模式不支持双活(负载均衡)。
VRRP标准模式:VRRP采用主备模式,同一时间只有主用设备转发流量,备用设备处于待命状态,资源存在闲置。
替代方案:如需实现流量负载分担,可通过“多VRRP备份组”变通实现。例如,为不同业务VLAN配置不同的VRRP主设备。在设备A上设置VLAN 10为Master、VLAN 20为Backup;在设备B上则相反,以此让两台设备共同承载业务。
设备替代方案:若必须实现真正的双活,且网络规模较大,可考虑支持IRF堆叠的更高端型号(如WX5560H),或通过外接路由器/防火墙来实现负载均衡。
暂无评论
system-view
sysname AC1
# 管理VLAN(示例:VLAN 100)
interface Vlan-interface 100
ip address 192.168.100.10 255.255.255.0
# VRRP组 1
vrrp vrid 1 virtual-ip 192.168.100.1 # 虚拟网关
vrrp vrid 1 priority 120 # 主优先级(默认100)
vrrp vrid 1 preempt-mode timer delay 10 # 抢占延迟
vrrp vrid 1 track interface GigabitEthernet 1/0/24 reduced 30 # 跟踪上联口
quit
# 全局:RADIUS/NAS 用虚IP(关键)
radius nas-ip 192.168.100.1
portal nas-ip 192.168.100.1
save
system-view
sysname AC2
interface Vlan-interface 100
ip address 192.168.100.11 255.255.255.0
vrrp vrid 1 virtual-ip 192.168.100.1
vrrp vrid 1 priority 100 # 备优先级
vrrp vrid 1 preempt-mode
quit
radius nas-ip 192.168.100.1
portal nas-ip 192.168.100.1
save
display vrrp
display vrrp interface Vlan-interface 100
wlan mobility-group 1
member ip 192.168.100.10 # 本AC
member ip 192.168.100.11 # 对端AC
save
wlan mobility-group 1
member ip 192.168.100.11
member ip 192.168.100.10
save
wlan ap-license-group
local ip 192.168.100.10
member ip 192.168.100.11
ap-license-synchronization enable
save
wlan ap-license-group
local ip 192.168.100.11
member ip 192.168.100.10
ap-license-synchronization enable
save
# 在AC1/AC2上一致
wlan ap ap1 model WA2610H-FIT
serial-id 219801A28xxxxxxx
primary-ac ip 192.168.100.10 # 主AC
backup-ac ip 192.168.100.11 # 备AC
save
# AC1(主)
wlan backup-group 1
priority 200
peer ip 192.168.100.11
dhbk enable backup-type symmetric-path # 热备同步
# AC2(备)
wlan backup-group 1
priority 150
peer ip 192.168.100.10
dhbk enable backup-type symmetric-path
sysname AC1
# VLAN
vlan 100
vlan 200
vlan 300
# 管理口
interface Vlan-interface 100
ip address 192.168.100.10 255.255.255.0
vrrp vrid 1 virtual-ip 192.168.100.1
vrrp vrid 1 priority 120
vrrp vrid 1 track interface GigabitEthernet 1/0/24 reduced 30
quit
# 上联口
interface GigabitEthernet 1/0/24
port link-type trunk
port trunk permit vlan all
quit
# 漫游组
wlan mobility-group 1
member ip 192.168.100.10
member ip 192.168.100.11
# License共享
wlan ap-license-group
local ip 192.168.100.10
member ip 192.168.100.11
ap-license-synchronization enable
# NAS-IP用虚IP
radius nas-ip 192.168.100.1
portal nas-ip 192.168.100.1
save
sysname AC2
vlan 100
vlan 200
vlan 300
interface Vlan-interface 100
ip address 192.168.100.11 255.255.255.0
vrrp vrid 1 virtual-ip 192.168.100.1
vrrp vrid 1 priority 100
quit
interface GigabitEthernet 1/0/24
port link-type trunk
port trunk permit vlan all
quit
wlan mobility-group 1
member ip 192.168.100.11
member ip 192.168.100.10
wlan ap-license-group
local ip 192.168.100.11
member ip 192.168.100.10
ap-license-synchronization enable
radius nas-ip 192.168.100.1
portal nas-ip 192.168.100.1
save
display vrrp
display wlan mobility-group
display wlan ap-license-group
display wlan ap all
display wlan backup-status
暂无评论
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
暂无评论