{"id":267,"date":"2025-08-02T21:26:52","date_gmt":"2025-08-02T13:26:52","guid":{"rendered":"https:\/\/0x0.pub\/?p=267"},"modified":"2025-08-02T21:37:43","modified_gmt":"2025-08-02T13:37:43","slug":"hrp-vrrp-%e5%9f%ba%e7%a1%80%e5%ae%9e%e9%aa%8c","status":"publish","type":"post","link":"https:\/\/0x0.pub\/?p=267","title":{"rendered":"HRP VRRP \u57fa\u7840\u5b9e\u9a8c"},"content":{"rendered":"\n

<\/p>\n\n\n\n

\u62d3\u6251\u56fe<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

\u914d\u7f6e\u9700\u6c42\uff1a FW1\/2\u914d\u7f6eVRRP\uff0cFW1\u6545\u969c\u65f6\u6d41\u91cf\u81ea\u52a8\u5207\u6362\u5230FW2\u8bbe\u5907<\/p>\n\n\n\n

<\/p>\n\n\n\n

\u914d\u7f6e\u601d\u8def\uff1a<\/p>\n\n\n\n

1. FW1 FW2 \u914d\u7f6eHRP\u534f\u8bae\uff0c\u5b9e\u73b0\u7ba1\u7406VRRP\u548c\u540c\u6b65\u53cc\u673a\u914d\u7f6e\u3002
2. FW1 FW2 \u914d\u7f6eVRRP\u534f\u8bae\u3002
3. \u914d\u7f6e\u4ea4\u6362\u673aSW1 SW2\u3002
4. \u9a8c\u8bc1\u914d\u7f6e\u3002<\/pre>\n\n\n\n
\u914d\u7f6e\u547d\u4ee4<\/p>\n\n\n\n
1.\u9632\u706b\u5899\u53cc\u673a\u57fa\u7840\u914d\u7f6e\u548cHRP\u534f\u8bae<\/p>\n\n\n\n
 #FW1<\/p>\n\n\n\n
sys\nsysn FW1\nint g1\/0\/0\nip addr 192.168.100.1 24\nservice-manage ping permit\nint g1\/0\/1\nip addr 172.16.1.1 24\nservice-manage ping permit\nint g1\/0\/2\nip addr 12.0.0.1 24\n\nip route-static 192.168.1.0 24 192.168.100.2\nip route-static 192.168.2.0 24 172.16.1.2\n\nfirewall zone trust\nadd int g1\/0\/0\nadd int g1\/0\/2\nfirewall zone untrust\nadd int g1\/0\/1\n\nsecurity-policy\nrule name trust\nsource-zone local\nsource-zone trust\ndestination-zone local\ndestination-zone trust\ndestination-zone untrust\naction permit\n\nhrp en\nhrp int g1\/0\/2 remote 12.0.0.2<\/code><\/pre>\n\n\n\n
#FW2<\/p>\n\n\n\n
sys\nsysn FW2\nint g1\/0\/0\nip addr 192.168.100.3 24\nservice-manage ping permit\nint g1\/0\/1\nip addr 172.16.1.3 24\nservice-manage ping permit\nint g1\/0\/2\nip addr 12.0.0.2 24\n\nip route-static 192.168.1.0 24 192.168.100.2\nip route-static 192.168.2.0 24 172.16.1.2\n\nfirewall zone trust\nadd int g1\/0\/0\nadd int g1\/0\/2\nfirewall zone untrust\nadd int g1\/0\/1\n\nsecurity-policy\nrule name trust\nsource-zone local\nsource-zone trust\ndestination-zone local\ndestination-zone trust\ndestination-zone untrust\naction permit\n\nhrp en\nhrp int g1\/0\/2 remote 12.0.0.1<\/code><\/pre>\n\n\n\n
2.\u53cc\u673a\u9632\u706b\u5899VRRP\u914d\u7f6e<\/p>\n\n\n\n
#FW1<\/p>\n\n\n\n
int g1\/0\/0\nvrrp vrid 1 virtual-ip 192.168.100.254 active\nint g1\/0\/1\nvrrp vrid 2 virtual-ip 172.16.1.254 active<\/code><\/pre>\n\n\n\n
#FW2<\/p>\n\n\n\n
int g1\/0\/0\nvrrp vrid 1 virtual-ip 192.168.100.254 standby\nint g1\/0\/1\nvrrp vrid 2 virtual-ip 172.16.1.254 standby<\/code><\/pre>\n\n\n\n
3.SW1 SW2\u63a5\u5165\u4ea4\u6362\u673a\u914d\u7f6e<\/p>\n\n\n\n
#SW1<\/p>\n\n\n\n
sys\nsysn SW1\nvlan batch 10 20\nint vlan 10\nip addr 192.168.1.1 24\nint vlan 20\nip addr 192.168.100.2 24\n\nint g0\/0\/3\nport link-type access\nport default vlan 10\nport-group group-member g0\/0\/1 to g0\/0\/2\nport link-type access\nport default vlan 20\n\nip route-static 0.0.0.0 0 192.168.100.254<\/code><\/pre>\n\n\n\n
#SW2<\/p>\n\n\n\n
sys\nsysn SW2\nvlan batch 10 20\nint vlan 10\nip addr 192.168.2.1 24\nint vlan 20\nip addr 172.16.1.2 24\n\nint g0\/0\/3\nport link-type access\nport default vlan 10\nport-group group-member g0\/0\/1 to g0\/0\/2\nport link-type access\nport default vlan 20\n\nip route-static 0.0.0.0 0 172.16.1.254<\/code><\/pre>\n\n\n\n
\u7ed3\u679c\u9a8c\u8bc1\uff1a\u5f53\u4e3b\u9632\u706b\u79bb\u7ebf\u65f63\u4e2a\u4e22\u5305\u540e\u81ea\u52a8\u5207\u6362\uff0c\u5f53\u4e3b\u9632\u706b\u5899\u6062\u590d\u5728\u7ebf\u65f6\u51fa\u73b0\u4e00\u4e2a\u5305\u8d85\u65f6\u3002<\/p>\n\n\n\n
\"\"<\/figure>\n","protected":false},"excerpt":{"rendered":"
\u62d3\u6251\u56fe \u914d\u7f6e\u9700\u6c42\uff1a FW1\/2\u914d\u7f6eVRRP\uff0cFW1\u6545\u969c\u65f6\u6d41\u91cf\u81ea\u52a8\u5207\u6362\u5230FW2\u8bbe\u5907 \u914d\u7f6e\u601d\u8def\uff1a 1. FW1 F […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[46],"tags":[47,48],"class_list":["post-267","post","type-post","status-publish","format-standard","hentry","category-ensp","tag-hrp","tag-vrrp"],"_links":{"self":[{"href":"https:\/\/0x0.pub\/index.php?rest_route=\/wp\/v2\/posts\/267","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/0x0.pub\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/0x0.pub\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/0x0.pub\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/0x0.pub\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=267"}],"version-history":[{"count":5,"href":"https:\/\/0x0.pub\/index.php?rest_route=\/wp\/v2\/posts\/267\/revisions"}],"predecessor-version":[{"id":280,"href":"https:\/\/0x0.pub\/index.php?rest_route=\/wp\/v2\/posts\/267\/revisions\/280"}],"wp:attachment":[{"href":"https:\/\/0x0.pub\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=267"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/0x0.pub\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=267"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/0x0.pub\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=267"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}