show cdp neighbors
SW_Core1 (chính VLAN 10)
hostname SW_Core1
vlan 10
name Tang1
vlan 20
name Tang2
interface range e1/0 - 1
switchport trunk encapsulation dot1q
switchport mode trunk
no shutdown
interface e0/0
switchport trunk encapsulation dot1q
switchport mode trunk
no shutdown
interface e0/2
no switchport
ip address [Link] [Link]
no shutdown
description --> To R1
interface vlan 10
ip address [Link] [Link]
standby 10 ip [Link]
standby 10 priority 110
standby 10 preempt
standby 10 authentication md5 key-string hsrp123
ip nat inside
no shutdown
interface vlan 20
ip address [Link] [Link]
standby 20 ip [Link]
standby 20 priority 90
standby 20 preempt
standby 20 authentication md5 key-string hsrp123
ip nat inside
no shutdown
ip routing
ip dhcp excluded-address [Link] [Link]
ip dhcp pool Tang1
network [Link] [Link]
default-router [Link]
dns-server [Link]
ip route [Link] [Link] [Link]
bổ sung
ip dhcp excluded-address [Link] [Link]
ip dhcp excluded-address [Link] [Link]
ip dhcp pool Tang1
network [Link] [Link]
default-router [Link]
dns-server [Link]
ip dhcp pool Tang2_backup
network [Link] [Link]
default-router [Link]
dns-server [Link]
SW_Core2 (chính VLAN 20)
hostname SW_Core2
vlan 10
name Tang1
vlan 20
name Tang2
interface range e1/0 - 1
switchport trunk encapsulation dot1q
switchport mode trunk
no shutdown
interface e0/0
switchport trunk encapsulation dot1q
switchport mode trunk
no shutdown
interface e0/2
no switchport
ip address [Link] [Link]
no shutdown
description --> To R1
interface vlan 10
ip address [Link] [Link]
standby 10 ip [Link]
standby 10 priority 90
standby 10 preempt
standby 10 authentication md5 key-string hsrp123
ip nat inside
no shutdown
interface vlan 20
ip address [Link] [Link]
standby 20 ip [Link]
standby 20 priority 120
standby 20 preempt
standby 20 authentication md5 key-string hsrp123
ip nat inside
no shutdown
ip routing
ip dhcp excluded-address [Link] [Link]
ip dhcp pool Tang2
network [Link] [Link]
default-router [Link]
dns-server [Link]
ip route [Link] [Link] [Link]
bổ sung
ip dhcp excluded-address [Link] [Link]
ip dhcp excluded-address [Link] [Link]
ip dhcp pool Tang1_backup
network [Link] [Link]
default-router [Link]
dns-server [Link]
ip dhcp pool Tang2
network [Link] [Link]
default-router [Link]
dns-server [Link]
R1 - Router ra Internet
hostname R1
interface FastEthernet0/0
ip address dhcp
ip nat outside
no shutdown
interface FastEthernet1/0
ip address [Link] [Link]
ip nat inside
no shutdown
interface FastEthernet2/0
ip address [Link] [Link]
ip nat inside
no shutdown
ip routing
ip route [Link] [Link] [Link]
ip route [Link] [Link] [Link]
access-list 1 permit [Link] [Link]
access-list 1 permit [Link] [Link]
ip nat inside source list 1 interface FastEthernet0/0 overload
Bổ sung
Gỡ các route cũ:
no ip route [Link] [Link] [Link]
no ip route [Link] [Link] [Link]
Thêm 2 route cho mỗi VLAN (ưu tiên thấp hơn cho đường dự phòng):
! VLAN 10 - Ưu tiên đi SW_Core1 (100.2), dự phòng là SW_Core2 (100.6)
ip route [Link] [Link] [Link] 10
ip route [Link] [Link] [Link] 20
! VLAN 20 - Ưu tiên đi SW_Core2 (100.6), dự phòng là SW_Core1 (100.2)
ip route [Link] [Link] [Link] 10
ip route [Link] [Link] [Link] 20
Bước 1: Cấu hình ip sla monitor theo kiểu cũ cho SW_Core1
conf t
ip sla monitor 1
type echo protocol ipIcmpEcho [Link]
frequency 5
exit
ip sla monitor schedule 1 life forever start-time now
track 1 rtr 1 reachability
Bước 2: Cập nhật default route dự phòng cho VLAN 10
no ip route [Link] [Link] [Link]
ip route [Link] [Link] [Link] track 1
ip route [Link] [Link] [Link] 20
Bước 3: Sau đó kiểm tra:
show ip sla monitor statistics
show track 1
show ip route [Link]
Bước 1: Cấu hình ip sla monitor theo kiểu cũ cho SW_Core2
conf t
ip sla monitor 2
type echo protocol ipIcmpEcho [Link]
frequency 5
exit
ip sla monitor schedule 2 life forever start-time now
track 2 rtr 2 reachability
Bước 2: Cập nhật default route dự phòng cho VLAN 20
no ip route [Link] [Link] [Link]
ip route [Link] [Link] [Link] track 2
ip route [Link] [Link] [Link] 20
Bước 3: Sau đó kiểm tra:
show ip sla monitor statistics
show track 2
show ip route [Link]
SW1 - Access Switch (cho VLAN 10)
hostname SW1
vlan 10
interface range e1/0 - 1
switchport mode access
switchport access vlan 10
no shutdown
interface range e0/0 - 1
switchport trunk encapsulation dot1q
switchport mode trunk
no shutdown
SW2 - Access Switch (cho VLAN 20)
hostname SW2
vlan 20
interface range e1/0 - 1
switchport mode access
switchport access vlan 20
no shutdown
interface range e0/0 - 1
switchport trunk encapsulation dot1q
switchport mode trunk
no shutdown
