主要内容及技术

HSRP

静态路由调整

前言：

这是一次较大规模的网络整改。当两台核心层设备Cisco 6509的上行业务不同的时候，要把两台Cisco 6509的角色进行互换，这还是需要花一番功夫的。这不仅仅是两台Cisco6509 HSRP Active和Standby角色互换的问题，其中牵涉到的上行路由、OSPF配置、两台Cisco 6509上连接的外联业务的对换问题。

当年我接到这个任务的时候，光是研究两台Cisco 6509上万行的配置就用了三天的时间。这次我讲这个案例的时候，限于时间和篇幅我不能完全贴出Cisco 6509的关键配置，但是我会尽可能完整的给大家讲述这个案例。

由于本次网络改造是对生产环境中的核心设备进行操作，故存在一定的风险性。在实施的时候要考虑到可能出现的问题，避免出现设备停机，网络大面积中断的情况。

一、需求描述

市局局域网两台核心交换机，型号均为Cisco 6509E。这两台核心交换机形成HSRP组，其中Cisco 6509A机（主机名：SJ-Core-C6509E-1）为主要设备，Cisco 6509 B机（主机名：SJ- Core -C6509E-2）为备用设备。目前，因为A机比B机早投运4年，硬件老化，满载运行时经常出现网络中断的情况，所以经研究决定，将A机负责的外联业务转移至B机：即A机由原先的主要设备改为备用设备，B机由原先的备用设备改成主要设备。考虑到核心设备设备承担业务多且不确定因素多，施工时间短，所以本次转移项目就只对重要业务进行转移。

需要转移的业务如下：

1、所有外联业务

2、办公区域和服务器区域的Active设备全部转移到B机

3、访问省骨干网的主要出口由A机转移至B机

4、访问Internet的数据流仍然由B机转发

5、无线网络控制区域无需调整

1.1、市局局域网拓扑图

 

连接接口信息：

1、Cisco 6509-A机（主机名为SJ-Core-C6509-1）

lTen 7/3：办公区域交换机-1

lTen 7/4：办公区域交换机-2

lGi 9/1—Gi 9/6：外联区域1—6

lGi 9/11-Gi 9/13：无线网控制区

lGi 9/9：连接Internet防火墙（外网业务）

lGi 9/10：连接ASA防火墙（内网业务）10.192.192.169/30

2、Cisco 6509-A机（主机名为SJ-Core-C6509-1）

lTen 7/3：服务器区域交换机-1

lTen 7/4：服务器区域交换机-2

lGi 9/10：连接ASA防火墙（内网业务）10.192.192.173/30

1.2、主要业务与互联接口

下表列出Cisco 6509 A机上需要转移的业务和接口信息

接口编号	业务连接	IP地址
Gi9/1	外联业务1	Vlan 21
Gi9/2	外联业务2	Vlan 22
Gi9/3	外联业务3	Vlan 23
Gi9/4	外联业务4	Vlan 24
Gi9/5	外联业务5	Vlan 25
Gi9/6	外联业务6	Vlan 26
Gi9/9	ISP Internet	10.192.193.142/29
Gi9/10	SGS-ASA5520	10.192.192.169/30

 

1.3、业务互换需求

在1.2节表格中列出的Gi 9/1-Gi9/6都必须转移到B机上，互联VLAN如果配置了HSRP，则把HSRP的Active设备转移到B机，如果没有配置HSRP，则在A机上删掉这个业务VLAN的SVI配置，将其转移到B机。

Cisco 6509A上的Gi 9/9接口连接线转移到B机，将该接口的IP地址配置也转移到B机。Cisco 6509A上的Gi 9/10接口和Cisco 6509B上的Gi 9/10互换IP地址配置。

二、准备阶段

2.1、查看Cisco6509-A机当前运行的接口（包括SVI接口）配置

a、Cisco 6509-A机上外联业务SVI当前配置

interfaceVlan21

description Wailian-1

ip address 10.192.193.74 255.255.255.248

no ip redirects

no ip unreachables

no ip proxy-arp

ip route-cache flow

standby 21 ip 10.192.193.73

standby 21 priority 120

standby 21 preempt

standby 21 track GigabitEthernet9/10 60

!

interfaceVlan22

description Wailian-2

ip address 10.192.193.82 255.255.255.248

no ip redirects

no ip unreachables

no ip proxy-arp

ip route-cache flow

standby 22 ip 10.192.193.81

standby 22 priority 120

standby 22 preempt

standby 22 track GigabitEthernet9/10 60

!

interfaceVlan23

description Wailian-3

ip address 10.192.193.90 255.255.255.248

no ip redirects

no ip unreachables

no ip proxy-arp

ip route-cache flow

standby 23 ip 10.192.193.89

standby 23 priority 120

standby 23 preempt

standby 23 track GigabitEthernet9/10 60

!

interfaceVlan24

description Wailian-4

ip address 10.192.193.98 255.255.255.248

no ip redirects

no ip unreachables

no ip proxy-arp

ip route-cache flow

standby 24 ip 10.192.193.97

standby 24 priority 120

standby 24 preempt

standby 24 track GigabitEthernet9/10 60

!

interfaceVlan25

description Wailian-5

ip address 10.192.193.106 255.255.255.248

no ip redirects

no ip unreachables

no ip proxy-arp

ip route-cache flow

standby 25 ip 10.192.193.105

standby 25 priority 120

standby 25 preempt

standby 25 track GigabitEthernet9/10 60

!

interfaceVlan26

description Wailian-6

ip address 10.192.193.114 255.255.255.248

no ip redirects

no ip unreachables

no ip proxy-arp

ip route-cache flow

standby 26 ip 10.192.193.113

standby 26 priority 120

standby 26 preempt

standby 26 track GigabitEthernet9/10 60

b、Cisco 6509-A机上内网出口和外网出口配置

interfaceGigabitEthernet9/9

description Internet-NGFW

ip address 10.192.193.142 255.255.255.248

no ip redirects

no ip unreachables

no ip proxy-arp

speed 1000

rmon collection stats 6099 owner monitor

!

interfaceGigabitEthernet9/10

description SGS-ASA5550

ip address 10.192.192.169 255.255.255.252

no ip redirects

no ip unreachables

no ip proxy-arp

ip route-cache flow

ip policy route-map uniaccess_policy1

speed 1000

rmon collection stats 6035 owner monitor

!

c、Cisco 6509-A机上办公业务网段配置

interfaceVlan55

description Part-1

ip address 10.192.195.130 255.255.255.248

no ip redirects

no ip unreachables

no ip proxy-arp

standby 55 ip 10.192.195.129

standby 55 priority 120

standby 55 preempt

!

interfaceVlan56

description Part-2

ip address 172.17.199.194 255.255.255.192

no ip redirects

no ip unreachables

no ip proxy-arp

standby 56 ip 172.17.199.193

standby 56 priority 120

standby 56 track GigabitEthernet9/10 60

!

interfaceVlan65

description Part-3

ip address 10.192.195.138 255.255.255.248

no ip redirects

no ip unreachables

no ip proxy-arp

ip policy route-map uniaccess_policy

standby 65 ip 10.192.195.137

standby 65 priority 120

standby 65 preempt

!

interfaceVlan69

description Part-4

ip address 10.192.193.66 255.255.255.248

no ip proxy-arp

ip flow ingress

ip route-cache flow

standby 69 ip 10.192.193.65

standby 69 priority 120

standby 69 preempt

standby 69 track GigabitEthernet9/10 60

!

interfaceVlan71

description Part-5

ip address 10.192.193.58 255.255.255.248

no ip redirects

no ip unreachables

no ip proxy-arp

ip flow ingress

ip route-cache flow

standby 71 ip 10.192.193.57

standby 71 priority 120

standby 71 preempt

!

interfaceVlan73

description Part-6

ip address 10.192.193.178 255.255.255.248

no ip proxy-arp

ip flow ingress

ip route-cache flow

standby 73 ip 10.192.193.177

standby 73 priority 120

standby 73 preempt

2.2、查看Cisco6509-B机当前运行的接口（包括SVI接口）配置

a、Cisco 6509-B机上外联业务SVI当前配置

interfaceVlan21

description Wailian-1

ip address 10.192.193.75 255.255.255.248

no ip redirects

no ip unreachables

no ip proxy-arp

ip route-cache flow

standby 21 ip 10.192.193.73

standby 21 preempt

standby 21 track GigabitEthernet9/10 60

!

interfaceVlan22

description Wailian-2

ip address 10.192.193.83 255.255.255.248

no ip redirects

no ip unreachables

no ip proxy-arp

ip route-cache flow

standby 22 ip 10.192.193.81

standby 22 preempt

standby 22 track GigabitEthernet9/10 60

!

interfaceVlan23

description Wailian-3

ip address 10.192.193.91 255.255.255.248

no ip redirects

no ip unreachables

no ip proxy-arp

ip route-cache flow

standby 23 ip 10.192.193.89

standby 23 preempt

standby 23 track GigabitEthernet9/10 60

!

interfaceVlan24

description Wailian-4

ip address 10.192.193.99 255.255.255.248

no ip redirects

no ip unreachables

no ip proxy-arp

ip route-cache flow

standby 24 ip 10.192.193.97

standby 24 preempt

standby 24 track GigabitEthernet9/10 60

!

interfaceVlan25

description Wailian-5

ip address 10.192.193.107 255.255.255.248

no ip redirects

no ip unreachables

no ip proxy-arp

ip route-cache flow

standby 25 ip 10.192.193.105

standby 25 preempt

standby 25 track GigabitEthernet9/10 60

!

interfaceVlan26

description Wailian-6

ip address 10.192.193.115 255.255.255.248

no ip redirects

no ip unreachables

no ip proxy-arp

ip route-cache flow

standby 26 ip 10.192.193.113

standby 26 preempt

standby 26 track GigabitEthernet9/10 60

b、Cisco 6509-B机上内网出口和外网出口配置

interfaceGigabitEthernet9/10

description SGS-ASA5550

ip address 10.192.192.173 255.255.255.252

no ip redirects

no ip unreachables

no ip proxy-arp

ip route-cache flow

ip policy route-map uniaccess_policy1

speed 1000

rmon collection stats 6035 owner monitor

c、Cisco 6509-B机上办公业务网段配置

interfaceVlan55

description Part-1

ip address 10.192.195.131 255.255.255.248

no ip redirects

no ip unreachables

no ip proxy-arp

standby 55 ip 10.192.195.129

standby 55 preempt

!

interfaceVlan56

description Part-2

ip address 172.17.199.195 255.255.255.192

no ip redirects

no ip unreachables

no ip proxy-arp

standby 56 ip 172.17.199.193

standby 56 track GigabitEthernet9/10 60

!

interfaceVlan65

description Part-3

ip address 10.192.195.139 255.255.255.248

no ip redirects

no ip unreachables

no ip proxy-arp

ip policy route-map uniaccess_policy

standby 65 ip 10.192.195.137

standby 65 preempt

!

interfaceVlan69

description Part-4

ip address 10.192.193.67 255.255.255.248

no ip proxy-arp

ip flow ingress

ip route-cache flow

standby 69 ip 10.192.193.65

standby 69 preempt

standby 69 track GigabitEthernet9/10 60

!

interfaceVlan71

description Part-5

ip address 10.192.193.59 255.255.255.248

no ip redirects

no ip unreachables

no ip proxy-arp

ip flow ingress

ip route-cache flow

standby 71 ip 10.192.193.57

standby 71 preempt

!

interfaceVlan73

description Part-6

ip address 10.192.193.179 255.255.255.248

no ip proxy-arp

ip flow ingress

ip route-cache flow

standby 73 ip 10.192.193.177

standby 73 preempt

2.3、路由配置

这个实际上只是针对局域网做了OSPF的配置，因为不改动任何对内的接口IP地址和网段，所对本次割接没有什么意义。控制外联业务和数据流出的路由都是静态路由。特别是下一跳地址指向防火墙的路由。

a、Cisco 6509-A机上的静态路由

iproute 0.0.0.0 0.0.0.0 10.192.193.139

iproute 10.31.16.0 255.255.255.0 10.192.192.170

iproute 10.41.0.0 255.255.0.0 10.192.192.170

iproute 10.41.212.64 255.255.255.240 10.192.193.139

iproute 10.42.0.0 255.255.0.0 10.192.192.170

iproute 10.50.0.0 255.255.224.0 10.192.192.170

iproute 10.52.0.0 255.255.0.0 10.192.192.170

iproute 10.52.16.52 255.255.255.255 10.192.192.170

iproute 10.91.0.0 255.255.0.0 10.192.192.170

iproute 10.91.0.0 255.255.224.0 10.192.192.170

iproute 10.91.32.0 255.255.240.0 10.192.192.170

iproute 10.111.13.34 255.255.255.255 10.192.192.170

iproute 10.111.13.38 255.255.255.255 10.192.192.170

iproute 10.111.13.39 255.255.255.255 10.192.192.170

iproute 10.111.13.45 255.255.255.255 10.192.192.170

iproute 10.192.0.0 255.255.128.0 10.192.192.170

iproute 10.192.128.0 255.255.192.0 10.192.192.170

iproute 10.192.224.0 255.255.224.0 10.192.192.170

iproute 10.192.232.0 255.255.255.0 10.192.192.170

iproute 10.193.0.0 255.255.0.0 10.192.192.170

iproute 10.194.0.0 255.255.0.0 10.192.192.170

iproute 10.115.0.0 255.255.0.0 10.192.192.170

iproute 10.115.136.0 255.255.255.0 10.192.192.170

iproute 10.197.160.0 255.255.224.0 10.192.192.170

iproute 10.197.160.0 255.255.248.0 10.192.192.170

iproute 10.197.184.0 255.255.255.0 10.192.192.170

iproute 10.197.191.248 255.255.255.252 10.192.192.170

iproute 10.121.13.59 255.255.255.255 10.192.192.170

iproute 10.150.65.0 255.255.255.0 10.192.192.170

iproute 10.154.33.0 255.255.255.0 10.192.192.170

iproute 10.164.128.0 255.255.128.0 10.192.192.170

iproute 10.164.142.0 255.255.255.0 10.192.192.170

iproute 10.165.64.0 255.255.255.0 10.192.192.170

iproute 10.165.64.16 255.255.255.240 10.192.192.170

iproute 10.165.65.0 255.255.255.0 10.192.192.170

iproute 10.165.74.0 255.255.255.0 10.192.192.170

iproute 10.165.89.0 255.255.255.0 10.192.192.170

iproute 10.165.90.0 255.255.255.0 10.192.192.170

iproute 10.165.91.0 255.255.255.0 10.192.192.170

b、Cisco 6509-B机上的静态路由

iproute 10.31.16.0 255.255.255.0 10.192.192.174

iproute 10.41.0.0 255.255.0.0 10.192.192.174

iproute 10.42.0.0 255.255.0.0 10.192.192.174

iproute 10.50.0.0 255.255.224.0 10.192.192.174

iproute 10.52.0.0 255.255.0.0 10.192.192.174

iproute 10.52.16.52 255.255.255.255 10.192.192.174

iproute 10.91.0.0 255.255.0.0 10.192.192.174

iproute 10.91.0.0 255.255.224.0 10.192.192.174

iproute 10.91.32.0 255.255.240.0 10.192.192.174

iproute 10.111.13.38 255.255.255.255 10.192.192.174

iproute 10.111.13.45 255.255.255.255 10.192.192.174

iproute 10.192.0.0 255.255.128.0 10.192.192.174

iproute 10.192.128.0 255.255.192.0 10.192.192.174

iproute 10.192.224.0 255.255.224.0 10.192.192.174

iproute 10.192.232.0 255.255.255.0 10.192.192.174

iproute 10.193.0.0 255.255.0.0 10.192.192.174

iproute 10.194.0.0 255.255.0.0 10.192.192.174

iproute 10.115.0.0 255.255.0.0 10.192.192.174

iproute 10.197.160.0 255.255.224.0 10.192.192.174

iproute 10.197.160.0 255.255.248.0 10.192.192.174

iproute 10.197.184.0 255.255.255.0 10.192.192.174

iproute 10.197.191.248 255.255.255.252 10.192.192.174

iproute 10.121.13.0 255.255.255.0 10.192.192.174

iproute 10.121.13.59 255.255.255.255 10.192.192.174

iproute 10.150.65.0 255.255.255.0 10.192.192.174

iproute 10.154.33.0 255.255.255.0 10.192.192.174

iproute 10.164.128.0 255.255.128.0 10.192.192.174

iproute 10.164.142.0 255.255.255.0 10.192.192.174

iproute 10.165.64.0 255.255.255.0 10.192.192.174

iproute 10.165.64.16 255.255.255.240 10.192.192.174

iproute 10.165.65.0 255.255.255.0 10.192.192.174

iproute 10.165.74.0 255.255.255.0 10.192.192.174

iproute 10.165.89.0 255.255.255.0 10.192.192.174

iproute 10.165.90.0 255.255.255.0 10.192.192.174

iproute 10.165.91.0 255.255.255.0 10.192.192.174

三、实施阶段

3.1、物理接口及配置转移

设备	接口	转移前配置	转移前业务	转移后配置	转移后业务
A机 C6509E-1	Gi9/9	10.192.193.142	ISP	无配置	无连接
	Gi9/10	10.192.192.169	ASA5520-G0/1	10.192.192.173	ASA5520-G0/2
B机 C6509-2	Gi9/9	无配置	无连接	10.192.193.142	ISP
	Gi9/10	10.192.192.173	ASA5520-G0/2	10.192.192.169	ASA5520-G0/1

另外，A机的Gi 9/1-9/6的连接线全部转移到B机，并把Gi 9/1-Gi9/6的接口配置全部转移到B机。

A机清空物理接口Gi9/9的IP地址配置：

interfaceGigabitEthernet9/9

no description Internet-NGFW

no ip address 10.192.193.142 255.255.255.248

no ip redirects

no ip unreachables

no ip proxy-arp

speed 1000

rmon collection stats 6099 owner monitor

!

说明，A机和B机连接防火墙的接口互换，所以A机、B机连接防火墙接口的配置也互换

interfaceGigabitEthernet9/10

descriptionSGS-ASA5520

ipaddress 10.192.192.173 255.255.255.252

speed1000

shutdown

rmoncollection stats 6035 owner monitor

 

B机对应接口配置上和A机原先配置相同的IP地址，如果是需要加入VLAN，则加入与A机接口原本配置相同的VLAN：

interfaceGigabitEthernet9/9

description PE2 Gi2/0/43 3-isp Internet

ip address 10.192.193.142 255.255.255.248

no ip redirects

no ip unreachables

no ip proxy-arp

speed 1000

rmon collection stats 6099 owner monitor

!

interfaceGigabitEthernet9/10

description ZunYi-SGS-ASA5520 G0/1

ip address 10.192.192.169 255.255.255.252

no ip redirects

no ip unreachables

no ip proxy-arp

ip route-cache flow

ip policy route-map uniaccess_policy1

speed 1000

rmon collection stats 6035 owner monitor

!

interfaceGigabitEthernet9/1

description wailian-1

switchport

switchport access vlan 21

switchport mode access

no ip address

spanning-tree portfast

!

interfaceGigabitEthernet9/2

description wailian-2

switchport

switchport access vlan 22

switchport mode access

no ip address

spanning-tree portfast

!

interfaceGigabitEthernet9/3

description wailian-3

switchport

switchport access vlan 23

no ip address

spanning-tree portfast

!

interfaceGigabitEthernet9/4

description wailian-4

switchport

switchport access vlan 24

no ip address

spanning-tree portfast

!

interfaceGigabitEthernet9/5

description wailian-5

switchport

switchport access vlan 25

no ip address

rmon collection stats 6095 owner monitor

spanning-tree portfast

!

interfaceGigabitEthernet9/6

description wailian-6

switchport

switchport access vlan 26

no ip address

spanning-tree portfast

3.2、HSRP主备切换配置

不用改变HSRP SVI口IP地址和虚拟IP地址，直接将HSRP的优先级互换。在Cisco 6509 A上删掉Track配置，在Cisco 6509 B上删掉Track配置。

因为篇幅问题，以VLAN 21为例

Cisco 6509-A配置：

interfaceVlan21

standby21 priority 100

standby21 preempt

nostandby 21 track GigabitEthernet9/10 60

Cisco 6509-B配置：

interfaceVlan21

standby21 priority 120

standby21 preempt

standby21 track GigabitEthernet9/10 60

3.3、静态路由互相转移配置

将Cisco 6509-A内下一跳地址为10.192.192.170的静态路由全部删掉，然后全部粘贴到B机内；再将Cisco 6509-B下一跳地址为10.192.192.174的静态路由全部删掉，然后全部粘贴到A机内。

访问Internet的默认路由也要转移到B机内。

A机删除的路由：

noip route 0.0.0.0 0.0.0.0 10.192.193.139

noip route 10.31.16.0 255.255.255.0 10.192.192.170

noip route 10.41.0.0 255.255.0.0 10.192.192.170

no ip route 10.42.0.0 255.255.0.0 10.192.192.170

noip route 10.50.0.0 255.255.224.0 10.192.192.170

noip route 10.52.0.0 255.255.0.0 10.192.192.170

noip route 10.52.16.52 255.255.255.255 10.192.192.170

noip route 10.91.0.0 255.255.0.0 10.192.192.170

noip route 10.91.0.0 255.255.224.0 10.192.192.170

noip route 10.91.32.0 255.255.240.0 10.192.192.170

noip route 10.111.13.34 255.255.255.255 10.192.192.170

noip route 10.111.13.38 255.255.255.255 10.192.192.170

noip route 10.111.13.39 255.255.255.255 10.192.192.170

noip route 10.111.13.45 255.255.255.255 10.192.192.170

noip route 10.192.0.0 255.255.128.0 10.192.192.170

noip route 10.192.128.0 255.255.192.0 10.192.192.170

noip route 10.192.224.0 255.255.224.0 10.192.192.170

noip route 10.192.232.0 255.255.255.0 10.192.192.170

noip route 10.193.0.0 255.255.0.0 10.192.192.170

noip route 10.194.0.0 255.255.0.0 10.192.192.170

noip route 10.115.0.0 255.255.0.0 10.192.192.170

noip route 10.115.136.0 255.255.255.0 10.192.192.170

noip route 10.197.160.0 255.255.224.0 10.192.192.170

noip route 10.197.160.0 255.255.248.0 10.192.192.170

noip route 10.197.184.0 255.255.255.0 10.192.192.170

noip route 10.197.191.248 255.255.255.252 10.192.192.170

noip route 10.121.13.59 255.255.255.255 10.192.192.170

noip route 10.150.65.0 255.255.255.0 10.192.192.170

noip route 10.154.33.0 255.255.255.0 10.192.192.170

noip route 10.164.128.0 255.255.128.0 10.192.192.170

noip route 10.164.142.0 255.255.255.0 10.192.192.170

noip route 10.165.64.0 255.255.255.0 10.192.192.170

noip route 10.165.64.16 255.255.255.240 10.192.192.170

noip route 10.165.65.0 255.255.255.0 10.192.192.170

noip route 10.165.74.0 255.255.255.0 10.192.192.170

noip route 10.165.89.0 255.255.255.0 10.192.192.170

noip route 10.165.90.0 255.255.255.0 10.192.192.170

noip route 10.165.91.0 255.255.255.0 10.192.192.170

 

A机新增的路由：

iproute 10.31.16.0 255.255.255.0 10.192.192.174

iproute 10.41.0.0 255.255.0.0 10.192.192.174

iproute 10.42.0.0 255.255.0.0 10.192.192.174

iproute 10.50.0.0 255.255.224.0 10.192.192.174

iproute 10.52.0.0 255.255.0.0 10.192.192.174

iproute 10.52.16.52 255.255.255.255 10.192.192.174

iproute 10.91.0.0 255.255.0.0 10.192.192.174

iproute 10.91.0.0 255.255.224.0 10.192.192.174

iproute 10.91.32.0 255.255.240.0 10.192.192.174

iproute 10.111.13.38 255.255.255.255 10.192.192.174

iproute 10.111.13.45 255.255.255.255 10.192.192.174

iproute 10.192.0.0 255.255.128.0 10.192.192.174

iproute 10.192.128.0 255.255.192.0 10.192.192.174

iproute 10.192.224.0 255.255.224.0 10.192.192.174

iproute 10.192.232.0 255.255.255.0 10.192.192.174

iproute 10.193.0.0 255.255.0.0 10.192.192.174

iproute 10.194.0.0 255.255.0.0 10.192.192.174

iproute 10.115.0.0 255.255.0.0 10.192.192.174

iproute 10.197.160.0 255.255.224.0 10.192.192.174

iproute 10.197.160.0 255.255.248.0 10.192.192.174

iproute 10.197.184.0 255.255.255.0 10.192.192.174

iproute 10.197.191.248 255.255.255.252 10.192.192.174

iproute 10.121.13.0 255.255.255.0 10.192.192.174

iproute 10.121.13.59 255.255.255.255 10.192.192.174

iproute 10.150.65.0 255.255.255.0 10.192.192.174

iproute 10.154.33.0 255.255.255.0 10.192.192.174

iproute 10.164.128.0 255.255.128.0 10.192.192.174

iproute 10.164.142.0 255.255.255.0 10.192.192.174

iproute 10.165.64.0 255.255.255.0 10.192.192.174

iproute 10.165.64.16 255.255.255.240 10.192.192.174

iproute 10.165.65.0 255.255.255.0 10.192.192.174

iproute 10.165.74.0 255.255.255.0 10.192.192.174

iproute 10.165.89.0 255.255.255.0 10.192.192.174

iproute 10.165.90.0 255.255.255.0 10.192.192.174

iproute 10.165.91.0 255.255.255.0 10.192.192.174

 

B机删除的路由

noip route 10.31.16.0 255.255.255.0 10.192.192.174

noip route 10.41.0.0 255.255.0.0 10.192.192.174

noip route 10.42.0.0 255.255.0.0 10.192.192.174

noip route 10.50.0.0 255.255.224.0 10.192.192.174

noip route 10.52.0.0 255.255.0.0 10.192.192.174

noip route 10.52.16.52 255.255.255.255 10.192.192.174

noip route 10.91.0.0 255.255.0.0 10.192.192.174

noip route 10.91.0.0 255.255.224.0 10.192.192.174

noip route 10.91.32.0 255.255.240.0 10.192.192.174

noip route 10.111.13.38 255.255.255.255 10.192.192.174

noip route 10.111.13.45 255.255.255.255 10.192.192.174

noip route 10.192.0.0 255.255.128.0 10.192.192.174

noip route 10.192.128.0 255.255.192.0 10.192.192.174

noip route 10.192.224.0 255.255.224.0 10.192.192.174

noip route 10.192.232.0 255.255.255.0 10.192.192.174

noip route 10.193.0.0 255.255.0.0 10.192.192.174

noip route 10.194.0.0 255.255.0.0 10.192.192.174

noip route 10.115.0.0 255.255.0.0 10.192.192.174

noip route 10.197.160.0 255.255.224.0 10.192.192.174

noip route 10.197.160.0 255.255.248.0 10.192.192.174

noip route 10.197.184.0 255.255.255.0 10.192.192.174

noip route 10.197.191.248 255.255.255.252 10.192.192.174

noip route 10.121.13.0 255.255.255.0 10.192.192.174

noip route 10.121.13.59 255.255.255.255 10.192.192.174

noip route 10.150.65.0 255.255.255.0 10.192.192.174

noip route 10.154.33.0 255.255.255.0 10.192.192.174

noip route 10.164.128.0 255.255.128.0 10.192.192.174

noip route 10.164.142.0 255.255.255.0 10.192.192.174

noip route 10.165.64.0 255.255.255.0 10.192.192.174

noip route 10.165.64.16 255.255.255.240 10.192.192.174

noip route 10.165.65.0 255.255.255.0 10.192.192.174

noip route 10.165.74.0 255.255.255.0 10.192.192.174

noip route 10.165.89.0 255.255.255.0 10.192.192.174

noip route 10.165.90.0 255.255.255.0 10.192.192.174

noip route 10.165.91.0 255.255.255.0 10.192.192.174

 

B机新增的路由

iproute 0.0.0.0 0.0.0.0 10.192.193.139

iproute 10.31.16.0 255.255.255.0 10.192.192.170

iproute 10.41.0.0 255.255.0.0 10.192.192.170

iproute 10.41.212.64 255.255.255.240 10.192.193.139

iproute 10.42.0.0 255.255.0.0 10.192.192.170

iproute 10.50.0.0 255.255.224.0 10.192.192.170

iproute 10.52.0.0 255.255.0.0 10.192.192.170

iproute 10.52.16.52 255.255.255.255 10.192.192.170

iproute 10.91.0.0 255.255.0.0 10.192.192.170

iproute 10.91.0.0 255.255.224.0 10.192.192.170

iproute 10.91.32.0 255.255.240.0 10.192.192.170

iproute 10.111.13.34 255.255.255.255 10.192.192.170

iproute 10.111.13.38 255.255.255.255 10.192.192.170

iproute 10.111.13.39 255.255.255.255 10.192.192.170

iproute 10.111.13.45 255.255.255.255 10.192.192.170

iproute 10.192.0.0 255.255.128.0 10.192.192.170

iproute 10.192.128.0 255.255.192.0 10.192.192.170

iproute 10.192.224.0 255.255.224.0 10.192.192.170

iproute 10.192.232.0 255.255.255.0 10.192.192.170

iproute 10.193.0.0 255.255.0.0 10.192.192.170

iproute 10.194.0.0 255.255.0.0 10.192.192.170

iproute 10.115.0.0 255.255.0.0 10.192.192.170

iproute 10.115.136.0 255.255.255.0 10.192.192.170

iproute 10.197.160.0 255.255.224.0 10.192.192.170

iproute 10.197.160.0 255.255.248.0 10.192.192.170

iproute 10.197.184.0 255.255.255.0 10.192.192.170

iproute 10.197.191.248 255.255.255.252 10.192.192.170

iproute 10.121.13.59 255.255.255.255 10.192.192.170

iproute 10.150.65.0 255.255.255.0 10.192.192.170

iproute 10.154.33.0 255.255.255.0 10.192.192.170

iproute 10.164.128.0 255.255.128.0 10.192.192.170

iproute 10.164.142.0 255.255.255.0 10.192.192.170

iproute 10.165.64.0 255.255.255.0 10.192.192.170

iproute 10.165.64.16 255.255.255.240 10.192.192.170

iproute 10.165.65.0 255.255.255.0 10.192.192.170

iproute 10.165.74.0 255.255.255.0 10.192.192.170

iproute 10.165.89.0 255.255.255.0 10.192.192.170

iproute 10.165.90.0 255.255.255.0 10.192.192.170

iproute 10.165.91.0 255.255.255.0 10.192.192.170

如果在实施业务转移之后，影响到其他外联业务的正常通行，或者出现无法访问Internet的情况，应该根据操作日志进行回滚至转移之前的状态，先保证各种业务的正常通行以后，再重新实施转移。

四、后记

本案例涉及到的网络技术也就是HSRP和静态路由，看起来比较简单。但由于操作的是两台核心设备，配置量很大而且繁杂，在不了解网络拓扑的情况下是一件非常烧脑的问题。不过只要搞清楚其中OSPF路由是负责哪些区域的通信，静态路由到底是负责哪些区域的通信，实际上写出方案到最后的实施还是比较顺利的。

局域网再怎么复杂，也一般不会牵涉到BGP或者MPLS VPN这样高级的协议。但往往正是一些二层协议难以控制，增加了局域网割接或排除故障的难度。不管拿到什么样的一个局域网，先弄清楚环境再说。