Login
- Table of Contents
-
- H3C S3610[5510] Series Ethernet Switches Operation Manual-Release 0001-(V1.02)
- 00-1Cover
- 00-2Product Overview
- 01-Login Operation
- 02-VLAN Operation
- 03-IP Address and Performance Operation
- 04-QinQ-BPDU Tunnel Operation
- 05-Port Correlation Configuration Operation
- 06-MAC Address Table Management Operation
- 07-MAC-IP-Port Binding Operation
- 08-MSTP Operation
- 09-Routing Overview Operation
- 10-IPv4 Routing Operation
- 11-IPv6 Routing Operation
- 12-IPv6 Configuration Operation
- 13-Multicast Protocol Operation
- 14-802.1x-HABP-MAC Authentication Operation
- 15-AAA-RADIUS-HWTACACS Operation
- 16-ARP Operation
- 17-DHCP Operation
- 18-ACL Operation
- 19-QoS Operation
- 20-Port Mirroring Operation
- 21-Cluster Management Operation
- 22-UDP Helper Operation
- 23-SNMP-RMON Operation
- 24-NTP Operation
- 25-DNS Operation
- 26-File System Management Operation
- 27-Information Center Operation
- 28-System Maintenance and Debugging Operation
- 29-NQA Operation
- 30-VRRP Operation
- 31-SSH Operation
- 32-Appendix
- Related Documents
-
| Title | Size | Download |
|---|---|---|
| 30-VRRP Operation | 3 MB |
1.1.5 Operation Modes of VRRP (Taking IPv4-Based VRRP for Example)
1.2.1 Enabling Users to Ping Virtual IP Addresses
1.2.2 Configuring the Association Between MAC Address and Virtual IP Address
1.2.3 Creating Standby Group and Configuring Virtual IP Address
1.2.4 Configuring Router Priority, Preemption Mode and Interface Tracking
1.2.5 Configuring VRRP Packet Attributes
1.2.6 Displaying and Maintaining VRRP for IPv4
1.3.1 Enabling Users to Ping Virtual IPv6 Addresses
1.3.2 Configuring the Association Between MAC Address and Virtual IPv6 Address
1.3.3 Creating Standby Group and Configuring Virtual IPv6 Address
1.3.4 Configuring Router Priority, Preemption Mode and Interface Tracking
1.3.5 Configuring VRRP Packet Attributes
1.3.6 Displaying and Maintaining VRRP for IPv6
1.4 IPv4-Based VRRP Configuration Example (on Switches)
1.4.1 Single VRRP Standby Group Configuration Example
1.4.2 VRRP Interface Tracking Configuration Example
1.4.3 Multiple VRRP Standby Group Configuration Example
1.5 IPv6-Based VRRP Configuration Example
1.5.1 Single VRRP Standby Group Configuration Example
1.5.2 VRRP Interface Tracking Configuration Example
Chapter 1 VRRP Configuration
& Note:
The term router in this document refers to a router in a generic sense or a Layer 3 switch.
At present, the interfaces that VRRP involves can only be VLAN interfaces unless otherwise specified.
1.1 Introduction to VRRP
1.1.1 Overview
Normally, you can configure a default route to the gateway for every host on a network, allowing all packets destined to the external networks to be sent over the default route to the gateway. This enables hosts on a network to communicate with external networks. However, when the gateway fails, all the hosts using the gateway as the default next-hop router are isolated from the external network.
Apparently, this approach to enabling hosts on a network to communicate with external networks is easy to configure but it imposes a very high requirement of performance stability on the device acting as the gateway. A common way to improve system reliability is to use more egress gateways, introducing the problem of routing among the multiple egresses.
Virtual router redundancy protocol (VRRP) was designed to address this problem. Deploying VRRP on multicast and broadcast LANs such as Ethernet, you can assure that the system can still provide highly reliable default links without changing configurations when a device fails.
There are two VRRP versions: VRRPv2 and VRRPv3. VRRPv2 is based on IPv4, while VRRPv3 is based on IPv6. The two versions implement the same functions but provide different commands.
1.1.2 Basic Concepts of VRRP
I. VRRP standby group
VRRP combines a group of routers on a LAN (including a master and multiple backups) into a virtual router called standby group.
The VRRP standby group has the following features:
l A host on the LAN only needs to know the IP address of the virtual router and uses the IP address as the next hop of the default route.
l Every host on the LAN communicates with external networks through the virtual router.
l Routers in the standby group use a certain election mechanism to elect the gateway. Once the router acting as the gateway fails, the other routers in the standby group elect a new gateway to undertake the responsibility of the failed router.
Figure 1-1 Network diagram for a virtual router
As shown in Figure 1-1, routers RA, RB, and RC form a virtual router, which has its own IP address. Hosts on the Ethernet use the virtual router as the default gateway.
In fact, only one of the three routers acts as the gateway, and the other two are backups.
Caution:
l The IP address of the virtual router can be either an unused IP address on the segment where the standby group resides or the IP address of an interface on a router in the standby group. In the latter case, the router is called the address owner.
l In a VRRP standby group, there can only be one address owner.
II. VRRP priority
VRRP determines the role (master or backup) of each router in the standby group by priority. A router with a higher priority has more opportunity to become the master.
III. Preemption mode
l In non-preemption mode, once a router in the standby group becomes the master, it stays as the master as long as it operates normally, even if another router in the standby group is assigned a higher priority later.
l In preemption mode, once a backup router finds its priority higher than that of the router acting as the master, it becomes the master. Accordingly, the original master becomes a backup.
IV. Interface tracking
The interface tracking function expands the backup functionality of VRRP. It provides backup not only when the interface to which a standby group is assigned fails but also when other interfaces on the router become unavailable. This is achieved by tracking interfaces. When a monitored interface goes down, the priority of the router owning the interface is automatically decreased by a specified value, allowing a higher priority router in the standby group to become the master.
V. Authentication mode
VRRP provides two authentication modes:
l Simple: Simple text authentication
l MD5: MD5 authentication
On a secure network, you can configure the routers not to perform authentication. In this case, neither the routers sending VRRP packets nor the routers receiving the VRRP packets perform authentication and no authentication key is required.
On a network where potential threats are present, you can set the authentication mode to simple. In this case, a router fills the authentication key into the VRRP packet before sending the packet out, while the router receiving the VRRP packet compares the authentication key in the packet with its own. If they are the same, the packet is considered genuine and legitimate; otherwise, the packet is considered illegitimate and is discarded.
On an insecure network, you can set the authentication mode to MD5. This allows the router to encrypt VRRP packets using the authentication key and the MD5 algorithm and then save the encrypted packet in the authentication header (AH). The router receiving the VRRP packet uses the authentication key to decrypt and validate the packet.
1.1.3 Format of VRRP Packets
VRRP uses multicast packets. The router acting as the master sends VRRP packets periodically to declare its existence. VRRP packets are also used for checking the parameters of the virtual router and electing the master.
I. IPv4-based VRRP packet format
Figure 1-2 IPv4-based VRRP packet format
As shown in Figure 1-2, an IPv4-based VRRP packet consists of the following fields:
l Version: Version number of the protocol, 2 for VRRPv2.
l Type: Type of the VRRP packet. Only one VRRP packet type is present, that is, VRRP advertisement, which is represented by 1.
l Virtual Rtr ID (VRID): Number of the virtual router, that is, number of the standby group. It ranges from 1 to 255.
l Priority: Priority of the router in the standby group, in the range 0 to 255. A greater value represents a higher priority. The priority of 0 is reserved for special purposes, while 255 is reserved for the IP address owner.
l Count IP Addrs: Number of virtual IP addresses for the standby group. A standby group can have multiple virtual IP addresses.
l Auth Type: Authentication type. 0 means no authentication, 1 means simple authentication, and 2 means MD5 authentication.
l Adver Int: Interval for sending advertisement packets, in seconds. The default is 1.
l Checksum: 16-bit checksum for validating the data in VRRP packets.
l IP Address: Virtual IP address entry of the standby group. The allowed number is given by the Count IP Addrs field.
l Authentication Data: Authentication key. Currently, this field is used only for simple authentication and is 0 for any other authentication modes.
II. IPv6-based VRRP packet format
Figure 1-3 IPv6-based VRRP packet format
As shown in Figure 1-3, an IPv6-based VRRP packet consists of the following fields:
l Version: Version number of the protocol, 3 for VRRPv3.
l Type: Type of the VRRP packet. Only one VRRP packet type is present, that is, VRRP advertisement, which is represented by 1.
l Virtual Rtr ID (VRID): Number of the virtual router, that is, number of the standby group. It ranges from 1 to 255.
l Priority: Priority of the router in the standby group, in the range 0 to 255. A greater value represents a higher priority. The priority of 0 is reserved for special purposes, while 255 is reserved for the IP address owner.
l Count IPv6 Addrs: Number of virtual IPv6 addresses for the standby group. A standby group can have multiple virtual IPv6 addresses.
l Auth Type: Authentication type. 0 means no authentication, 1 means simple authentication. VRRPv3 does not support MD5 authentication.
l Adver Int: Interval for sending advertisement packets, in seconds. The default is 1.
l Checksum: 16-bit checksum for validating the data in VRRPv3 packets.
l IPv6 Address: Virtual IPv6 address entry of the standby group. The allowed number is given by the Count IPv6 Addrs field.
l Authentication Data: Authentication key. Currently, this field is used only for simple authentication and is 0 for any other authentication modes.
1.1.4 Principles of VRRP
1) With VRRP enabled, the routers determine their respective roles in the standby group by priority. The router with the highest priority becomes the master, while the others are the backups. The master sends VRRP advertisement packets periodically to notify the backups that it is working properly, and each of the backups starts a timer to wait for advertisement packets from the master.
2) In preemption mode, when a backup receives a VRRP advertisement packet, it compares the priority in the packet with that of its own. If its priority is lower, it remains a backup; if they are the same, it compares the primary IP address; if the primary IP address is lower than that of the Master, it remains a backup; otherwise, it becomes the master.
3) In non-preemption mode, the router in the standby group remains as a master or backup as long as the master does not fail. The backup will no become the master even if the former is configured as a higher priority.
4) If the timer of a backup expires but the backup still does not receive any VRRP advertisement packet, it considers that the master fails and starts the election process to elect a new master for forwarding packets.
1.1.5 Operation Modes of VRRP (Taking IPv4-Based VRRP for Example)
I. Master/backup
In master/backup mode, only one router, the master, provides services. When the master fails, a new master is elected from the original backups. This mode requires only one standby group, in which each router holds different priorities and the one with the highest priority becomes the master, as shown in Figure 1-4.
Figure 1-4 VRRP in master/backup mode
At the beginning, RA is the master and therefore provides forwarding services, while RB and RC are backups and are thus in the state of listening. If RA fails, RB and RC will elect for the new master. The new master takes over the forwarding task to provide services to hosts on the LAN.
II. Load balancing
You can create more than one standby group on an interface of a router, allowing the router to be the master of one standby group but a backup of another at the same time.
In load balancing mode, multiple routers provide services at the same time. This mode requires two or more standby groups, each of which includes a master and one or more backups. The masters of the standby groups can be assumed by different routers, as shown in Figure 1-5.
Figure 1-5 VRRP in load balancing mode
A router can be in multiple standby groups and hold a different priority in different group.
In Figure 1-5, three standby groups are present:
l Standby group 1: RA is the master; RB and RC are the backups.
l Standby group 2: RB is the master; RA and RC are the backups.
l Standby group 3: RC is the master; RA and RB are the backups.
For load balancing among RA, RB, and RC, hosts on the LAN need to be configured to use standby group 1, 2, and 3 as the default gateways respectively. When configuring VRRP priorities, ensure that each router holds such a priority in each standby group that it will take the expected role in the group.
1.2 Configuring VRRP for IPv4
Complete these tasks to configure VRRP for IPv4:
|
Task |
Remarks |
|
Optional |
|
|
Configuring the Association Between MAC Address and Virtual IP Address |
Optional |
|
Required |
|
|
Configuring Router Priority, Preemption Mode and Interface Tracking |
Optional |
|
Optional |
1.2.1 Enabling Users to Ping Virtual IP Addresses
According to VRRPv2, the virtual IP addresses of a standby group cannot be pinged successfully. Thus, a user connected to the router is unable to rely on the ping command to judge whether or not an IP address has been used by the standby group. This may result in a user configuring the same IP address for the host and for the standby group. In this case, all the packets in this network segment will be sent to the host, instead of being correctly forwarded.
You can, however, follow the steps below to enable a user to successfully ping the virtual IP addresses of standby groups:
|
To do… |
Use the command… |
Remarks |
|
Enter system view |
system-view |
— |
|
Enable users to ping virtual IP address of the standby group |
vrrp ping-enable |
Optional Enabled by default. |
& Note:
The vrrp ping-enable command is available depending on your device.
Caution:
Configure this function before creating a standby group. Otherwise, your configuration will fail.
1.2.2 Configuring the Association Between MAC Address and Virtual IP Address
Based on the VRRP protocol, the virtual IP address of a standby group cannot be pinged through with the ping command. Therefore, the user connected with the router cannot use the ping command to judge whether an IP address has been used as a virtual IP address by the standby group. After the following configuration, you can ping through the virtual IP address of the standby group.
There are two types of association between MAC address and virtual IP address:
l Virtual IP address is associated with virtual router MAC address
l Virtual IP address is associated with real MAC address of the interface
Follow these steps to configure the association between MAC address and virtual IP address:
|
To do… |
Use the command… |
Remarks |
|
Enter system view |
system-view |
— |
|
Configure the association between virtual IP address and MAC address |
vrrp method { real-mac | virtual-mac } |
Optional The virtual IP address is associated with the virtual MAC address by default. |
& Note:
The vrrp method command is available depending on your device.
1.2.3 Creating Standby Group and Configuring Virtual IP Address
I. Configuration prerequisites
Before creating standby group and configuring virtual IP address, you should first configure the IP address of the interface and ensure that the virtual IP address to be configured is in the same network segment as the IP address of the interface.
II. Configuration procedure
Follow these steps to create standby group and configure virtual IP address:
|
To do… |
Use the command… |
Remarks |
|
Enter system view |
system-view |
— |
|
Enter the specified interface view |
interface interface-type interface-number |
— |
|
Create standby group and configure virtual IP address |
vrrp vrid virtual-router-id virtual-ip virtual-address |
Required Standup group is not created by default. |
Caution:
l A standby group is removed after you remove all the virtual IP addresses in it. In addition, configurations on that standby group no longer take effect.
l The virtual IP address of the standby group cannot be 0.0.0.0, 255.255.255.255, loopback address, non A/B/C address and other illegal IP addresses such as 0.0.0.1.
l Only when the configured virtual IP address and the interface IP address belong to the same segment and are legal host address can the standby group operate normally; otherwise, the state of the standby group is always Initialize.
1.2.4 Configuring Router Priority, Preemption Mode and Interface Tracking
I. Configuration prerequisites
Before you configure these features, you should first create a standby group on the interface and configure virtual IP address for it.
II. Configuration procedure
By configuring router priority, preemption mode and interface tracking, you can decide which router in the standby group serves as the Master.
Follow these steps to configure router priority, preemption mode and interface tracking:
|
To do… |
Use the command… |
Remarks |
|
Enter system view |
system-view |
— |
|
Enter interface view |
interface interface-type interface-number |
— |
|
Configure interface priority in the standby group |
vrrp vrid virtual-router-id priority priority-value |
Optional 100 by default. |
|
Configure preemption mode and preemption delay |
vrrp vrid virtual-router-id preempt-mode [ timer delay delay-value ] |
Optional The default is immediate preemption without delay. If preemption mode is disabled, the preemption delay changes to zero seconds automatically. |
|
Configure the interface to be tracked |
vrrp vrid virtual-router-id track interface interface-type interface-number [ reduced priority-reduced ] |
Optional No interface is being tracked by default. |
Caution:
l The VRRP for an IP address owner is always 255 and not configurable.
l Interface tracking is not configurable to an IP address owner.
l The interface to be tracked can be a Tunnel interface or a VLAN interface..
l The priority of a device is reset if the state of the interface under tracking changes from down to up.
1.2.5 Configuring VRRP Packet Attributes
I. Configuration prerequisites
Before configuring the relevant attributes of VRRP packets, you should first create the standby group and configure the virtual IP address.
II. Configuration procedure
Follow these steps to configure VRRP packet attributes:
|
To do... |
Use the command... |
Remarks |
|
Enter system view |
system-view |
— |
|
Enter the specified interface view |
interface interface-type interface-number |
— |
|
Configure the authentication mode and authentication key when the standby groups send and receive VRRP packets |
vrrp vrid virtual-router-id authentication-mode { md5 | simple } key |
Optional Authentication is not performed by default |
|
Configure the time interval to send VRRP advertisement |
vrrp vrid virtual-router-id timer advertise adver-interval |
Optional 1 second by default |
|
Disable TTL check on VRRP packets |
vrrp un-check ttl |
Optional Enabled by default |
You may configure different authentication modes and authentication keys for the standby groups on an interface. However, the members of the same standby group must use the same authentication mode and authentication key.
Factors like excessive traffic or different timer setting on routers can cause the Backup timer to time-out abnormally and trigger a change of the state. To solve this problem, you can prolong the time interval to send VRRP packets and configure a preemption delay.
1.2.6 Displaying and Maintaining VRRP for IPv4
|
To do... |
Use the command... |
Remarks |
|
Display VRRP status |
display vrrp [ interface interface-type interface-number [ vrid virtual-router-id ] ] |
Available in any view |
|
Display VRRP statistics |
display vrrp statistics [ interface interface-type interface-number [ vrid virtual-router-id ] ] |
Available in any view |
|
Remove VRRP statistics |
reset vrrp statistics [ interface interface-type interface-number [ vrid virtual-router-id ] ] |
Available in user view |
1.3 Configuring VRRP for IPv6
Complete these tasks to configure VRRP for IPv6:
|
Task |
Remarks |
|
Optional |
|
|
Configuring the Association Between MAC Address and Virtual IPv6 Address |
Optional |
|
Required |
|
|
Configuring Router Priority, Preemption Mode and Interface Tracking |
Optional |
|
Optional |
1.3.1 Enabling Users to Ping Virtual IPv6 Addresses
According to VRRPv3, the virtual IPv6 addresses of a standby group cannot be pinged successfully. Thus, a user connected to the router is unable to rely on the ping command to judge whether or not an IPv6 address has been used by a standby group. This may result in a user configuring the same IPv6 address for the host and for the standby group. In this case, all the packets in this network segment will be sent to the host, instead of being correctly forwarded.
You can, however, follow the steps below to enable a user to successfully ping the virtual IPv6 addresses of standby groups:
|
To do... |
Use the command... |
Remarks |
|
Enter system view |
system-view |
— |
|
Enable a user to ping virtual IPv6 address of the standby group |
vrrp ipv6 ping-enable |
Optional Enabled by default |
Caution:
You should configure this function before creating a standby group. If a standup group has been created on the router, you are not allowed to configure this function.
1.3.2 Configuring the Association Between MAC Address and Virtual IPv6 Address
Two types of association is available between MAC address and Virtual IPv6 address:
l Virtual IPv6 address is associated with the MAC address of virtual router
l Virtual IPv6 address is associated with the real MAC address of an interface
Follow these steps to configure the association between MAC address and virtual IPv6 address:
|
To do... |
Use the command... |
Remarks |
|
Enter system view |
system-view |
— |
|
Configure the association between MAC address and virtual IPv6 address |
vrrp ipv6 method { real-mac | virtual-mac } |
Optional The virtual IPv6 address is associated with the virtual MAC address by default. |
Caution:
You should configure this function before creating a standby group. If a standup group has been created on the router, you are not allowed to configure this function.
1.3.3 Creating Standby Group and Configuring Virtual IPv6 Address
I. Configuration prerequisites
Before creating standby group and configuring virtual IPv6 address, you should first configure the IPv6 address of the interface and ensure that the virtual IPv6 address to be configured is in the same network segment as the IPv6 address of the interface.
II. Configuration procedure
Follow these steps to create standby group and configure its virtual IPv6 address:
|
To do... |
Use the command... |
Remarks |
|
Enter system view |
system-view |
— |
|
Enter the specified interface view |
interface interface-type interface-number |
— |
|
Create a standby group and configure a virtual IPv6 address |
vrrp ipv6 vrid virtual-router-id virtual-ip virtual-address [ link-local ] |
Required The first virtual Ipv6 address of the standby group must be a link local address. Only one link local address is allowed in a standby group, and must be removed the last. |
Caution:
l The maximum number of standby groups on an interface and the maximum number of virtual IPv6 addresses in a standby group vary by device.
l A standby group is removed after you remove all the virtual IPv6 addresses in it. In addition, configurations on that standby group no longer take effect.
1.3.4 Configuring Router Priority, Preemption Mode and Interface Tracking
I. Configuration prerequisites
Before configuring these features, you should first create the standby group and configure the virtual IPv6 address.
II. Configuration procedure
By configuring router priority, preemption mode and interface tracking, you can decide which router in the standby group serves as the Master.
Follow these steps to configure router priority, preemption mode and interface tracking:
|
To do… |
Use the command… |
Remarks |
|
Enter system view |
system-view |
— |
|
Enter the specified interface view |
interface interface-type interface-number |
— |
|
Configure the priority of the interface in the standby group |
vrrp ipv6 vrid virtual-router-id priority priority-value |
Optional 100 by default |
|
Configure the preemption mode and preemption delay of the standby group |
vrrp ipv6 vrid virtual-router-id preempt-mode [ timer delay delay-value ] |
Optional The default is immediate preemption without delay. If preemption mode is disabled, the preemption delay changes to zero seconds automatically. |
|
Configure the interface to be tracked |
vrrp ipv6 vrid virtual-router-id track interface interface-type interface-number [ reduced priority-reduced ] |
Optional No interface is being tracked by default. |
Caution:
l The VRRP for an IP address owner is always 255 and not configurable.
l Interface tracking is not configurable on an IP address owner.
l The interface to be tracked can be a Tunnel interface or a VLAN interface.
l The priority of a device is reset if the state of the interface under tracking changes from down to up.
1.3.5 Configuring VRRP Packet Attributes
I. Configuration prerequisites
Before configuring the relevant attributes of VRRP packets, you should first create the standby group and configure the virtual IPv6 address.
II. Configuration procedure
Follow these steps to configure VRRP packet attributes:
|
To do… |
Use the command… |
Remarks |
|
Enter system view |
system-view |
— |
|
Enter the specified interface view |
interface interface-type interface-number |
— |
|
Configure the authentication mode and authentication key when the standby groups send and transmit VRRP packets |
vrrp ipv6 vrid virtual-router-id authentication-mode simple key |
Optional Authentication is not performed by default |
|
Configure the time interval to send VRRP advertisement |
vrrp ipv6 vrid virtual-router-id timer advertise adver-interval |
Optional By default, the interval is 100 centiseconds. |
You may configure different authentication modes and authentication keys for the standby groups on an interface. However, the members of the same standby group must use the same authentication mode and authentication key.
Factors like excessive traffic or different timer setting on routers can cause the Backup timer to time-out abnormally and change the state. To solve this problem, you can prolong the time interval to send VRRP packets and configure a delay for preemption.
1.3.6 Displaying and Maintaining VRRP for IPv6
|
To do… |
Use the command… |
Remarks |
|
Display VRRP status |
display vrrp ipv6 [ interface interface-type interface-number [ vrid virtual-router-id ] ] |
Available in any view |
|
Display VRRP statistics |
display vrrp ipv6 statistics [ interface interface-type interface-number [vrid virtual-router-id ] ] |
Available in any view |
|
Remove VRRP statistics |
reset vrrp ipv6 statistics [interface interface-type interface-number [vrid virtual-router-id ] ] |
Available in user view |
1.4 IPv4-Based VRRP Configuration Example (on Switches)
1.4.1 Single VRRP Standby Group Configuration Example
I. Network requirements
Host A uses the VRRP standby group formed by Switch A and Switch B as its default gateway to access Host B on the Internet.
The VRRP standby group has the following setting: the standby group ID is 1, the virtual IP address is 202.38.160.111. Switch A is the master and Switch B is the backup; preemption is allowed.
II. Network diagram
Figure 1-6 Network diagram for single VRRP standby group configuration
III. Configuration procedure
1) Configure Switch A
# Configure VLAN 2.
<SwitchA> system-view
[SwitchA] vlan 2
[SwitchA-vlan2] port Ethernet 1/0/6
[SwitchA-vlan2] quit
[SwitchA] interface vlan-interface 2
[SwitchA-Vlan-interface2] ip address 202.38.160.1 255.255.255.0
[SwitchA-Vlan-interface2] quit
# Create standby group 1 and set its virtual IP address to 202.38.160.111.
[SwitchA] interface vlan 2
[SwitchA-Vlan-interface2] vrrp vrid 1 virtual-ip 202.38.160.111
# Set the priority of Switch A in standby group 1 to 110.
[SwitchA-Vlan-interface2] vrrp vrid 1 priority 110
# Set Switch A to work in preemption mode. The preemption delay is five seconds.
[SwitchA-Vlan-interface2] vrrp vrid 1 preempt-mode
2) Configure Switch B
# Configure VLAN 2.
<SwitchB> system-view
[SwitchB] vlan 2
[SwitchB-Vlan2] port Ethernet 1/0/5
[SwitchB-vlan2] quit
[SwitchB] interface vlan-interface 2
[SwitchB-Vlan-interface2] ip address 202.38.160.2 255.255.255.0
[SwitchB-Vlan-interface2] quit
# Create standby group 1 and set its virtual IP address to 202.38.160.111.
[SwitchB] interface vlan 2
[SwitchB-Vlan-interface2] vrrp vrid 1 virtual-ip 202.38.160.111
# Set Switch B to work in preemption mode. The preemption delay is five seconds.
[SwitchB-Vlan-interface2] vrrp vrid 1 preempt-mode
3) Verify the configuration result.
After the above configuration, you can successfully ping host B from host A. Use the display vrrp command to view the configuration result.
# View the detailed information about standby group 1 on Switch A.
[SwitchA-Vlan-interface2] display vrrp
IPv4 Standby Information:
Run Method : VIRTUAL-MAC
Virtual Ip Ping : Enable
Interface : vlan-interface 2
VRID : 1 Adver. Timer : 1
Admin Status : UP State : Master
Config Pri : 110 Run Pri : 110
Preempt Mode : YES Delay Time : 5
Auth Type : NONE
Virtual IP : 202.38.160.111
Virtual MAC : 0000-5e00-0101
Master IP : 202.38.160.1
# View the detailed information about standby group 1 on Switch B.
[SwitchB-Vlan-interface2] display vrrp
IPv4 Standby Information:
Run Method : VIRTUAL-MAC
Virtual Ip Ping : Enable
Interface : vlan-interface 2
VRID : 1 Adver. Timer : 1
Admin Status : UP State : Backup
Config Pri : 100 Run Pri : 100
Preempt Mode : YES Delay Time : 0
Auth Type : NONE
Virtual IP : 202.38.160.111
Master IP : 202.38.160.1
The above output information shows that Switch A serves as master (which forwards packets from host A to host B) and Switch B serves as a backup router.
After Switch A fails, you can still ping host B on host A. Use the display vrrp command to view the detailed information about the standby group on Switch B.
# After Switch A fails, display detailed information about standby group 1 on Switch B.
[SwitchB- Vlan-interface2] display vrrp
IPv4 Standby Information:
Run Method : VIRTUAL-MAC
Virtual Ip Ping : Enable
Interface : vlan-interface 2
VRID : 1 Adver. Timer : 1
Admin Status : UP State : Master
Config Pri : 100 Run Pri : 100
Preempt Mode : YES Delay Time : 0
Auth Type : NONE
Virtual IP : 202.38.160.111
Virtual MAC : 0000-5e00-0101
Master IP : 202.38.160.2
The above output information shows that Switch B serves as the master (which forwards packets from host A to host B) after Switch A fails.
1.4.2 VRRP Interface Tracking Configuration Example
I. Network requirements
l Host A needs to access host B on the Internet. The default gateway of host A is 202.38.160.111/24.
l Switch A and Switch B belong to standby group 1 with the virtual IP address 202.38.160.111.
l When Switch A works normally, it forwards the packets that host A sends to host B. When VLAN-interface 3 through which Switch A is connected with Internet fails, Switch B forwards the packets that host A sends to host B.
II. Network diagram
Figure 1-7 Network diagram for VRRP interface tracking
III. Configuration procedure
1) Configure Switch A
# Configure VLAN 2.
<SwitchA> system-view
[SwitchA] vlan 2
[SwitchA-vlan2] port Ethernet 1/0/6
[SwitchA-vlan2] quit
[SwitchA] interface vlan-interface 2
[SwitchA-Vlan-interface2] ip address 202.38.160.1 255.255.255.0
[SwitchA-Vlan-interface2] quit
# Create a standby group 1 and set its virtual IP address to 202.38.160.111.
[SwitchA] interface vlan-interface 2
[SwitchA-Vlan-interface2] vrrp vrid 1 virtual-ip 202.38.160.111
# Configure the priority of Switch A in the standby group to 110.
[SwitchA-Vlan-interface2] vrrp vrid 1 priority 110
# Configure the authentication mode of the standby group to simple and authentication key to hello.
[SwitchA-Vlan-interface2] vrrp authentication-mode simple hello
# Set the interval for Master to send VRRP advertisement to five seconds.
[SwitchA-Vlan-interface2] vrrp vrid 1 timer advertise 5
# Set the interface to be tracked.
[SwitchA-Vlan-interface2] vrrp vrid 1 track vlan-interface 3 reduced 30
2) Configure Switch B
# Configure VLAN 2.
<SwitchB> system-view
[SwitchB] vlan 2
[SwitchB-vlan2] port Ethernet 1/0/5
[SwitchB-vlan2] quit
[SwitchB] interface vlan-interface 2
[SwitchB-Vlan-interface2] ip address 202.38.160.2 255.255.255.0
[SwitchB-Vlan-interface2] quit
# Create a standby group 1 and set its virtual IP address to 202.38.160.111.
[SwitchB] interface vlan-interface 2
[SwitchB-Vlan-interface2] vrrp vrid 1 virtual-ip 202.38.160.111
# Configure the authentication mode of the standby group to simple and authentication key to hello.
[SwitchB-Vlan-interface2] vrrp authentication-mode simple hello
# Set the interval for Master to send VRRP advertisement to five seconds.
[SwitchB-Vlan-interface2] vrrp vrid 1 timer advertise 5
3) Verify the configuration result.
After the configuration, you can successfully ping host B from host A. Use the display vrrp command to view the configuration.
# View the detailed information about standby group 1 on Switch A.
[SwitchA-Vlan-interface2] display vrrp
IPv4 Standby Information:
Run Method : VIRTUAL-MAC
Virtual Ip Ping : Enable
Interface : vlan-interface 2
VRID : 1 Adver. Timer : 5
Admin Status : UP State : Master
Config Pri : 110 Run Pri : 110
Preempt Mode : YES Delay Time : 5
Auth Type : SIMPLE TEXT Key : hello
Track IF : vlan-interface 3 Pri Reduced : 30
Virtual IP : 202.38.160.111
Virtual MAC : 0000-5e00-0101
Master IP : 202.38.160.1
# View the detailed information about standby group 1 on Switch B.
[SwitchB-vlan-interface 2] display vrrp
IPv4 Standby Information:
Run Method : VIRTUAL-MAC
Virtual Ip Ping : Enable
Interface : vlan-interface 2
VRID : 1 Adver. Timer : 5
Admin Status : UP State : Backup
Config Pri : 100 Run Pri : 100
Preempt Mode : YES Delay Time : 5
Auth Type : SIMPLE TEXT Key : hello
Virtual IP : 202.38.160.111
Master IP : 202.38.160.1
The above output information shows that Switch A serves as master (which forwards packets from host A to host B) and Switch B serves as a backup router.
When VLAN-interface 3 through which Switch A is connected with Internet fails, you can still ping host B on host A. Use the display vrrp command to view the detailed information about the standby group.
# When VLAN-interface 3 of Switch A fails, view the detailed information about standby group 1 on Switch A.
[SwitchA-Vlan-interface2] display vrrp
IPv4 Standby Information:
Run Method : VIRTUAL-MAC
Virtual Ip Ping : Enable
Interface : Vlan-interface2
VRID : 1 Adver. Timer : 5
Admin Status : UP State : Backup
Config Pri : 110 Run Pri : 80
Preempt Mode : YES Delay Time : 5
Auth Type : SIMPLE TEXT Key : hello
Track IF : Vlan-interface2 Pri Reduced : 30
Virtual IP : 202.38.160.111
Master IP : 202.38.160.2
# When VLAN-interface 3 of Switch A fails, view the detailed information about standby group 1 on Switch B.
[SwitchB- Vlan-interface2] display vrrp
IPv4 Standby Information:
Run Method : VIRTUAL-MAC
Virtual Ip Ping : Enable
Interface : Vlan-interface2
VRID : 1 Adver. Timer : 5
Admin Status : UP State : Master
Config Pri : 100 Run Pri : 100
Preempt Mode : YES Delay Time : 5
Auth Type : SIMPLE TEXT Key : hello
Virtual IP : 202.38.160.111
Virtual MAC : 0000-5e00-0101
Master IP : 202.38.160.2
The above output information shows that Switch A’s priority is reduced to 80 when VLAN-interface 3 fails. Switch A becomes a backup and Switch B serves as master which forwards packets from host A to host B.
1.4.3 Multiple VRRP Standby Group Configuration Example
I. Network requirements
Some hosts on segment 202.28.160.0/24 use 202.38.160.111/24 as default gateway and some other hosts on the segment use 202.38.160.112/24 as default gateway.
Implement load balancing and mutual backup between the default gateways by using VRRP standby groups.
II. Network diagram
Figure 1-8 Network diagram for multiple VRRP standby group configuration
III. Configuration procedure
1) Configure Switch A
# Configure VLAN 2.
<SwitchA> system-view
[SwitchA] vlan 2
[SwitchA-vlan2] port Ethernet 1/0/6
[SwitchA-vlan2] quit
[SwitchA] interface vlan-interface 2
[SwitchA-Vlan-interface2] ip address 202.38.160.1 255.255.255.0
[SwitchA-Vlan-interface2] quit
# Create standby group 1 and set its virtual IP address to 202.38.160.111.
[SwitchB] interface vlan-interface 2
[SwitchA-Vlan-interface2] vrrp vrid 1 virtual-ip 202.38.160.111
# Configure the priority of Switch A in standby group 1 to 150.
[SwitchA-Vlan-interface2] vrrp vrid 1 priority 150
# Create standby group 2 and set its virtual IP address to 202.38.160.112.
[SwitchA-Vlan-interface2] vrrp vrid 2 virtual-ip 202.38.160.112
2) Configure Switch B
# Configure VLAN 2.
<SwitchB> system-view
[SwitchB] vlan 2
[SwitchB-vlan2] port Ethernet 1/0/6
[SwitchB-vlan2] quit
[SwitchB] interface vlan-interface 2
[SwitchB-Vlan-interface2] ip address 202.38.160.2 255.255.255.0
# Create standby group 1 and set its virtual IP address to 202.38.160.111.
[SwitchB-Vlan-interface2] vrrp vrid 1 virtual-ip 202.38.160.111
# Create a standby group 2 and set its virtual IP address to 202.38.160.112.
[SwitchB-Vlan-interface2] vrrp vrid 2 virtual-ip 202.38.160.112
# Configure the priority of Switch B in standby group 2 to 110.
[SwitchB-Vlan-interface2] vrrp vrid 2 priority 110
3) Verify the configuration result.
Use the display vrrp command to view the configuration result.
# View the detailed information about standby groups on Switch A.
[SwitchA-Vlan-interface2] display vrrp
IPv4 Standby Information:
Run Method : VIRTUAL-MAC
Virtual Ip Ping : Enable
Interface : Vlan-interface2
VRID : 1 Adver. Timer : 1
Admin Status : UP State : Master
Config Pri : 150 Run Pri : 150
Preempt Mode : YES Delay Time : 0
Auth Type : NONE
Virtual IP : 202.38.160.111
Virtual MAC : 0000-5e00-0101
Master IP : 202.38.160.1
Interface : Vlan-interface2
VRID : 2 Adver. Timer : 1
Admin Status : UP State : Backup
Config Pri : 100 Run Pri : 100
Preempt Mode : YES Delay Time : 0
Auth Type : NONE
Virtual IP : 202.38.160.112
Master IP : 202.38.160.2
# View the detailed information about standby groups on Switch B.
[SwitchB-Vlan-interface2] display vrrp
IPv4 Standby Information:
Run Method : VIRTUAL-MAC
Virtual Ip Ping : Enable
Interface : Vlan-interface2
VRID : 1 Adver. Timer : 1
Admin Status : UP State : Backup
Config Pri : 100 Run Pri : 100
Preempt Mode : YES Delay Time : 0
Auth Type : NONE
Virtual IP : 202.38.160.111
Master IP : 202.38.160.1
Interface : Vlan-interface2
VRID : 2 Adver. Timer : 1
Admin Status : UP State : Master
Config Pri : 110 Run Pri : 110
Preempt Mode : YES Delay Time : 0
Auth Type : NONE
Virtual IP : 202.38.160.112
Virtual MAC : 0000-5e00-0102
Master IP : 202.38.160.2
The above output information shows that in standby group 1, Switch A serves as master and Switch B serves as a backup device. The hosts using default gateway 202.38.160.111/24 access Internet through Switch A. In standby group 2, Switch A serves as a backup device and Switch B serves as master. The hosts using default gateway 202.38.160.112/24 access Internet through Switch B.
1.5 IPv6-Based VRRP Configuration Example
This section provides these configuration examples:
l Single VRRP Standby Group Configuration Example
l VRRP Interface Tracking Configuration Example
l Multiple VRRP Standby Group Configuration Example
1.5.1 Single VRRP Standby Group Configuration Example
I. Network requirements
l Host A needs to access host B on the Internet. The default gateway of host A is FE80::10.
l Switch A and Switch B belong to standby group 1 with virtual IPv6 address FE80::10.
l When Switch A works normally, it forwards the packets that host A sends to host B. When Switch A fails, Switch B forwards the packets that host A sends to host B.
II. Network diagram
Figure 1-9 Network diagram for single VRRP standby group configuration
III. Configuration procedure
1) Configure Switch A
# Configure VLAN 2.
<SwitchA> system-view
[SwitchA] ipv6
[SwitchA] vlan 2
[SwitchA-vlan2] port Ethernet 1/0/5
[SwitchA-vlan2] quit
[SwitchA] interface vlan-interface 2
[SwitchA-Vlan-interface2] ipv6 address fe80::1 link-local
[SwitchA-Vlan-interface2] ipv6 address 1::1 64
# Create standby group 1 and configure the virtual IP address of standby group 1 as fe80::10.
[SwitchA-Vlan-interface2] vrrp ipv6 vrid 1 virtual-ip fe80::10 link-local
# Set Switch A’s priority in standby group 1 to 110.
[SwitchA-Vlan-interface2] vrrp ipv6 vrid 1 priority 110
# Configure Switch A to work in the preempt mode.
[SwitchA-Vlan-interface2] vrrp ipv6 vrid 1 preempt-mode
# Configure to allow advertising RA messages.
[SwitchA-Vlan-interface2] undo ipv6 nd ra halt
2) Configure Switch B.
# Configure VLAN 2.
<SwitchB> system-view
[SwitchB] ipv6
[SwitchB] vlan 2
[SwitchB-vlan2] port Ethernet 1/0/5
[SwitchB-vlan2] quit
[SwitchB] interface vlan-interface 2
[SwitchB-Vlan-interface2] ipv6 address fe80::2 link-local
[SwitchB-Vlan-interface2] ipv6 address 1::2 64
# Create standby group 1 and configure the virtual IP address of standby group 1 as fe80::10.
[SwitchB-Vlan-interface2] vrrp ipv6 vrid 1 virtual-ip fe80::10 link-local
# Configure to allow advertising RA messages.
[SwitchB-Vlan-interface2] undo ipv6 nd ra halt
& Note:
By default, RA messages are not allowed to be advertised.
3) Verify the configuration result.
After the configuration, you can successfully ping host B from host A. Use the display vrrp ipv6 command to view the configuration result.
# View the detailed information about backup group 1 on Switch A.
[SwitchA-Vlan-interface2] display vrrp ipv6
IPv6 Standby Information:
Run Method : VIRTUAL-MAC
Virtual Ip Ping : Enable
Interface : Vlan-interface2
VRID : 1 Adver. Timer : 100
Admin Status : UP State : Master
Config Pri : 110 Run Pri : 110
Preempt Mode : YES Delay Time : 0
Auth Type : NONE
Virtual IP : FE80::10
Virtual MAC : 0000-5e00-0201
Master IP : FE80::1
# View the detailed information about standby group 1 on Switch B.
[SwitchB-Vlan-interface2] display vrrp ipv6
IPv6 Standby Information:
Run Method : VIRTUAL-MAC
Virtual Ip Ping : Enable
Interface : Vlan-interface2
VRID : 1 Adver. Timer : 100
Admin Status : UP State : Backup
Config Pri : 100 Run Pri : 100
Preempt Mode : YES Delay Time : 0
Auth Type : NONE
Virtual IP : FE80::10
Master IP : FE80::1
The above output information shows that Switch A serves as master and Switch B serves as a backup device. Switch A forwards the packets that host A sends to host B.
After Switch A fails, you can still ping host B on host A. Use the display vrrp ipv6 command to view the detailed information about the standby group on Switch B.
# After Switch A fails, display detailed information about standby group 1 on Switch B.
[SwitchB-Vlan-interface2] display vrrp ipv6
IPv6 Standby Information:
Run Method : VIRTUAL-MAC
Virtual Ip Ping : Enable
Interface : Vlan-interface2
VRID : 1 Adver. Timer : 100
Admin Status : UP State : Master
Config Pri : 100 Run Pri : 100
Preempt Mode : YES Delay Time : 0
Auth Type : NONE
Virtual IP : FE80::10
Virtual MAC : 0000-5e00-0201
Master IP : FE80::2
The above output information shows that Switch B serves as master after Switch A fails. Switch B forwards the packets that host A sends to host B.
1.5.2 VRRP Interface Tracking Configuration Example
I. Network requirements
l Host A needs to access host B on the Internet. The default gateway of host A is FE80::10.
l Switch A and Switch B belong to standby group 1 with virtual IPv6 address FE80::10.
l When Switch A works normally, it forwards the packets that host A sends to host B. When VLAN-interface 3 through which Switch A is connected with Internet fails, Switch B forwards the packets that host A sends to host B.
II. Network diagram
Figure 1-10 Network diagram for VRRP interface tracking
III. Configuration procedure
1) Configure Switch A
# Configure VLAN 2.
<SwitchA> system-view
[SwitchA] ipv6
[SwitchA] vlan 2
[SwitchA-vlan2] port Ethernet 1/0/5
[SwitchA-vlan2] quit
[SwitchA] interface vlan-interface 2
[SwitchA-Vlan-interface2] ipv6 address fe80::1 link-local
[SwitchA-Vlan-interface2] ipv6 address 1::1 64
# Create standby group 1 and configure the virtual IP address of standby group 1 as fe80::10.
[SwitchA-Vlan-interface2] vrrp ipv6 vrid 1 virtual-ip fe80::10 link-local
# Set Switch A’s priority in standby group 1 to 110.
[SwitchA-Vlan-interface2] vrrp ipv6 vrid 1 priority 110
# Configure the authentication mode to SIMPLE and the authentication key as hello.
[SwitchA-Vlan-interface2] vrrp ipv6 vrid 1 authentication-mode simple hello
# Configure the interval for sending VRRP advertisement packets to 500 centiseconds.
[SwitchA-Vlan-interface2] vrrp ipv6 vrid 1 timer advertise 500
# Configure Switch A to work in the preempt mode and the preempting delay as five seconds.
[SwitchA-Vlan-interface2] vrrp ipv6 vrid 1 preempt-mode timer delay 5
# Configure VLAN-interface 3 as a tracked interface.
[SwitchA-Vlan-interface2] vrrp ipv6 vrid 1 track interface vlan-interface 3 reduced 30
2) Configure Switch B.
# Configure VLAN 2.
<SwitchB> system-view
[SwitchB] ipv6
[SwitchB] vlan 2
[SwitchB-vlan2] port Ethernet 1/0/5
[SwitchB-vlan2] quit
[SwitchB] interface vlan-interface 2
[SwitchB-Vlan-interface2] ipv6 address fe80::2 link-local
[SwitchB-Vlan-interface2] ipv6 address 1::2 64
# Create standby group 1 and configure the virtual IP address of standby group 1 as fe80::10.
[SwitchB-Vlan-interface2] vrrp ipv6 vrid 1 virtual-ip fe80::10 link-local
# Configure the authentication mode to SIMPLE and the authentication key as hello.
[SwitchB-Vlan-interface2] vrrp ipv6 vrid 1 authentication-mode simple hello
# Configure the interval for sending VRRP advertisement packets to 500 centiseconds.
[SwitchB-Vlan-interface2] vrrp ipv6 vrid 1 timer advertise 500
# Configure Switch B to work in the preempt mode and the preempting delay as five seconds.
[SwitchB-Vlan-interface2] vrrp ipv6 vrid 1 preempt-mode timer delay 5
3) Verify the configuration result.
After the configuration, you can successfully ping host B from host A. Use the display vrrp ipv6 command to view the configuration result.
# View the detailed information about standby group 1 on Switch A.
[SwitchA-Vlan-interface2] display vrrp ipv6
IPv6 Standby Information:
Run Method : VIRTUAL-MAC
Virtual Ip Ping : Enable
Interface : Vlan-interface2
VRID : 1 Adver. Timer : 500
Admin Status : UP State : Master
Config Pri : 110 Run Pri : 110
Preempt Mode : YES Delay Time : 5
Auth Type : SIMPLE TEXT Key : hello
Track IF : Vlan-interface3 Pri Reduced : 30
Virtual IP : FE80::10
Virtual MAC : 0000-5e00-0201
Master IP : FE80::1
# View the detailed information about standby group 1 on Switch B.
[SwitchB-Vlan-interface2] display vrrp ipv6
IPv6 Standby Information:
Run Method : VIRTUAL-MAC
Virtual Ip Ping : Enable
Interface : Vlan-interface2
VRID : 1 Adver. Timer : 500
Admin Status : UP State : Backup
Config Pri : 100 Run Pri : 100
Preempt Mode : YES Delay Time : 5
Auth Type : SIMPLE TEXT Key : hello
Virtual IP : FE80::10
Master IP : FE80::1
The above output information shows that Switch A serves as master and Switch B serves as a backup device. Switch A forwards the packets that host A sends to host B.
When VLAN-interface 3 through which Switch A is connected with Internet fails, you can still ping host B on host A. Use the display vrrp ipv6 command to view the detailed information about the standby group.
# When VLAN-interface 3 of Switch A fails, view the detailed information about standby group 1 on Switch A.
[SwitchA-Vlan-interface2] display vrrp ipv6
IPv6 Standby Information:
Run Method : VIRTUAL-MAC
Virtual Ip Ping : Enable
Interface : Vlan-interface2
VRID : 1 Adver. Timer : 500
Admin Status : UP State : Backup
Config Pri : 110 Run Pri : 80
Preempt Mode : YES Delay Time : 5
Auth Type : SIMPLE TEXT Key : hello
Track IF : Vlan-interface3 Pri Reduced : 30
Virtual IP : FE80::10
Master IP : FE80::2
# When VLAN-interface 3 of Switch A fails, view the detailed information about standby group 1 on Switch B.
[SwitchB-Vlan-interface2] display vrrp ipv6
IPv6 Standby Information:
Run Method : VIRTUAL-MAC
Virtual Ip Ping : Enable
Interface : Vlan-interface2
VRID : 1 Adver. Timer : 500
Admin Status : UP State : Master
Config Pri : 100 Run Pri : 100
Preempt Mode : YES Delay Time : 5
Auth Type : SIMPLE TEXT Key : hello
Virtual IP : FE80::10
Virtual MAC : 0000-5e00-0201
Master IP : FE80::2
The above output information shows that Switch A’s priority is reduced to 80 when VLAN-interface 3 fails. Switch A becomes a backup device and Switch B serves as master. Switch B forwards the packets that host A sends to host B.
1.5.3 Multiple VRRP Standby Group Configuration Example
I. Network requirements
l Some hosts in the network use FE80::10 as default gateway and some other hosts in the network use FE80::20 as default gateway.
l Implement load balancing and mutual backup between the default gateways by using VRRP standby groups.
II. Network diagram
Figure 1-11 Network diagram for multiple VRRP standby group configuration
III. Configuration procedure
1) Configure Switch A.
# Configure VLAN 2.
<SwitchA> system-view
[SwitchA] ipv6
[SwitchA] vlan 2
[SwitchA-vlan2] port Ethernet 1/0/5
[SwitchA-vlan2] quit
[SwitchA] interface vlan-interface 2
[SwitchA-Vlan-interface2] ipv6 address fe80::1 link-local
[SwitchA-Vlan-interface2] ipv6 address 1::1 64
# Create standby group 1 and configure the virtual IP address of standby group 1 as fe80::10.
[SwitchA-Vlan-interface2] vrrp ipv6 vrid 1 virtual-ip fe80::10 link-local
# Set Switch A’s priority in standby group 1 to 110.
[SwitchA-Vlan-interface2] vrrp ipv6 vrid 1 priority 110
# Create standby group 2 and configure the virtual IP address of standby group 2 as fe80::20.
[SwitchA-Vlan-interface2] vrrp ipv6 vrid 2 virtual-ip fe80::20 link-local
2) Configure Switch B.
# Configure VLAN 2.
<SwitchB> system-view
[SwitchB] ipv6
[SwitchB-vlan2] port Ethernet 1/0/5
[SwitchB-vlan2] quit
[SwitchB] interface vlan-interface 2
[SwitchB-Vlan-interface2] ipv6 address fe80::2 link-local
[SwitchB-Vlan-interface2] ipv6 address 1::2 64
# Create standby group 1 and configure the virtual IP address of standby group 1 as fe80::10.
[SwitchB-Vlan-interface2] vrrp ipv6 vrid 1 virtual-ip fe80::10 link-local
# Create standby group 2 and configure the virtual IP address of standby group 2 as fe80::20.
[SwitchB-Vlan-interface2] vrrp ipv6 vrid 2 virtual-ip fe80::20 link-local
# Set Switch B’s priority in standby group 2 to 110.
[SwitchB-Vlan-interface2] vrrp ipv6 vrid 2 priority 110
3) Verify the configuration result.
Use the display vrrp ipv6 command to view the configuration result.
# View the detailed information about the standby groups on Switch A.
[SwitchA-Vlan-interface2] display vrrp ipv6
IPv6 Standby Information:
Run Method : VIRTUAL-MAC
Virtual Ip Ping : Enable
Interface : Vlan-interface2
VRID : 1 Adver. Timer : 100
Admin Status : UP State : Master
Config Pri : 110 Run Pri : 110
Preempt Mode : YES Delay Time : 0
Auth Type : NONE
Virtual IP : FE80::10
Virtual MAC : 0000-5e00-0201
Master IP : FE80::1
Interface : Vlan-interface2
VRID : 2 Adver. Timer : 100
Admin Status : UP State : Backup
Config Pri : 100 Run Pri : 100
Preempt Mode : YES Delay Time : 0
Auth Type : NONE
Virtual IP : FE80::20
Master IP : FE80::2
# View the detailed information about the standby groups on Switch B.
[SwitchB-Vlan-interface2] display vrrp ipv6
IPv6 Standby Information:
Run Method : VIRTUAL-MAC
Virtual Ip Ping : Enable
Interface : Vlan-interface2
VRID : 1 Adver. Timer : 100
Admin Status : UP State : Backup
Config Pri : 100 Run Pri : 100
Preempt Mode : YES Delay Time : 0
Auth Type : NONE
Virtual IP : FE80::10
Master IP : FE80::1
Interface : Vlan-interface2
VRID : 2 Adver. Timer : 100
Admin Status : UP State : Master
Config Pri : 110 Run Pri : 110
Preempt Mode : YES Delay Time : 0
Auth Type : NONE
Virtual IP : FE80::20
Virtual MAC : 0000-5e00-0202
Master IP : FE80::2
The above output information shows that in standby group 1, Switch A serves as master and Switch B serves as a backup device. The hosts using default gateway FE80::10 access Internet through Switch A. In standby group 2, Switch A serves as a backup device and Switch B serves as master. The hosts using default gateway FE80::20 access Internet through Switch B.
& Note:
Multiple standby groups are commonly used in actual networking. In IPv6 network, you need to manually configure the default gateway for VRRP standby group to share load.
1.6 Troubleshooting VRRP
Symptom 1:
The console screen displays error prompts frequently.
Analysis:
This error is probably due to the inconsistent configuration of the other router in the standby group, or that a device is attempting to send illegitimate VRRP packets.
Solution:
l In the first case, modify the configuration.
l In the latter case, you have to resort to non-technical measures.
Symptom 2:
Multiple masters are present in the same standby group.
Analysis:
l If presence of multiple masters only lasts a short period, this is normal and requires no manual intervention.
l If it lasts long, you must ensure that these masters can receive VRRP packets and the packets received are legitimate.
Solution:
Ping between these masters, and do the following:
l If the ping fails, check network connectivity.
l If the ping succeeds, check that their configurations are consistent in terms of number of virtual IP addresses, virtual IP addresses, advertisement interval, and authentication.
Symptom 3:
Frequent VRRP state transition.
Analysis:
The VRRP advertisement interval is set too short.
Solution:
Increase the Adver_Timer or introduce a preemption delay.
