H3C S9500 Command Manual-Release2132[V2.03]-08 System Volume

HomeSupportSwitchesH3C S9500 Series SwitchesReference GuidesCommand ReferencesH3C S9500 Command Manual-Release2132[V2.03]-08 System Volume
02-VRRP Commands
Title Size Download
02-VRRP Commands 121.7 KB

Chapter 1  VRRP Configuration Commands

1.1  IPv4-Based VRRP Configuration Commands

1.1.1  debugging vrrp packet

Syntax

debugging vrrp packet [ interface interface-type interface-number [ vrid virtual-router-id ] ]

undo debugging vrrp packet [ interface interface-type interface-number [ vrid virtual-router-id ] ]

View

User view

Default Level

1: Monitor level

Parameters

interface interface-type interface-number: Enables packet debugging for a specified interface, where interface-type interface-number indicates the interface type and interface number.

vrid virtual-router-id: Enables packet debugging for a VRRP group on a specified interface, where virtual-router-id indicates the VRRP group number.

Description

Use the debugging vrrp packet command to enable debugging for sending and receiving VRRP packets.

Use the undo debugging vrrp packet command to disable debugging for sending and receiving VRRP packets.

By default, debugging for sending and receiving VRRP packets is disabled.

Note that if debugging for sending and receiving VRRP packets is disabled globally but enabled for an interface or a VRRP group, the interface or the VRRP group can still output debugging information and you must use the undo command to disable the debugging. Disabling of global debugging does not disable debugging for a specific interface or VRRP group.

Examples

# Enable debugging for sending and receiving VRRP packets to debug all packets received on and sent from all the virtual VRRP groups on the device.

<Sysname> debugging vrrp packet

*Mar 26 18:38:46:513 2007 Sysname VRRP/7/DebugPacket:

IPv4 Vlan-interface2 | Virtual Router 1:receiving from 1.1.1.3, version = 2, type =1, priority = 120, count ip addrs = 1, timer = 1, auth type is no, checksum = 61796

IPv4 Vlan-interface2 | Virtual Router 1:sending from 1.1.1.2, version = 2, type = 1,priority = 120, count ip addrs = 1, timer = 1, auth type is no, checksum = 61725

# Enable debugging for sending and receiving all VRRP packets on VLAN-interface 2.

<Sysname> debugging vrrp packet interface Vlan-interface 2

*Mar 26 18:40:46:513 2007 Sysname VRRP/7/DebugPacket:

IPv4 Vlan-interface2 | Virtual Router 1:sending from 2.2.2.3, version = 2, type = 1,priority = 100, count ip addrs = 1, timer = 1, auth type is no, checksum = 63245

Table 1-1 debugging vrrp packet command output description

Field

Description

interface-name (Vlan-interface2)

Specified interface to send or receive VRRP packets

VRID (Virtual Router 1)

Serial number of the virtual router corresponding to the state change

Packet Action (receiving from)

VRRP packets sent or received

IpAddress (1.1.1.3)

IP address of the sending interface

version

VRRP version number, with that of IPv4 being version 2 and that of IPv6 being version 3

type

Type of the VRRP packet. Only one VRRP packet type is present, that is, VRRP advertisement.

priority

Priority of the switch sending VRRP packets in the VRRP group

count ip addrs

Number of IP addresses contained in the VRRP group

timer

Interval for sending advertisements, in seconds

auth type

Authentication type for the VRRP group

checksum

16-bit checksum

 

1.1.2  debugging vrrp state

Syntax

debugging vrrp state

undo debugging vrrp state

View

User view

Default Level

1: Monitor level

Parameters

None

Description

Use the debugging vrrp state command to enable VRRP state debugging.

Use the undo debugging vrrp state command to disable VRRP state debugging.

By default, VRRP state debugging is disabled.

Examples

# Enable VRRP state debugging.

<Sysname> debugging vrrp state

*Mar 26 18:45:05:735 2007 Sysname VRRP/7/DebugState:

IPv4 Vlan-interface2 | Virtual Router 1 :  BACKUP --> INITIALIZE

Table 1-2 debugging vrrp state command output description

Field

Description

interface-name (Vlan-interface2)

Interface to which the VRRP group in state change belongs

VRID (Virtual Router 1)

Virtual VRRP group number corresponding to the state change

state change (BACKUP --> INITIALIZE)

Standby group state change information, indicating state change from backup to initialize in this example

 

1.1.3  display vrrp

Syntax

display vrrp [ verbose ] [ interface interface-type interface-number [ vrid virtual-router-id ] ]

View

Any view

Default Level

1: Monitor level

Parameters

verbose: Displays detailed state information of VRRP.

interface interface-type interface-number: Displays VRRP state information of the specified interface. interface-type interface-number specifies an interface by its type and number.

vrid virtual-router-id: Displays state information of the specified VRRP group. virtual-router-id specifies a VRRP group by its group number.

Description

Use the display vrrp command to display the state information of VRRP.

If you do not specify verbose, only the brief state information of VRRP is displayed.

If you specify both interface and VRRP group, only the state information of the specified VRRP group is displayed; if you only specify an interface, the state information of all the VRRP groups on the interface is displayed; if you specify neither, the state information of all the VRRP groups on the device is displayed.

Examples

# Display brief information about all VRRP groups on the device.

<Sysname> display vrrp verbose

IPv4 Standby Information:

 Run Method      : VIRTUAL-MAC

 Virtual IP Ping : Enable

 Total number of virtual routers: 1

 Interface       : Vlan-interface100

 VRID            : 1                    Adver. Timer    : 1

 Admin Status    : UP                   State           : Master

 Config Pri      : 100                  Run Pri         : 100

 Preempt Mode    : YES                  Delay Time      : 0

 Auth Type       : NONE

 Track IF        : Vlan-interface200    Pri Reduced     : 10

 Virtual IP      : 10.10.10.2

 Virtual MAC     : 0000-5e00-0101

 Master IP       : 10.10.10.1

Table 1-3 display vrrp command output description

Field

Description

Run Method

Current VRRP running mode, real MAC or virtual MAC

Virtual IP Ping

Whether you can ping the virtual IP address of the VRRP group

Interface

Interface to which the VRRP group belongs

Total number of virtual routers

Number of VRRP groups

VRID

Serial number of the VRRP group

Adver. Timer

VRRP advertisement interval

Admin Status

Administrative state: UP or DOWN

State

Status of the switch in the VRRP group, master, backup, or initialize

Config Pri

Configured priority

Run Pri

Running priority

Preempt Mode

Preemption mode

Delay Time

Preemption delay

Auth Type

Authentication type

Track IF

The interface to be tracked. It is displayed only after the execution of the vrrp vrid track command.

Pri Reduced

The priority value that is reduced when the monitored interface is down or when the status of the monitored Track object turns to negative.
It is displayed only after the execution of the vrrp vrid track interface command or the vrrp vrid track command.

Virtual IP

Virtual IP addresses of the VRRP group

Virtual MAC

Virtual MAC address corresponding to the virtual IP address of the VRRP group. It is displayed only when the switch is in the state of master.

Master IP

Primary IP address of the interface to which the switch in the state of master belongs

 

1.1.4  display vrrp statistics

Syntax

display vrrp statistics [ interface interface-type interface-number [ vrid virtual-router-id ] ]

View

Any view

Default Level

1: Monitor level

Parameters

interface interface-type interface-number: Displays VRRP statistics of the specified interface. interface-type interface-number specifies an interface by its type and number.

vrid virtual-router-id: Displays statistics of the specified VRRP group. virtual-router-id specifies a VRRP group by its group number.

Description

Use the display vrrp statistics command to display statistics about VRRP.

If you specify both interface and VRRP group, only the statistics about the specified VRRP group are displayed; if you only specify an interface, the statistics about all the VRRP groups on the interface are displayed; if you specify neither, the statistics about all the VRRP groups on the device are displayed.

Examples

# Display the statistics about all VRRP groups.

<Sysname> display vrrp statistics

Interface              : Vlan-interface2020

 VRID                   : 15

 CheckSum Errors        : 0          Version Errors                 : 0

 Invalid Type Pkts Rcvd : 0          Advertisement Interval Errors  : 0

 IP TTL Errors          : 0          Auth Failures                  : 0

 Invalid Auth Type      : 0          Auth Type Mismatch             : 0

 Packet Length Errors   : 0          Address List Errors            : 0

 Become Master          : 2          Priority Zero Pkts Rcvd        : 0

 Advertise Rcvd         : 0          Priority Zero Pkts Sent        : 2

 Advertise Sent         : 12483

 

 Interface              : Vlan-interface2020

 VRID                   : 16

 CheckSum Errors        : 0          Version Errors                 : 0

 Invalid Type Pkts Rcvd : 0          Advertisement Interval Errors  : 0

 IP TTL Errors          : 0          Auth Failures                  : 0

 Invalid Auth Type      : 0          Auth Type Mismatch             : 0

 Packet Length Errors   : 0          Address List Errors            : 0

 Become Master          : 0          Priority Zero Pkts Rcvd        : 0

 Advertise Rcvd         : 0          Priority Zero Pkts Sent        : 0

 Advertise Sent         : 0

 

 Global statistics

 CheckSum Errors        : 0

 Version Errors         : 0

 VRID Errors            : 0

Table 1-4 display vrrp statistics command output description

Field

Description

Interface

Interface to which the VRRP group belongs

VRID

Serial number of the VRRP group

CheckSum Errors

Number of packets with checksum errors

Version Errors

Number of packets with version errors

Invalid Type Pkts Rcvd

Number of packets with incorrect packet type

Advertisement Interval Errors

Number of packets with advertisement interval errors

IP TTL Errors

Number of packets with TTL errors

Auth Failures

Number of packets with authentication failures

Invalid Auth Type

Number of packets with authentication failures due to invalid authentication types

Auth Type Mismatch

Number of packets with authentication failures due to mismatching authentication types

Packet Length Errors

Number of packets with VRRP packet length errors

Address List Errors

Number of packets with virtual IP address list errors

Become Master

Number of times that the switch worked as the master

Priority Zero Pkts Rcvd

Number of received advertisements with the priority of 0

Advertise Rcvd

Number of received advertisements

Advertise Sent

Number of advertisements sent

Global statistics

Statistics about all VRRP groups

CheckSum Errors

Total number of packets with checksum errors

Version Errors

Total number of packets with version errors

VRID Errors

Total number of packets with VRID errors

 

1.1.5  reset vrrp statistics

Syntax

reset vrrp statistics [ interface interface-type interface-number [ vrid virtual-router-id ] ]

View

User view

Default Level

1: Monitor level

Parameters

interface interface-type interface-number: Clears VRRP statistics of a specified interface. interface-type interface-number specifies an interface by its type and number.

vrid virtual-router-id: Clears VRRP statistics of the specified VRRP group. virtual-router-id specifies a VRRP group by its group number.

Description

Use the reset vrrp statistics command to clear VRRP statistics.

If you specify both the interface and VRRP group, the statistics about the specified VRRP group on the specified interface are cleared; if you specify only the interface, the statistics about all the VRRP groups on the interface are cleared; if you specify neither, the statistics about all the VRRP groups on the device are cleared.

Examples

# Clear the statistics about all the VRRP groups on the device.

<Sysname> reset vrrp statistics

1.1.6  vrrp vrid authentication-mode

Syntax

vrrp vrid virtual-router-id authentication-mode { md5 | simple } key

undo vrrp vrid virtual-router-id authentication-mode

View

VLAN interface view

Default Level

2: System level

Parameters

virtual-router-id: VRRP group number.

simple: Simple text authentication mode.

md5: Authentication header (AH) authentication using the MD5 algorithm.

key: Authentication key, case sensitive.

l           When simple authentication applies, the authentication key is in plain text with a length of 1 to 8 characters.

l           When md5 authentication applies, the authentication key is in MD5 cipher text or in plain text and the length of the key depends on its input format. If the key is input in plain text, its length is 1 to 8 characters, such as 1234567; if the key is input in ciphertext, its length must be 24 characters, such as _(TT8F]Y\5SQ=^Q`MAF4<1!!.

Description

Use the vrrp vrid authentication-mode command to configure authentication mode and authentication key for the VRRP groups to send and receive VRRP packets.

Use the undo vrrp vrid authentication-mode command to restore the default.

By default, authentication is disabled.

Note that:

l           Before executing the command, create a VRRP group on an interface and configure the virtual IP address of the VRRP group.

l           You may configure different authentication types and authentication keys for the VRRP groups on an interface. However, the members of the same VRRP group must use the same authentication mode and authentication key.

Examples

# Set the authentication mode and authentication key for VRRP group 1 on interface VLAN-interface 2 to send and receive VRRP packets.

<Sysname> system-view

[Sysname] interface vlan-interface 2

[Sysname-Vlan-interface2] vrrp vrid 1 virtual-ip 10.1.1.1

[Sysname-Vlan-interface2] vrrp vrid 1 authentication-mode simple Sysname

1.1.7  vrrp method

Syntax

vrrp method { real-mac | virtual-mac }

undo vrrp method

View

System view

Default Level

2: System level

Parameters

real-mac: Associates the real MAC address of the interface with the virtual IP address of the VRRP group.

virtual-mac: Associates the virtual MAC address with the virtual IP address of the VRRP group.

Description

Use the vrrp method command to set the mappings between the MAC addresses and the virtual IP addresses of the VRRP groups.

Use the undo vrrp method command to restore the default.

By default, the virtual MAC address of the VRRP group is associated with the virtual IP address.

Note that you need to configure the association between virtual IP address and MAC address before configuring a VRRP group. After a VRRP group is created, you cannot modify the association between virtual IP address and MAC address.

Examples

# Associate the virtual IP address of the VRRP group with the real MAC address of the interface.

<Sysname> system-view

[Sysname] vrrp method real-mac

1.1.8  vrrp ping-enable

Syntax

vrrp ping-enable

undo vrrp ping-enable

View

System view

Default Level

2: System level

Parameters

None

Description

Use the vrrp ping-enable command to enable users to ping the virtual IP addresses of VRRP groups.

Use the undo vrrp ping-enable command to disable the virtual IP addresses of VRRP groups from being pinged.

By default, the virtual IP addresses of VRRP groups can be pinged.

Perform this configuration before configuring a VRRP group.

Examples

# Enable users to ping the virtual IP addresses of VRRP groups.

<Sysname> system-view

[Sysname] vrrp ping-enable

1.1.9  vrrp un-check ttl

Syntax

vrrp un-check ttl

undo vrrp un-check ttl

View

VLAN interface view

Default Level

2: System level

Parameters

None

Description

Use the vrrp un-check ttl command to disable TTL check on VRRP packets.

Use the undo vrrp un-check ttl command to enable TTL check on VRRP packets.

By default, TTL check on VRRP packets is enabled.

Note that:

Before executing the command, create a VRRP group on an interface and configure the virtual IP address of the VRRP group.

Examples

# Disable TTL check on VRRP packets.

<Sysname> system-view

[Sysname] interface vlan-interface 2

[Sysname-Vlan-interface2] vrrp vrid 1 virtual-ip 10.1.1.1

[Sysname-Vlan-interface2] vrrp un-check ttl

1.1.10  vrrp vrid preempt-mode

Syntax

vrrp vrid virtual-router-id preempt-mode [ timer delay delay-value ]

undo vrrp vrid virtual-router-id preempt-mode [ timer delay ]

View

VLAN interface view

Default Level

2: System level

Parameters

virtual-router-id: VRRP group number.

timer delay delay-value: Sets the preemption delay, in seconds. In the preemptive mode, if you configure a preemption delay, the VRRP group member in the backup state will wait for the preemption delay after it waits for a period three times the advertisement interval before becoming the master.

Description

Use the vrrp vrid preempt-mode command to enable preemption on the switch and configure its preemption delay in the specified VRRP group.

Use the undo vrrp vrid preempt-mode command to disable preemption on the switch in the specified VRRP group.

Use the undo vrrp vrid preempt-mode timer delay command to restore the default preemption delay, that is, zero seconds.

The default mode is immediate preemption without delay.

On an instable network, the VRRP group member in the backup state may not normally receive the packets from the master member due to network congestion, resulting in frequent master/backup state transition of the VRRP group members. Preemption delay is introduced to solve this problem. With a preemption delay set, if the backup member does not receive the packet from the master member duly, it waits for a period to see whether it can receive any packet from the master. If the specified period elapses but it still receives no packet from the master, it becomes the master.

Note that before executing the command, you need to create a VRRP group on the interface and configure the virtual IP address of the VRRP group.

Examples

# Enable preemption on the switch in VRRP group 1, and set the preemption delay to five seconds.

<Sysname> system-view

[Sysname] interface vlan-interface 2

[Sysname-Vlan-interface2] vrrp vrid 1 preempt-mode timer delay 5

1.1.11  vrrp vrid priority

Syntax

vrrp vrid virtual-router-id priority priority-value

undo vrrp vrid virtual-router-id priority

View

VLAN interface view

Default Level

2: System level

Parameters

virtual-router-id: VRRP group number.

priority-value: Priority value of the switch in the specified VRRP group, with a higher number indicating a higher priority.

Description

Use the vrrp vrid priority command to configure the priority of the switch in the specified VRRP group.

Use the undo vrrp vrid priority command to restore the default.

By default, the priority of a switch in a VRRP group is 100.

l           Before executing the command, create a VRRP group on an interface and configure the virtual IP address of the VRRP group.

l           In VRRP, the role that a switch plays in a VRRP group depends on its priority. A higher priority means that the switch is more likely to become the master. Note that priority 0 is reserved for special use and 255 for the IP address owner.

l           If the switch is the IP address owner, its priority is always 255. Therefore, it will be the master so long as it is functioning normally.

Examples

# Set the priority of VRRP group 1 on interface VLAN-interface 2 to 150.

<Sysname> system-view

[Sysname] interface vlan-interface 2

[Sysname-Vlan-interface2] vrrp vrid 1 virtual-ip 10.1.1.1

[Sysname-Vlan-interface2] vrrp vrid 1 priority 150

1.1.12  vrrp vrid timer advertise

Syntax

vrrp vrid virtual-router-id timer advertise adver-interval

undo vrrp vrid virtual-router-id timer advertise

View

VLAN interface view

Default Level

2: System level

Parameters

virtual-router-id: VRRP group number.

adver-interval: Interval (in seconds) at which the master in the specified VRRP group sends VRRP advertisements.

Description

Use the vrrp vrid timer advertise command to configure the Adver_Timer of the specified VRRP group.

Use the undo vrrp vrid timer advertise command to restore the default.

By default the Adver_Timer is 1 second.

The Adver_Timer controls the interval at which the master sends VRRP packets.

Note that:

l           Before executing the command, create a VRRP group on an interface and configure the virtual IP address of the VRRP group.

l           Switches in the same VRRP group must use the same Adver_Timer setting.

Examples

# Set the master in VRRP group 1 to send VRRP advertisements at intervals of five seconds.

<Sysname> system-view

[Sysname] interface vlan-interface 2

[Sysname-Vlan-interface2] vrrp vrid 1 virtual-ip 10.1.1.1

[Sysname-Vlan-interface2] vrrp vrid 1 timer advertise 5

1.1.13  vrrp vrid track

Syntax

vrrp vrid virtual-router-id track interface interface-type interface-number [ reduced priority-reduced ]

undo vrrp vrid virtual-router-id track [ interface interface-type interface-number ]

View

VLAN interface view

Default Level

2: System level

Parameters

virtual-router-id: VRRP group number.

interface interface-type interface-number: Specifies an interface to be tracked by its type and number.

reduced priority-reduced: Value by which the priority decrements. If it is not specified, the default 10 applies.

Description

Use the vrrp vrid track command to configure to track the specified interface.

Use the undo vrrp vrid track command to disable tracking the specified interface.

By default, no interface is being tracked.

Note that:

l           Before executing the command, create a VRRP group on an interface and configure the virtual IP address of the VRRP group.

l           When the switch is the owner of the IP address, you cannot perform the configuration.

l           When the status of the tracked interface turns from down to up, the corresponding switch restores its priority automatically.

l           At present, the interface specified in this command can only be a VLAN interface for S9500 series switches.

Examples

# On interface VLAN-interface 2, set the interface to be tracked as VLAN-interface 1, making the priority of VRRP group 1 on interface VLAN-interface 2 decrease by 50 when VLAN-interface 1 goes down.

<Sysname> system-view

[Sysname] interface vlan-interface 2

[Sysname-Vlan-interface2] vrrp vrid 1 virtual-ip 10.1.1.1

[Sysname-Vlan-interface2] vrrp vrid 1 track interface vlan-interface 1 reduced 50

1.1.14  vrrp vrid virtual-ip

Syntax

vrrp vrid virtual-router-id virtual-ip virtual-address

undo vrrp vrid virtual-router-id [ virtual-ip virtual-address ]

View

VLAN interface view

Default Level

2: System level

Parameters

virtual-router-id: VRRP group number.

virtual-address: Virtual IP address.

Description

Use the vrrp vrid virtual-ip command to create a VRRP group the first time that you add a virtual IP address or add a virtual IP address to it after that.

Use the undo vrrp vrid virtual-router-id command to remove a VRRP group.

Use the undo vrrp vrid virtual-router-id virtual-ip virtual-address command to remove a virtual IP address from a VRRP group.

By default, no VRRP group is created.

Note that:

l           The system removes a VRRP group after you delete all the virtual IP addresses in it.

l           The virtual IP address of the VRRP group cannot be 0.0.0.0, 255.255.255.255, loopback address, non A/B/C address and other illegal IP addresses such as 0.0.0.1.

l           Only when the configured virtual IP address and the interface IP address belong to the same segment and are legal host addresses can the VRRP group operate normally. If they are not in the same network segment, or the configured IP address is the network address or network broadcast address of the network segment that the interface IP address belongs to, although you can perform the configuration successfully, the state of the VRRP group is always Initialize, that is, VRRP does not take effect in this case.

Examples

# Create VRRP group 1 and set its virtual IP address to 10.10.10.10.

<Sysname> system-view

[Sysname] interface vlan-interface 2

[Sysname-Vlan-interface2] vrrp vrid 1 virtual-ip 10.10.10.10

1.2  VRRP Configuration Commands for IPv6

1.2.1  debugging vrrp ipv6 packet

Syntax

debugging vrrp ipv6 packet [ interface interface-type interface-number [ vrid virtual-router-id ] ]

undo debugging vrrp ipv6 packet [ interface interface-type interface-number [ vrid virtual-router-id ] ]

View

User view

Default Level

1: Monitor level

Parameters

interface interface-type interface-number: Enables packet debugging for a specified interface, where interface-type indicates the interface type and interface-number indicates the interface number.

vrid virtual-router-id: Enables packet debugging for a VRRP group on a specified interface, where virtual-router-id indicates the VRRP group ID.

Description

Use the debugging vrrp ipv6 packet command to enable debugging for sending and receiving VRRP packets.

Use the undo debugging vrrp ipv6 packet command to disable debugging for sending and receiving VRRP packets.

By default, debugging for sending and receiving VRRP packets is disabled.

Note that if debugging for sending and receiving VRRP packets is disabled globally but enabled for an interface or a VRRP group, the interface or the VRRP group can still output debugging information and you must use the undo command to disable the debugging. Disabling of global debugging does not disable debugging for a specific interface or VRRP group.

Examples

# Enable debugging for sending and receiving VRRP packets and debug all packets received on and sent from all the VRRP groups on the device.

<Sysname> debugging vrrp ipv6 packet

<Sysname> terminal debugging

*Mar 26 19:30:11:499 2007 VRRP/7/DebugPacket:

 

 IPv6 Vlan-interface2 | Virtual Router 10:receiving from FE80::2, version = 3, type = 1, priority = 100, count ip addrs = 1, timer = 100, auth type is simple text, checksum = 34932

# Enable debugging for sending and receiving all VRRP packets on VLAN-interface 2.

<Sysname> debugging vrrp ipv6 packet interface Vlan-interface 2

*Mar 26 19:33:20:509 2007 VRRP/7/DebugPacket:

 IPv6 Vlan-interface2 | Virtual Router 10:receiving from FE80::2, version = 3, type = 1, priority = 100, count ip addrs = 1, timer = 100, auth type is simple text, checksum = 34932

Table 1-5 debugging vrrp ipv6 packet command output description

Field

Description

interface-name (Vlan-interface2)

Specified interface to send or receive VRRP packets

VRID (Virtual Router 10)

Serial number of the virtual router corresponding to the state change

Packet Action (receiving from)

VRRP packets sent or received

IPv6 Address (FE80::2)

IPv6 address of the sending interface

version

VRRP version number, with that of IPv4 being version 2 and that of IPv6 being version 3

type

Type of the VRRP packet. Only one VRRP packet type is present, that is, VRRP advertisement.

priority

Priority of the switch sending VRRP packets in the VRRP group

count ip addrs

Number of IPv6 addresses contained in the VRRP group

timer

Interval for sending advertisement packets, in centiseconds.

auth type

Authentication type for the VRRP group

checksum

16-bit checksum

 

1.2.2  debugging vrrp ipv6 state

Syntax

debugging vrrp ipv6 state

undo debugging vrrp ipv6 state

View

User view

Default Level

1: Monitor level

Parameters

None

Description

Use the debugging vrrp ipv6 state command to enable VRRP state debugging.

Use the undo debugging vrrp ipv6 state command to disable VRRP state debugging.

By default, VRRP state debugging is disabled.

Examples

# Enable VRRP state debugging.

<Sysname> debugging vrrp ipv6 state

*Mar 26 19:35:22:277 2007 VRRP/7/DebugState:

 IPv6 Vlan-interface2 | Virtual Router 10 :  BACKUP --> INITIALIZE

Table 1-6 debugging vrrp ipv6 state command output description

Field

Description

interface-name (Vlan-interface2)

Interface to which the VRRP group in state change belongs

VRID (Virtual Router 10)

Serial number of the virtual router corresponding to the state change

state change (BACKUP --> INITIALIZE)

VRRP group state change information, indicating state change from backup to initialize in this example

 

1.2.3  display vrrp ipv6

Syntax

display vrrp ipv6 [ verbose ] [ interface interface-type interface-number [ vrid virtual-router-id ] ]

View

Any view

Default Level

1: Monitor level

Parameters

verbose: Displays detailed state information of VRRP. If you do not specify verbose, only the brief state information of VRRP is displayed.

interface interface-type interface-number: Displays VRRP state information of the specified interface. interface-type interface-number specifies an interface by its type and number.

vrid virtual-router-id: Displays state information of the specified VRRP group. virtual-router-id specifies a VRRP group by its group number.

Description

Use the display vrrp ipv6 command to display the state information of VRRP for IPv6.

If you specify both interface and VRRP group, only the state information of the specified VRRP group is displayed; if you only specify an interface, the state information of all the VRRP groups on the interface is displayed; if you specify neither, the state information of all the VRRP groups on the device is displayed.

Examples

# Display detailed information about all VRRP groups on the device.

<Sysname>display vrrp ipv6 verbose

IPv6 Standby Information:

 Run Method      : VIRTUAL-MAC

 Virtual IP Ping : Enable

 Total number of virtual routers: 1

 Interface       : Vlan-interface100

 VRID            : 1                    Adver. Timer    : 100

 Admin Status    : UP                   State           : Master

 Config Pri      : 100                  Run Pri         : 100

 Preempt Mode    : YES                  Delay Time      : 0

 Auth Type       : NONE

 Track IF        : Vlan-interface200    Pri Reduced     : 10

 Virtual IP      : FE80::1

 Virtual MAC     : 0000-5e00-0201

 Master IP       : FE80::20F:E2FF:FE49:8060

Table 1-7 display vrrp ipv6 command output description

Field

Description

Run Method

Current VRRP running mode, real MAC or virtual MAC

Virtual IP Ping

Whether you can ping the virtual IPv6 address

Total number of virtual routers

Number of VRRP groups

Interface

Interface to which the VRRP group belongs

VRID

Serial number of the VRRP group

Adver. Timer

VRRP advertisement interval in centiseconds

Admin Status

Administrative state: UP or DOWN

State

Status of the switch in the VRRP group, master, backup, or initialize

Virtual IP

Virtual IPv6 address

Config Pri

Configured priority

Run Pri

Running priority

Preempt Mode

Preemption mode

Delay Time

Preemption delay

Auth Type

Authentication type

Track IF

The interface to be tracked. It is displayed only after the execution of the vrrp ipv6 vrid track command.

Pri Reduced

The priority value that is reduced when the interface being tracked is down.
It is displayed only after the execution of the vrrp ipv6 vrid track command.

Virtual IP

Virtual IPv6 addresses of the VRRP group

Virtual MAC

Virtual MAC address corresponding to the virtual IPv6 address of the VRRP group. It is displayed only when the switch is in the state of master.

Master IP

Primary IPv6 address of the interface to which the switch in the state of master belongs

 

1.2.4  display vrrp ipv6 statistics

Syntax

display vrrp ipv6 statistics [ interface interface-type interface-number [ vrid virtual-router-id ] ]

View

Any view

Default Level

1: Monitor level

Parameters

interface interface-type interface-number: Displays VRRP statistics information of the specified interface. interface-type interface-number specifies an interface by its type and number.

vrid virtual-router-id: Displays statistics information of the specified VRRP group. virtual-router-id specifies a VRRP group by its group number.

Description

Use the display vrrp ipv6 statistics command to display statistics about VRRP for IPv6.

If you specify both interface and VRRP group, only the statistics about the specified VRRP group are displayed; if you only specify an interface, the statistics about all the VRRP groups on the interface are displayed; if you specify neither, the statistics about all the VRRP groups on the device are displayed.

Examples

# Display the statistics about all VRRP groups for IPv6.

<Sysname> display vrrp ipv6 statistics

 Interface              : Vlan-interface3

 VRID                   : 1

 CheckSum Errors        : 0          Version Errors                 : 0

 Invalid Type Pkts Rcvd : 0          Advertisement Interval Errors  : 0

 Hop Limit Errors       : 0          Auth Failures                  : 0

 Invalid Auth Type      : 0          Auth Type Mismatch             : 0

 Packet Length Errors   : 0          Address List Errors            : 0

 Become Master          : 3          Priority Zero Pkts Rcvd        : 0

 Advertise Rcvd         : 7          Priority Zero Pkts Sent        : 2

 Advertise Sent         : 2351

 

 Interface              : Vlan-interface2020

 VRID                   : 1

 CheckSum Errors        : 0          Version Errors                 : 0

 Invalid Type Pkts Rcvd : 0          Advertisement Interval Errors  : 0

 Hop Limit Errors       : 0          Auth Failures                  : 0

 Invalid Auth Type      : 0          Auth Type Mismatch             : 0

 Packet Length Errors   : 0          Address List Errors            : 0

 Become Master          : 0          Priority Zero Pkts Rcvd        : 0

 Advertise Rcvd         : 0          Priority Zero Pkts Sent        : 0

 Advertise Sent         : 0

 

 Global statistics

 CheckSum Errors        : 0

 Version Errors         : 0

 VRID Errors            : 0

Table 1-8 display vrrp ipv6 statistics command output description

Field

Description

Interface

Interface to which the VRRP group belongs

VRID

VRRP group number

CheckSum Errors

Number of packets with checksum errors

Version Errors

Number of packets with version errors

Invalid Type Pkts Rcvd

Number of packets with incorrect packet type

Advertisement Interval Errors

Number of packets with advertisement interval errors

Hop Limit Errors

Number of packets with Hop Limit errors

Auth Failures

Number of packets with authentication failures

Invalid Auth Type

Number of packets with authentication failures due to invalid authentication types

Auth Type Mismatch

Number of packets with authentication failures due to mismatching authentication types

Packet Length Errors

Number of packets with VRRP packet length errors

Address List Errors

Number of packets with virtual IPv6 address list errors

Become Master

Number of times that the switch worked as the master

Priority Zero Pkts Rcvd

Number of received advertisements with the priority of 0

Advertise Rcvd

Number of received advertisements

Advertise Sent

Number of advertisements sent

Global statistics

Statistics about all VRRP groups

CheckSum Errors

Total number of packets with checksum errors

Version Errors

Total number of packets with version errors

VRID Errors

Total number of packets with VRID errors

 

1.2.5  reset vrrp ipv6 statistics

Syntax

reset vrrp ipv6 statistics [ interface interface-type interface-number [ vrid virtual-router-id ] ]

View

User view

Default Level

1: Monitor level

Parameters

interface interface-type interface-number: Clears VRRP statistics of a specific interface. interface-type interface-number specifies an interface by its type and number.

vrid virtual-router-id: Clears VRRP statistics of the specified VRRP group. virtual-router-id specifies a VRRP group by its group number.

Description

Use the reset vrrp ipv6 statistics command to clear VRRP statistics.

If you specify both the interface and VRRP group, the statistics about the specified VRRP group on the specified interface are cleared; if you specify only the interface, the statistics about all the VRRP groups on the interface are cleared; if you specify neither, the statistics about all the VRRP groups on the device are cleared.

Examples

# Clear the statistics about all the VRRP groups on the device.

<Sysname> reset vrrp ipv6 statistics

1.2.6  vrrp ipv6 vrid authentication-mode

Syntax

vrrp ipv6 vrid virtual-router-id authentication-mode simple key

undo vrrp ipv6 vrid virtual-router-id authentication-mode

View

VLAN interface view

Default Level

2: System level

Parameters

virtual-router-id: VRRP group number.

simple: Sets the authentication mode to simple text authentication.

key: Authentication key of 1 to 8 case-sensitive characters in plain text.

Description

Use the vrrp ipv6 vrid virtual-router-id authentication-mode simple key command to configure authentication mode and authentication key for the VRRP groups to send and receive VRRP packets.

Use the undo vrrp ipv6 vrid virtual-router-id authentication-mode command to restore the default.

By default, authentication is disabled.

Note that:

l           Before executing the command, create a VRRP group on an interface and configure the virtual IP address of the VRRP group.

l           You may configure different authentication types and authentication keys for the VRRP groups on an interface. However, the members of the same VRRP group must use the same authentication mode and authentication key.

Examples

# Set the authentication mode and authentication key for VRRP group 10 on interface VLAN-interface 2 to send and receive VRRP packets.

<Sysname> system-view

[Sysname] interface vlan-interface 2

[Sysname-Vlan-interface2] vrrp ipv6 vrid 10 virtual-ip fe80::2 link-local

[Sysname-Vlan-interface2]vrrp ipv6 vrid 10 authentication-mode simple test

1.2.7  vrrp ipv6 method

Syntax

vrrp ipv6 method { real-mac | virtual-mac }

undo vrrp ipv6 method

View

System view

Default Level

2: System level

Parameters

real-mac: Associates the real MAC address of the interface with the virtual IPv6 address of the VRRP group.

virtual-mac: Associates the virtual MAC address with the virtual IPv6 address of the VRRP group.

Description

Use the vrrp ipv6 method command to set the mappings between the virtual IPv6 addresses of the VRRP groups and the MAC addresses.

Use the undo vrrp ipv6 method command to restore the default.

By default, the virtual MAC address of the VRRP group is associated with the virtual IP address.

Configure the mapping between the virtual MAC address and the virtual IPv6 address before configuring a VRRP group. Otherwise, your configuration will fail.

Examples

# Associate the virtual IP address of the VRRP group with the real MAC address of the interface.

<Sysname> system-view

[Sysname] vrrp ipv6 method real-mac

1.2.8  vrrp ipv6 ping-enable

Syntax

vrrp ipv6 ping-enable

undo vrrp ipv6 ping-enable

View

System view

Default Level

2: System level

Parameters

None

Description

Use the vrrp ipv6 ping-enable command to enable users to ping the virtual IPv6 addresses of VRRP groups.

Use the undo vrrp ipv6 ping-enable command to disable the virtual IPv6 addresses of VRRP groups from being pinged.

By default, the virtual IP addresses of VRRP groups can be pinged.

Perform this configuration before configuring a VRRP group.

Examples

# Enable users to ping the virtual IPv6 addresses of VRRP groups.

<Sysname> system-view

[Sysname] vrrp ipv6 ping-enable

1.2.9  vrrp ipv6 vrid preempt-mode

Syntax

vrrp ipv6 vrid virtual-router-id preempt-mode [ timer delay delay-value ]

undo vrrp ipv6 vrid virtual-router-id preempt-mode [ timer delay ]

View

VLAN interface view

Default Level

2: System level

Parameters

virtual-router-id: VRRP group number.

timer delay delay-value: Sets preemption delay. In the preemptive mode, if you configure a preemption delay, the VRRP group member in the backup state will wait for the preemption delay after it waits for a period three times the advertisement interval before becoming the master.

Description

Use the vrrp ipv6 vrid preempt-mode command to configure preemption on the switch and configure its preemption delay in the specified VRRP group.

Use the undo vrrp ipv6 vrid preempt-mode command to disable preemption on the router in the specified VRRP group.

Use the undo vrrp ipv6 vrid preempt-mode timer delay command to restore the default preemption delay, that is, zero seconds.

The default mode is immediate preemption without delay.

If you set the router in the VRRP group to work in non-preemption mode, the delay period changes to zero seconds automatically.

On an instable network, the VRRP group member in the backup state may not normally receive the packets from the master member due to network congestion, resulting in frequent master/backup state transition of the VRRP group members. Preemption delay is introduced to solve this problem. With a preemption delay set, if the backup member does not receive the packet from the master member duly, it waits for a period to see whether it can receive any packet from the master. If the specified period elapses but it still receives no packet from the master, it becomes the master.

Note that before executing the command, you need to create a VRRP group on the interface and configure the virtual IPv6 address of the VRRP group.

Examples

# Enable preemption on the device and set the preemption delay to five seconds.

<Sysname> system-view

[Sysname] interface vlan-interface 2

[Sysname-Vlan-interface2] vrrp ipv6 vrid 80 virtual-ip fe80::2 link-local

[Sysname-Vlan-interface2] vrrp ipv6 vrid 80 preempt-mode timer delay 5

1.2.10  vrrp ipv6 vrid priority

Syntax

vrrp ipv6 vrid virtual-router-id priority priority-value

undo vrrp ipv6 vrid virtual-router-id priority

View

VLAN interface view

Default Level

2: System level

Parameters

virtual-router-id: VRRP group number.

priority-value: Priority value of the router in the specified VRRP group, with a higher number indicating a higher priority.

Description

Use the vrrp ipv6 vrid priority command to configure the priority of the switch in the specified VRRP group.

Use the undo vrrp ipv6 vrid priority command to restore the default.

By default, the priority of a switch in a VRRP group is 100.

l           Before executing the command, create a VRRP group on an interface and configure the virtual IPv6 address of the VRRP group.

l           In VRRP, the role that a switch plays in a VRRP group depends on its priority. A higher priority means that the switch is more likely to become the master. Note that priority 0 is reserved for special use and 255 for the IP address owner.

l           If the switch is the IP address owner, its priority is always 255. Therefore, it will be the master so long as it is functioning normally.

Examples

# Set the priority of VRRP group 1 on interface VLAN-interface 2 to 150.

<Sysname> system-view

[Sysname] interface vlan-interface 2

[Sysname-Vlan-interface2] vrrp ipv6 vrid 1 virtual-ip fe80::2 link-local

[Sysname-Vlan-interface2] vrrp ipv6 vrid 1 priority 150

1.2.11  vrrp ipv6 vrid timer advertise

Syntax

vrrp ipv6 vrid virtual-router-id timer advertise adver-interval

undo vrrp ipv6 vrid virtual-router-id timer advertise

View

VLAN interface view

Default Level

2: System level

Parameters

virtual-router-id: VRRP group number.

adver-interval: Interval at which the master in the specified VRRP group sends VRRP advertisements, in centiseconds.

Description

Use the vrrp ipv6 vrid timer advertise command to configure the Adver_Timer of the specified VRRP group.

Use the undo vrrp ipv6 vrid timer advertise command to restore the default.

By default the Adver_Timer is 100 centiseconds.

The Adver_Timer controls the interval at which the master sends VRRP packets.

l           Before executing the command, create a VRRP group on an interface and configure the virtual IPv6 address of the VRRP group.

l           Switches in the same VRRP group must use the same Adver_Timer setting.

Examples

# Set the master in VRRP group 1 to send VRRP advertisements at intervals of 500 centiseconds.

<Sysname> system-view

[Sysname] interface vlan-interface 2

[Sysname-Vlan-interface2] vrrp ipv6 vrid 1 virtual-ip fe80::2 link-local

[Sysname-Vlan-interface2] vrrp ipv6 vrid 1 timer advertise 500

1.2.12  vrrp ipv6 vrid track

Syntax

vrrp ipv6 vrid virtual-router-id track interface interface-type interface-number [ reduced priority-reduced ]

undo vrrp ipv6 vrid virtual-router-id track [ interface interface-type interface-number ]

View

VLAN interface view

Default Level

2: System level

Parameters

virtual-router-id: VRRP group number.

interface interface-type interface-number: Specifies an interface to be tracked by its type and number.

reduced priority-reduced: Value by which the priority decrements. If it is not specified, the default 10 applies.

Description

Use the vrrp ipv6 vrid track command to configure to track the specified interface.

Use the undo vrrp ipv6 vrid track command to disable tracking the specified interface.

By default, no interface is being tracked.

Note that:

l           Before executing the command, create a VRRP group on an interface and configure the virtual IPv6 address of the VRRP group.

l           When the switch is the owner of the IP address, you cannot perform the configuration.

l           When the status of the tracked interface turns from down to up, the corresponding switch restores its priority automatically.

l           At present, the interface specified in this command can only be a VLAN interface for S9500 series switches.

Examples

# On interface VLAN-interface 2, set the interface to be tracked as VLAN-interface 1, making the priority of VRRP group 1 on interface VLAN-interface 2 decrease by 50 when VLAN-interface 1 goes down.

<Sysname> system-view

[Sysname] interface vlan-interface 2

[Sysname-Vlan-interface2] vrrp ipv6 vrid 1 virtual-ip fe80::2 link-local

[Sysname-Vlan-interface2] vrrp ipv6 vrid 1 track interface vlan-interface 1 reduced 50

1.2.13  vrrp ipv6 vrid virtual-ip

Syntax

vrrp ipv6 vrid virtual-router-id virtual-ip virtual-address [link-local]

undo vrrp ipv6 vrid virtual-router-id [ virtual-ip virtual-address [ link-local ] ]

View

VLAN interface view

Default Level

2: System level

Parameters

virtual-router-id: VRRP group number.

virtual-address: Virtual IPv6 address.

link-local: Indicates that the virtual IPv6 address of the VRRP group is a link local address.

Description

Use the vrrp ipv6 vrid virtual-ip link-local command to create a VRRP group and assign the first virtual IPv6 address to the specified VRRP group. The first virtual IPv6 address assigned to a VRRP group must be a link local address and only one such address is allowed in a VRRP group.

Use the vrrp ipv6 vrid virtual-ip command to add a virtual IPv6 address to a VRRP group.

Use the undo vrrp ipv6 vrid command to remove a VRRP group.

Use the undo vrrp ipv6 vrid virtual-router-id virtual-ip virtual-address [ link-local ] command to remove a virtual IPv6 address from a VRRP group.

After you remove all virtual IPv6 addresses, the VRRP group is automatically removed. Note that the first address assigned to the group must be removed the last.

By default, no VRRP group is created.

Examples

# Create VRRP group 1, and configure its virtual IPv6 address as fe80::10.

<Sysname> system-view

[Sysname] interface vlan-interface 2

[Sysname-Vlan-interface2] vrrp ipv6 vrid 1 virtual-ip fe80::10 link-local

 

  • Cloud & AI
  • InterConnect
  • Intelligent Computing
  • Security
  • SMB Products
  • Intelligent Terminal Products
  • Product Support Services
  • Technical Service Solutions
All Services
  • Resource Center
  • Policy
  • Online Help
All Support
  • Become A Partner
  • Partner Policy & Program
  • Global Learning
  • Partner Sales Resources
  • Partner Business Management
  • Service Business
All Partners
  • Profile
  • News & Events
  • Online Exhibition Center
  • Contact Us
All About Us
新华三官网