16-High Availability Command Reference

HomeSupportReference GuidesCommand ReferencesH3C SecPath Firewall Series Command References(V7)-6W40016-High Availability Command Reference
09-RBM commands
Title Size Download
09-RBM commands 79.10 KB

RBM commands

backup-mode

Use backup-mode to configure the VRRP hot backup mode.

Use undo backup-mode to restore the default.

Syntax

backup-mode dual-active

undo backup-mode

Default

The VRRP hot backup mode is active/standby.

Views

Remote backup group view

Predefined user roles

network-admin

context-admin

Usage guidelines

VRRP hot backup supports active/standby mode and dual-active mode. In active/standby mode, only the primary device processes services. In dual-active mode, both devices process services.

Examples

# Configure the dual-active hot backup mode.

<Sysname> system-view

[Sysname] remote-backup group

[Sysname-remote-backup-group] backup-mode dual-active

configuration auto-sync enable

Use configuration auto-sync enable to enable automatic configuration synchronization.

Use undo configuration auto-sync enable to disable automatic configuration synchronization.

Syntax

configuration auto-sync enable

undo configuration auto-sync enable

Default

Automatic configuration synchronization is disabled.

Views

Remote backup group view

Predefined user roles

network-admin

context-admin

Usage guidelines

The automatic configuration synchronization feature synchronizes existing configuration on the primary device in bulk to the secondary device. Consequent synchronization for added, deleted, or modified configuration will be performed in real time.

If the amount of configuration to be synchronized is large, bulk synchronization might take one to two hours.

Examples

# Enable automatic configuration synchronization.

<Sysname> system-view

[Sysname] remote-backup group

[Sysname-remote-backup-group] configuration auto-sync enable

configuration manual-sync

Use configuration manual-sync to manually synchronize the configuration of the primary device to the secondary device.

Syntax

configuration manual-sync

Views

Remote backup group view

Predefined user roles

network-admin

context-admin

Usage guidelines

For manual configuration synchronization to take effect, you must first enable automatic configuration synchronization.

Examples

# Manually synchronize the configuration of the primary device to the secondary device.

<Sysname> system-view

[Sysname] remote-backup group

[Sysname-remote-backup-group] configuration manual-sync

Related commands

configuration auto-sync enable

configuration sync-check

Use configuration sync-check to enable configuration consistency check.

Use undo configuration sync-check to restore the default.

Syntax

configuration sync-check [ interval interval ]

undo configuration sync-check

Default

Configuration consistency check is disabled.

Views

Remote backup group view

Predefined user roles

network-admin

context-admin

Parameters

interval interval: Specifies the configuration consistency check interval, in the range of 1 to 168 hours. The default value is 24.

Usage guidelines

RBM verifies configuration consistency between the primary and secondary devices to avoid service interruption upon primary/secondary member switchover. If a device detects configuration inconsistency, it generates a log for you to manually synchronize configuration.

Examples

# Enable configuration consistency check and set the check interval to 120 hours.

<Sysname>system-view

[Sysname] remote-backup group

[Sysname-remote-backup-group] configuration sync-check interval 120

Related commands

configuration manual-sync

data-channel

Use data-channel to configure an RBM data channel.

Use undo data-channel to restore the default.

Syntax

data-channel interface interface-type interface-number

undo data-channel

Default

No RBM data channel is configured.

Views

Remote backup group view

Predefined user roles

network-admin

context-admin

Parameters

interface interface-type interface-number: Specifies an interface by its type and number to set up a data channel between the primary and secondary devices.

Usage guidelines

The primary and secondary devices use the interface specified in the command to set up an RBM data channel. The data channel transmits only hot backup packets and the packets that require transparent transmission.

Examples

# Set up an RBM data channel using interface GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] remote-backup group

[Sysname-remote-backup-group] data-channel interface gigabitethernet 1/0/1

device-role

Use device-role to configure the RBM role.

Use undo device-role to restore the default.

Syntax

device-role { primary | secondary }

undo device-role

Default

The RBM role is not configured.

Views

Remote backup group view

Predefined user roles

network-admin

context-admin

Parameters

primary: Assigns the primary role to the device.

secondary: Assigns the secondary role to the device.

Usage guidelines

RBM backs up important configuration from the primary device to the secondary device to prevent service interruption when a primary/secondary member switchover occurs. The configuration on the secondary device is overwritten. The unidirectional backup mechanism avoids configuration conflicts, especially in dual-active mode, and ensures configuration consistency on the primary and secondary devices.

Examples

# Assign the primary role to the device.

<Sysname> system-view

[Sysname] remote-backup group

[Sysname-remote-backup-group] device-role primary

display remote-backup-group status

Use display remote-backup-group status to display remote backup group status information.

Syntax

display remote-backup-group status

Views

Any view

Predefined user roles

network-admin

network-operator

context-admin

context-operator

Examples

# Display remote backup group status information.

<Sysname> display remote-backup-group status

Remote backup group information:

  Backup mode: Dual-active

  Device role: Primary

  Control channel interface: GigabitEthernet1/0/1

  Data channel interface: GigabitEthernet1/0/1

  Local IP: 1.1.1.1    Source port: 3455

  Remote IP: 1.1.1.2    Destination port: 1028

  Control channel status: Connected

  Hot backup status: Enabled

  Auto configuration synchronization: Enabled

  Configuration consistency check interval: 30 hour

  Vrrp delay-time: 1 min

Table 1 Command output

Field

Description

Backup mode

VRRP hot backup mode:

·     Dual-active.

·     Active/standby.

Device role

RBM role of the device:

·     Primary.

·     Secondary.

Control channel interface

Interface used to set up the control channel.

Data channel interface

Interface used to set up the data channel.

Local IP

Local IP address used by control channel packets.

Source port

Local port number used by control channel packets.

Remote IP

Peer IP address used by control channel packets.

Destination port

Peer port number used by control channel packets.

Control channel status

Control channel status:

·     Connected.

·     Disconnected.

Hot backup status

Hot backup status:

·     Enabled.

·     Disabled.

Auto configuration synchronization

Automatic configuration synchronization status:

·     Enabled.

·     Disabled.

Configuration consistency check interval

Configuration consistency check interval in hours. This field is displayed only when configuration consistency check is enabled.

Vrrp delay-time

VRRP state switchover delay time in minutes.

display remote-backup-group sync-check

Use display remote-backup-group sync-check to display the configuration consistency check result for the remote backup group.

Syntax

display remote-backup-group sync-check

Views

Any view

Predefined user roles

network-admin

network-operator

context-admin

context-operator

Usage guidelines

Use this command when the primary and secondary devices have inconsistent configuration.

The command displays detailed inconsistency information for only the service modules supported by RBM. For a module not supported by RBM, the command displays only the interface where configuration inconsistency exists.

Examples

# Display the configuration consistency check result for the remote backup group. (No inconsistent configuration exists.)

<Sysname> display remote-backup-group sync-check

No inconsistent configuration exists.

# Display the configuration consistency check result for the remote backup group. (Inconsistent configuration exists.)

<Sysname> display remote-backup-group sync-check

Inconsistent configuration exists.

Configuration on secondary device:

#

nat address-group 2

 address 10.1.1.91 10.1.1.92

#

interface GigabitEthernet1/0/1

#

interface GigabitEthernet1/0/2

 nat outbound address-group 2

#

 

Configuration on primary device:

#

interface GigabitEthernet1/0/1

#

interface GigabitEthernet1/0/2

 nat outbound address-group 1

#

Related commands

configuration sync-check

hot-backup enable

Use hot-backup enable to enable RBM hot backup.

Use undo hot-backup enable to disable RBM hot backup.

Syntax

hot-backup enable

undo hot-backup enable

Default

RBM hot backup is enabled.

Views

Remote backup group view

Predefined user roles

network-admin

context-admin

Usage guidelines

This command enables the primary device in the remote backup group to back up service entries to the secondary device in real time. This prevents service interruption when a primary/secondary member switchover occurs.

Examples

# Enable RBM hot backup.

<Sysname> system-view

[Sysname] remote-backup group

[Sysname-remote-backup-group] hot-backup enable

local-ip

Use local-ip to configure the local IP address for setting up the RBM control channel.

Use undo local-ip to restore the default.

Syntax

local-ip ip-address

undo local-ip

Default

The local IP address is not configured for setting up the RBM control channel.

Views

Remote backup group view

Predefined user roles

network-admin

context-admin

Parameters

ip-address: Specifies the local IP address for setting up the RBM control channel.

Usage guidelines

RBM compares the specified local and peer IP address to determine the device role for setting up the control channel. The device with higher IP address acts as the server to listen for TCP connection requests, and the other device acts as the client to initiate the TCP connection.

Examples

# Configure the local IP address as 1.1.1.2 for setting up the RBM control channel.

<Sysname> system-view

[Sysname] remote-backup group

[Sysname-remote-backup-group] local-ip 1.1.1.2

remote-backup group

Use remote-backup group command to enter remote backup group view.

Use undo remote-backup group to remove all settings of the remote backup group.

Syntax

remote-backup group

undo remote-backup group

Views

System view

Predefined user roles

network-admin

context-admin

Usage guidelines

RBM provides backup for important configuration and service entries between devices. It collaborates with VRRP to implement hot backup that enables smooth master/backup switchover upon link failures for service continuity. For more information about VRRP, see High Availability Configuration Guide.

Examples

# Enter remote backup group view.

<Sysname> system-view

[Sysname] remote-backup group

[Sysname-remote-backup-group]

remote-ip

Use remote-ip to configure the peer IP address for setting up the RBM control channel.

Use undo remote-ip to restore the default.

Syntax

remote-ip ip-address [ port port-number ]

undo remote-ip ip-address

Default

The peer IP address is not configured for setting up the RBM control channel.

Views

Remote backup group view

Predefined user roles

network-admin

context-admin

Parameters

ip-address: Specifies the peer IP address for setting up the RBM control channel. You can specify only an IPv4 address as the peer IP address.

port port-number: Specifies a port by its number used for establishing TCP connection. The value range for the port-number argument is 1024 to 65535, and the default value is 60064.

Usage guidelines

The RBM control channel transmits data by using packets, including remote backup group status packets, configuration consistency check packets, and configuration synchronization packets. RBM compares the specified local and peer IP address to determine the device role for setting up the control channel. The device with higher IP address acts as the server to listen for TCP connection requests, and the other device acts as the client to initiate the TCP connection.

If the port number is configured on the server, the port provides services for the client. If the port number is configured on the client, the port serves as the destination port to establish TCP connection to the server. The source port is randomly generated on the client.

You can specify only one peer IP address with the same port number on the primary and secondary devices.

Examples

# Configure the peer IP address and port number as 1.1.1.1 and 4456 for setting up the RBM control channel.

<Sysname> system-view

[Sysname] remote-backup group

[Sysname-remote-backup-group] remote-ip 1.1.1.1 port 4456

vrrp delay-time

Use vrrp delay-time to set the VRRP state switchover delay.

Use undo vrrp delay-time to restore the default.

Syntax

vrrp delay-time [ delay-time ]

undo vrrp delay-time

Default

The VRRP state switchover delay is one minute.

Views

Remote backup group view

Predefined user roles

network-admin

context-admin

Parameters

delay-time: Specifies the VRRP state switchover delay time in the range of 1 to 50 minutes.

Usage guidelines

Execute this command to set the delay that the primary and secondary devices must wait before a switchback. This delay ensures that the devices can finish service entry backup to prevent traffic loss.

Examples

# Set the VRRP state switchover delay time to two minutes.

<Sysname>system-view

[Sysname] remote-backup group

[Sysname-remote-backup-group] vrrp delay-time 2

  • Cloud & AI
  • InterConnect
  • Intelligent Computing
  • Security
  • SMB Products
  • Intelligent Terminal Products
  • Product Support Services
  • Technical Service Solutions
All Services
  • Resource Center
  • Policy
  • Online Help
All Support
  • Become a Partner
  • Partner Resources
  • Partner Business Management
All Partners
  • Profile
  • News & Events
  • Online Exhibition Center
  • Contact Us
All About Us
新华三官网