- Table of Contents
- Related Documents
-
Title | Size | Download |
---|---|---|
02-VRRP commands | 448.03 KB |
VRRP commands
VRRP does not take effect on member ports of aggregation groups.
IPv4 VRRP commands
display vrrp
Use display vrrp to display the states of IPv4 VRRP groups.
Syntax
display vrrp [ interface interface-type interface-number [ vrid virtual-router-id ] ] [ verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
context-admin
context-operator
Parameters
interface interface-type interface-number: Specifies an interface by its type and number.
vrid virtual-router-id: Specifies an IPv4 VRRP group by its virtual router ID in the range of 1 to 255.
verbose: Displays detailed IPv4 VRRP group information. If you do not specify the verbose keyword, the command displays brief IPv4 VRRP group information.
Usage guidelines
If no interface or VRRP group is specified, this command displays the states of all IPv4 VRRP groups.
If only an interface is specified, this command displays the states of all IPv4 VRRP groups on the specified interface.
If both an interface and an IPv4 VRRP group are specified, this command displays the states of the specified IPv4 VRRP group on the specified interface.
Examples
# Display brief information about all IPv4 VRRP groups on the device when VRRP operates in standard mode.
<Sysname> display vrrp
IPv4 Virtual Router Information:
Running Mode : Standard
RBM control channel is established
VRRP active group status: Master
VRRP standby group status: Backup
Total number of virtual routers : 1
Interface VRID State Running Adver Auth Virtual
Pri Timer Type IP
---------------------------------------------------------------------
GE1/0/1 1 Master 150 100 Simple 1.1.1.1
Table 1 Command output (in standard mode)
Field |
Description |
Running Mode |
VRRP operating mode (standard mode). |
RBM control channel is established |
The HA control channel has been established. This field is displayed only when VRRP is associated with HA group. |
VRRP active group status |
Running status of the device in the VRRP active group: Master or Backup. This field is displayed only when VRRP is associated with HA group. |
VRRP standby group status |
Running status of the device in the VRRP standby group: Master or Backup. This field is displayed only when VRRP is associated with HA group. |
Total number of virtual routers |
Total number of VRRP groups. |
Interface |
Interface where the VRRP group is configured. |
VRID |
Virtual router ID (VRRP group number). |
State |
State of the router in the VRRP group: · Master—The device is the master in the VRRP group. · Backup—The device is the backup in the VRRP group. · Initialize—The VRRP group is in disabled state on the device. · Inactive—The VRRP group is in invalid state, for example, when the VRRP group is not assigned a virtual IP address. |
Running Pri |
Current priority of the router. When a track entry is associated with a VRRP group on the router, the router's priority changes when the track entry's status changes. |
Adver Timer |
VRRP advertisement sending interval in centiseconds. |
Auth Type |
Authentication type: · None—No authentication. · Simple—Simple text authentication. · MD5—MD5 authentication. · Not supported—Available only when the VRRP version is VRRPv3. |
Virtual IP |
Virtual IP address of the VRRP group. |
# Display detailed information about all IPv4 VRRP groups on the device when VRRP operates in standard mode.
<Sysname> display vrrp verbose
IPv4 Virtual Router Information:
Running Mode : Standard
RBM control channel is established
VRRP active group status: Master
VRRP standby group status: Backup
Total number of virtual routers : 3
Interface GigabitEthernet1/0/1
VRID : 1 Adver Timer : 100
Admin Status : Up State : Master
Config Pri : 150 Running Pri : 150
Preempt Mode : Yes Delay Time : 5
Auth Type : Simple Key : ******
Version : 2
Virtual IP : 1.1.1.1/32
Virtual MAC : 0000-5e00-0101
Master IP : 1.1.1.2
Interface GigabitEthernet1/0/1
VRID (group) : 2 (Active) Adver Timer : 100
Admin Status : Up State : Master
Config Pri : 100 Running Pri : 100
Preempt Mode : Yes Delay Time : 5
Auth Type : Simple Key : ******
Version : 2
Virtual IP : 1.1.1.11/32
Virtual MAC : 0000-5e00-0102
Master IP : 1.1.1.2
Interface GigabitEthernet1/0/1
VRID (group) : 3 (Standby) Adver Timer : 100
Admin Status : Up State : Backup
Config Pri : 80 Running Pri : 80
Preempt Mode : Yes Delay Time : 0
Become Master : --
Auth Type : None
Version : 2
Virtual IP : 1.1.1.11/32
Master IP : 1.1.1.12
Table 2 Command output (in standard mode)
Field |
Description |
Running Mode |
VRRP operating mode (standard mode). |
RBM control channel is established |
The HA control channel has been established. This field is displayed only when VRRP is associated with HA group. |
VRRP active group status |
Running status of the device in the VRRP active group: Master or Backup. This field is displayed only when VRRP is associated with HA group. |
VRRP standby group status |
Running status of the device in the VRRP standby group: Master or Backup. This field is displayed only when VRRP is associated with HA group. |
Total number of virtual routers |
Total number of VRRP groups. |
Interface |
Interface where the VRRP group is configured. |
VRID (group) |
Virtual router ID. When VRRP is associated with HA group, this field also displays the type of group (active or standby) associated with HA group in parentheses. |
Adver Timer |
VRRP advertisement sending interval in centiseconds. |
Admin Status |
Administrative status: Up or Down. |
State |
State of the router in the VRRP group: · Master—The device is the master in the VRRP group. · Backup—The device is the backup in the VRRP group. · Initialize—The VRRP group is in disabled state on the device. · Inactive—The VRRP group is in invalid state, for example, when the VRRP group is not assigned a virtual IP address. |
Config Pri |
Configured priority of the router, which is configured by using the vrrp vrid priority command. |
Running Pri |
Current priority of the router. When a track entry is associated with a VRRP group on the router, the router's priority changes when the track entry's status changes. |
Preempt Mode |
Preemptive mode: · Yes. · No. |
Delay Time |
Preemption delay in centiseconds. |
Become Master |
Time (in milliseconds) that a backup router has to wait before it becomes the master. This field is displayed only when the router is a backup. This field displays two hyphens (--) when VRRP is associated with HA group. |
Auth Type |
Authentication type: · None—No authentication. · Simple—Simple text authentication. · MD5—MD5 authentication. · Not supported—Available only when the VRRP version is VRRPv3. |
Key |
Authentication key, which is not displayed if no authentication is required. |
Version |
VRRP version. |
Virtual IP |
Virtual IP address and mask length of the VRRP group. |
Virtual MAC |
Virtual MAC address of the VRRP group's virtual IP address, which is displayed when the router is the master. |
Master IP |
Primary IP address of the interface where the master resides. |
VRRP Track Information |
Track entry information. This field is displayed only after you configure the vrrp vrid track command. |
Track Object |
Track entry which is associated with the VRRP group. |
State |
Track entry state: · Negative. · Positive. · NotReady. |
Pri Reduced |
Value by which the priority decreases when the status of the associated track entry changes to the Negative state. |
Switchover |
Switchover mode. When the status of the associated track entry changes to the Negative state, the backup immediately becomes the master. |
# Display brief information about all IPv4 VRRP groups on the device when VRRP operates in load balancing mode.
<Sysname> display vrrp
IPv4 Virtual Router Information:
Running Mode : Load Balance
Total number of virtual routers : 1
Interface VRID State Running Address Active
Pri
----------------------------------------------------------------------
GE1/0/1 1 Master 150 1.1.1.1 Local
----- VF 1 Active 255 000f-e2ff-0011 Local
Table 3 Command output (in load balancing mode)
Field |
Description |
Running Mode |
VRRP operating mode (load balancing mode). |
Total number of virtual routers |
Total number of VRRP groups. |
Interface |
Interface where the VRRP group is configured. |
VRID |
Virtual router ID (VRRP group number) or virtual forwarder (VF) ID. |
State |
· For a VRRP group, this field indicates the state of the router in the VRRP group: ¡ Master—The device is the master in the VRRP group. ¡ Backup—The device is the backup in the VRRP group. ¡ Initialize—The VRRP group is in disabled state on the device. ¡ Inactive—The VRRP group is in invalid state, for example, when the VRRP group is not assigned a virtual IP address. · For a VF, this field indicates the state of the VF in the VRRP group: ¡ Active—The VF is in forwarding state. ¡ Listening—The VF is in listening (backup) state. ¡ Initialize—The VF is in initialized state. |
Running Pri |
· For a VRRP group, this field indicates the running priority of the router. When a track entry is associated with a VRRP group on the router, the router's priority changes when the track entry's status changes. · For a VF, this field indicates the running priority of the VF. When a track entry is associated with a VF, the priority of the VF changes if the track entry's status changes. |
Address |
· For a VRRP group, this field indicates the virtual IP address of the VRRP group. · For a VF, this field indicates the virtual MAC address of the VF. |
Active |
· For a VRRP group, this field indicates the IP address of the interface where the master resides. If the current router is the master, this field displays local. · For a VF, this field indicates the IP address of the interface where the active virtual forwarder (AVF) resides. If the current VF is the AVF, this field displays local. |
# Display detailed information about all IPv4 VRRP groups on the device when VRRP operates in load balancing mode.
<Sysname> display vrrp verbose
IPv4 Virtual Router Information:
Running Mode : Load Balance
Total number of virtual routers : 2
Interface GigabitEthernet1/0/1
VRID : 1 Adver Timer : 100
Admin Status : Up State : Master
Config Pri : 150 Running Pri : 150
Preempt Mode : Yes Delay Time : 5
Auth Type : None
Version : 2
Virtual IP : 10.1.1.1/32
10.1.1.2/32
10.1.1.3/32
Member IP List : 10.1.1.10 (Local, Master)
10.1.1.20 (Backup)
VRRP Track Information:
Track Object : 1 State : Positive Pri Reduced : 50
Forwarder Information: 2 Forwarders 1 Active
Config Weight : 255
Running Weight : 255
Forwarder 01
State : Active
Virtual MAC : 000f-e2ff-0011 (Owner)
Owner ID : 0000-5e01-1101
Priority : 255
Active : local
Forwarder 02
State : Listening
Virtual MAC : 000f-e2ff-0012 (Learnt)
Owner ID : 0000-5e01-1103
Priority : 127
Active : 10.1.1.20
Forwarder Weight Track Information:
Track Object : 1 State : Positive Weight Reduced : 250
Interface GigabitEthernet1/0/1
VRID : 11 Adver Timer : 100
Admin Status : Up State : Backup
Config Pri : 80 Running Pri : 80
Preempt Mode : Yes Delay Time : 0
Become Master : 2370ms left
Auth Type : None
Version : 2
Virtual IP : 10.1.1.11/32
: 10.1.1.12/32
: 10.1.1.13/32
Member IP List : 10.1.1.10 (Local, Backup)
10.1.1.15 (Master)
Forwarder Information: 2 Forwarders 1 Active
Config Weight : 255
Running Weight : 255
Forwarder 01
State : Active
Virtual MAC : 000f-e2ff-40b1 (Learnt)
Owner ID : 0000-5e01-1103
Priority : 127
Active : 10.1.1.15
Forwarder 02
State : Listening
Virtual MAC : 000f-e2ff-40b2 (Owner)
Owner ID : 0000-5e01-1101
Priority : 255
Active : local
Table 4 Command output (in load balancing mode)
Field |
Description |
Running Mode |
VRRP operating mode (load balancing mode). |
Total number of virtual routers |
Total number of VRRP groups. |
Interface |
Interface where the VRRP group is configured. |
VRID |
Virtual router ID (VRRP group number). |
Adver Timer |
VRRP advertisement sending interval in centiseconds. |
Admin Status |
Administrative status: Up or Down. |
State |
State of the router in the VRRP group: · Master—The device is the master in the VRRP group. · Backup—The device is the backup in the VRRP group. · Initialize—The VRRP group is in disabled state on the device. · Inactive—The VRRP group is in invalid state, for example, when the VRRP group is not assigned a virtual IP address. |
Config Pri |
Configured priority of the router, which is configured by using the vrrp vrid priority command. |
Running Pri |
Current priority of the router. When a track entry is associated with a VRRP group on the router, the router's priority changes when the track entry's status changes. |
Preempt Mode |
Preemptive mode: · Yes. · No. |
Delay Time |
Preemption delay in centiseconds. |
Become Master |
Time (in milliseconds) that a backup router has to wait before it becomes the master. This field is displayed only when the router is a backup. |
Auth Type |
Authentication type: · None—No authentication. · Simple—Simple text authentication. · MD5—MD5 authentication. · Not supported—Available only when the VRRP version is VRRPv3. |
Key |
Authentication key, which is not displayed if no authentication is required. |
Version |
VRRP version. |
Virtual IP |
List of virtual IP addresses and mask lengths of the VRRP group. |
Member IP List |
IP addresses of the member devices in the VRRP group: · Local—IP address of the local router. · Master—IP address of the master. · Backup—IP address of the backup. |
VRRP Track Information |
Track entry which is associated with the VRRP group. This field is displayed only after you configure the vrrp vrid track command. |
Track Object |
Track entry to be monitored. |
State |
Track entry state: · Negative. · Positive. · NotReady. |
Pri Reduced |
Value by which the priority decreases when the status of the associated track entry changes to the Negative state. This field is displayed only after you configure the vrrp vrid track command. |
Switchover |
Switchover mode. When the status of the associated track entry changes to the Negative state, the backup immediately becomes the master. |
Forwarder Information: 2 Forwarders 1 Active |
VF information: Two VFs exist, and one is the AVF. |
Config Weight |
Configured weight of the VF: 255. |
Running Weight |
Current weight of the VF. When a track entry is associated with the VFs of a VRRP group, the VFs' weights change when the track entry's status changes. |
Forwarder 01 |
Information about VF 01. |
State |
VF state: · Active—The VF is in forwarding state and can forward packets. · Listening—The VF is in listening state and cannot forward packets. · Initialize—The VF is in Initialize state and does not provide the VRRP backup functions. |
Virtual MAC |
Virtual MAC address of the VF. In VRRP load balancing mode, the value for this field also contains the virtual MAC address attribute, for example, 000f-e2ff-40b2 (Owner). Options for the virtual MAC address attribute include: · Owner—The device is the VF owner of the virtual MAC address. · Learnt—The device is not the VF owner. Instead, it is the backup for the VF owner. · Take Over—The device has taken over the VF owner and has become the AVF to forward traffic. (If the VF owner failure is not recovered upon expiration of the VF timeout timer about 1800 seconds, the system automatically deletes the VF.) |
Owner ID |
Real MAC address of the VF owner. |
Priority |
VF priority in the range of 1 to 255. |
Active |
IP address of the interface where the AVF resides. If the current VF is the AVF, this field displays local. |
Forwarder Weight Track Configuration |
VF weight Track configuration. The field is displayed only after you configure the vrrp vrid track command. |
Track Object |
Track entry that is associated with the VFs. The field is displayed only after you configure the vrrp vrid track command. |
State |
Track entry state: · Negative. · Positive. · NotReady. |
Weight Reduced |
Value by which the weights of the VFs decrease when the state of the associated track entry changes to Negative. The field is displayed only after you configure the vrrp vrid track command. |
Forwarder Switchover Track Information: |
VF switchover Track configuration. The field is displayed only after you configure the vrrp vrid track command. |
Member IP |
IP address of a member device. The field is displayed only after you configure the vrrp vrid track command. |
display vrrp statistics
Use display vrrp statistics to display statistics for IPv4 VRRP groups.
Syntax
display vrrp statistics [ interface interface-type interface-number [ vrid virtual-router-id ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
context-admin
context-operator
Parameters
interface interface-type interface-number: Specifies an interface by its type and number.
vrid virtual-router-id: Specifies an IPv4 VRRP group by its virtual router ID in the range of 1 to 255.
Usage guidelines
If no interface or VRRP group is specified, this command displays statistics for all IPv4 VRRP groups.
If only an interface is specified, this command displays statistics for all IPv4 VRRP groups on the specified interface.
If both an interface and an IPv4 VRRP group are specified, this command displays statistics for the specified IPv4 VRRP group on the specified interface.
Examples
# Display statistics for all IPv4 VRRP groups when VRRP operates in standard mode.
<Sysname> display vrrp statistics
Interface : GigabitEthernet1/0/1
VRID : 1
CheckSum Errors : 0 Version Errors : 0
Invalid Pkts Rcvd : 0 Unexpected Pkts Rcvd : 0
IP TTL Errors : 0 Advertisement Interval Errors : 0
Invalid Auth Type : 0 Auth Failures : 0
Packet Length Errors : 0 Auth Type Mismatch : 0
Become Master : 1 Address List Errors : 0
Adver Rcvd : 0 Priority Zero Pkts Rcvd : 0
Adver Sent : 807 Priority Zero Pkts Sent : 0
Global statistics
CheckSum Errors : 0
Version Errors : 0
VRID Errors : 0
# Display statistics for all IPv4 VRRP groups when VRRP operates in load balancing mode.
<Sysname> display vrrp statistics
Interface : GigabitEthernet1/0/1
VRID : 1
CheckSum Errors : 0 Version Errors : 0
Invalid Pkts Rcvd : 0 Unexpected Pkts Rcvd : 0
IP TTL Errors : 0 Advertisement Interval Errors : 0
Invalid Auth Type : 0 Auth Failures : 0
Packet Length Errors : 0 Auth Type Mismatch : 0
Become Master : 39 Address List Errors : 0
Become AVF : 13 Packet Option Errors : 0
Adver Rcvd : 2562 Priority Zero Pkts Rcvd : 1
Adver Sent : 16373 Priority Zero Pkts Sent : 49
Request Rcvd : 2 Reply Rcvd : 10
Request Sent : 12 Reply Sent : 2
Release Rcvd : 0 VF Priority Zero Pkts Rcvd : 1
Release Sent : 0 VF Priority Zero Pkts Sent : 11
Redirect Timer Expires : 1 Time-out Timer Expires : 0
Global statistics
CheckSum Errors : 0
Version Errors : 0
VRID Errors : 0
Table 5 Command output (in standard mode)
Field |
Description |
Interface |
Interface where the VRRP group is configured. |
VRID |
VRRP group number. |
CheckSum Errors |
Number of packets with checksum errors. |
Version Errors |
Number of packets with version errors. |
Invalid Pkts Rcvd |
Number of received packets of invalid packet types. |
Unexpected Pkts Rcvd |
Number of received unexpected packets. |
Advertisement Interval Errors |
Number of packets with advertisement interval errors. |
IP TTL Errors |
Number of packets with TTL errors. |
Auth Failures |
Number of packets with authentication failures. |
Invalid Auth Type |
Number of packets with authentication failures because of invalid authentication types. |
Auth Type Mismatch |
Number of packets with authentication failures because of mismatching authentication types. |
Packet Length Errors |
Number of packets with VRRP packet length errors. |
Address List Errors |
Number of packets with virtual IP address list errors. |
Become Master |
Number of times that the router has been elected as the master. |
Priority Zero Pkts Rcvd |
Number of received advertisements with the router priority of 0. |
Adver Rcvd |
Number of received advertisements. |
Priority Zero Pkts Sent |
Number of sent advertisements with the router priority of 0. |
Adver Sent |
Number of sent advertisements. |
Global statistics |
Global statistics for all VRRP groups. |
CheckSum Errors |
Total number of packets with checksum errors. |
Version Errors |
Total number of packets with version errors. |
VRID Errors |
Total number of packets with VRID errors. |
Table 6 Command output (in load balancing mode)
Field |
Description |
Interface |
Interface where the VRRP group is configured. |
VRID |
VRRP group number. |
CheckSum Errors |
Number of packets with checksum errors. |
Version Errors |
Number of packets with version errors. |
Invalid Pkts Rcvd |
Number of received packets of invalid packet types. |
Unexpected Pkts Rcvd |
Number of received unexpected packets. |
Advertisement Interval Errors |
Number of packets with advertisement interval errors. |
IP TTL Errors |
Number of packets with TTL errors. |
Auth Failures |
Number of packets with authentication failures. |
Invalid Auth Type |
Number of packets with authentication failures because of invalid authentication types. |
Auth Type Mismatch |
Number of packets with authentication failures because of mismatching authentication types. |
Packet Length Errors |
Number of packets with VRRP packet length errors. |
Address List Errors |
Number of packets with virtual IP address list errors. |
Become Master |
Number of times that the router has been elected as the master. |
Redirect Timer Expires |
Number of times that the redirect timer expired. |
Become AVF |
Number of times that the VF has been elected as the AVF. |
Time-out Timer Expires |
Number of times that the time-out timer expired. |
Adver Rcvd |
Number of received advertisements. |
Request Rcvd |
Number of received requests. |
Adver Sent |
Number of sent advertisements. |
Request Sent |
Number of sent requests. |
Reply Rcvd |
Number of received replies. |
Release Rcvd |
Number of received release packets. |
Reply Sent |
Number of sent replies. |
Release Sent |
Number of sent release packets. |
Priority Zero Pkts Rcvd |
Number of received advertisements with the router priority of 0. |
VF Priority Zero Pkts Rcvd |
Number of received advertisements with the VF priority of 0. |
Priority Zero Pkts Sent |
Number of sent advertisements with the router priority of 0. |
VF Priority Zero Pkts Sent |
Number of sent advertisements with the VF priority of 0. |
Packet Option Errors |
Number of packet option errors. |
Global statistics |
Global statistics for all IPv4 VRRP groups. |
CheckSum Errors |
Total number of packets with checksum errors. |
Version Errors |
Total number of packets with version errors. |
VRID Errors |
Total number of packets with VRID errors. |
Related commands
reset vrrp statistics
reset vrrp statistics
Use reset vrrp statistics to clear statistics for IPv4 VRRP groups.
Syntax
reset vrrp statistics [ interface interface-type interface-number [ vrid virtual-router-id ] ]
Views
User view
Predefined user roles
network-admin
context-admin
Parameters
interface interface-type interface-number: Specifies an interface by its type and number.
vrid virtual-router-id: Specifies an IPv4 VRRP group by its virtual router ID in the range of 1 to 255.
Usage guidelines
If no interface or VRRP group is specified, this command clears statistics for all IPv4 VRRP groups.
If only an interface is specified, this command clears statistics for all IPv4 VRRP groups on the specified interface.
If both an interface and an IPv4 VRRP group are specified, this command clears statistics for the specified IPv4 VRRP group on the specified interface.
Examples
# Clear statistics for all IPv4 VRRP groups on all interfaces.
<Sysname> reset vrrp statistics
Related commands
display vrrp statistics
snmp-agent trap enable vrrp
Use snmp-agent trap enable vrrp to enable SNMP notifications for VRRP.
Use undo snmp-agent trap enable vrrp to disable SNMP notifications for VRRP.
Syntax
snmp-agent trap enable vrrp [ auth-failure | new-master ]
undo snmp-agent trap enable vrrp [ auth-failure | new-master ]
Default
SNMP notifications for VRRP are enabled.
Views
System view
Predefined user roles
network-admin
context-admin
Parameters
auth-failure: Generates notifications as defined in RFC 2787 when the device in a VRRP group receives a VRRP advertisement with the authentication type or key not matching the local configuration.
new-master: Generates notifications as defined in RFC 2787 when the state of a device in a VRRP group changes from Initialize or Backup to Master.
Usage guidelines
To report critical VRRP events to an NMS, enable SNMP notifications for VRRP. For VRRP event notifications to be sent correctly, you must also configure SNMP on the device. For more information about SNMP configuration, see the network management and monitoring configuration guide for the device.
Examples
# Generate notifications as defined in RFC 2787 when the device in a VRRP group receives a VRRP advertisement with the authentication type or key not matching the local configuration.
<Sysname> system-view
[Sysname] snmp-agent trap enable vrrp auth-failure
vrrp check-ttl enable
Use vrrp check-ttl enable to enable TTL check for IPv4 VRRP packets.
Use undo vrrp check-ttl enable to disable TTL check for IPv4 VRRP packets.
Syntax
vrrp check-ttl enable
undo vrrp check-ttl enable
Default
TTL check for IPv4 VRRP packets is enabled.
Views
Interface view
Predefined user roles
network-admin
context-admin
Usage guidelines
The master in an IPv4 VRRP group periodically sends VRRP advertisements to declare its presence. The VRRP advertisements are multicast in the local subnet and cannot be forwarded by routers, so the TTL value is not changed. When the master sends VRRP advertisements, it sets the TTL value to 255. If you enable TTL check, the backups drop the VRRP advertisements with TTL other than 255, preventing attacks from other subnets.
Devices from different vendors might implement VRRP differently. When the device is interoperating with devices of other vendors, TTL check on VRRP packets might result in unexpected dropping of packets. In this scenario, use the undo vrrp check-ttl enable command to disable TTL check on VRRP packets.
Examples
# Disable TTL check for IPv4 VRRP packets.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] undo vrrp check-ttl enable
vrrp dot1q
Use vrrp dot1q to specify IPv4 VRRP control VLANs.
Use undo vrrp dot1q to restore the default.
Syntax
vrrp dot1q vid vlan-id
undo vrrp dot1q
Default
No VRRP control VLANs are specified. If the ambiguous termination-enabled interface supports transmitting broadcasts/multicasts, the master sends VRRP advertisements within all VLANs whose packets are terminated by the interface.
Views
Layer 3 Ethernet subinterface view
Layer 3 aggregate subinterface view
Reth subinterface view
Predefined user roles
network-admin
context-admin
Parameters
vid vlan-id: Specifies an IPv4 VRRP control VLAN by its VLAN ID in the range of 1 to 4094
Usage guidelines
If you execute this command multiple times, the most recent configuration takes effect.
This command takes effect only on the following interfaces:
· Layer 3 Ethernet subinterfaces.
· Layer 3 aggregate subinterfaces.
· Reth subinterfaces.
Examples
# Specify VLAN 2 as the IPv4 VRRP control VLAN.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1.2
[Sysname-GigabitEthernet1/0/1.2] vrrp dot1q vid 2
vrrp dscp
Use vrrp dscp to set a DSCP value for VRRP packets.
Use undo vrrp dscp to restore the default.
Syntax
vrrp dscp dscp-value
undo vrrp dscp
Default
The DSCP value for VRRP packets is 48.
Views
System view
Predefined user roles
network-admin
context-admin
Parameters
dscp-value: Specifies a DSCP value for VRRP packets, in the range of 0 to 63.
Usage guidelines
The DSCP value identifies the packet priority during transmission. A greater DSCP value means a higher packet priority.
Examples
# Set the DSCP value to 30 for VRRP packets.
<Sysname> system-view
[Sysname] vrrp dscp 30
vrrp isolate enable
Use vrrp isolate enable to enable the isolation mode for IPv4 VRRP.
Use undo vrrp isolate enable to disable the isolation mode for IPv4 VRRP.
Syntax
vrrp isolate enable
undo vrrp isolate enable
Default
The isolation mode is disabled for IPv4 VRRP.
Views
System view
Predefined user roles
network-admin
context-admin
Usage guidelines
To maintain the master in an IPv4 VRRP group, execute this command to perform a master/backup switchover. In isolation mode, the maintenance operation on the device is performed after a master/backup switchover and does not affect services.
Enabling the isolation mode sets the priority of the device to 0 in the IPv4 VRRP group.
If you set the priority with the vrrp vrid priority command for a device in isolation mode, the setting does not take effect until the isolation mode is disabled.
Examples
# Enable the isolation mode for IPv4 VRRP.
<Sysname> system-view
[Sysname] vrrp isolate enable
Related commands
vrrp vrid priority
vrrp mode
Use vrrp mode to specify the operating mode for IPv4 VRRP.
Use undo vrrp mode to restore the default.
Syntax
vrrp mode load-balance [ version-8 ]
undo vrrp mode
Default
IPv4 VRRP operates in standard mode.
Views
System view
Predefined user roles
network-admin
context-admin
Parameters
load-balance: Specifies the load balancing mode.
version-8: Specifies the version carried in VRRP packets as 8.
Usage guidelines
After you create IPv4 VRRP groups on the router, you can use this command to modify their operating mode. All IPv4 VRRP groups on the router operate in the specified mode.
The version-8 keyword takes effect only when the version of IPv4 VRRP configured on the interface is VRRPv2. The version-8 keyword is required in the following conditions:
· A router running Comware 5 software exists in the VRRP group.
To display the software version, use the display version command.
· All routers in the IPv4 VRRP group are operating in load balancing mode.
· All routers in the IPv4 VRRP group are configured with the version of VRRPv2.
Examples
# Specify the load balancing mode for IPv4 VRRP.
<Sysname> system-view
[Sysname] vrrp mode load-balance
Related commands
display vrrp
vrrp version
Use vrrp version to specify the version of IPv4 VRRP on an interface.
Use undo vrrp version to restore the default.
Syntax
vrrp version version-number
undo vrrp version
Default
VRRPv3 is used.
Views
Interface view
Predefined user roles
network-admin
context-admin
Parameters
version-number: Specifies a VRRP version. The version number is 2 or 3, where 2 indicates VRRPv2 (described in RFC 3768), and 3 indicates VRRPv3 (described in RFC 5798).
Usage guidelines
The version of VRRP on all routers in an IPv4 VRRP group must be the same.
Examples
# Specify VRRPv2 to run on interface GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] vrrp version 2
vrrp virtual-mac enable
Use vrrp virtual-mac enable to enable virtual MAC address advertisement.
Use undo vrrp virtual-mac enable to disable virtual MAC address advertisement.
Syntax
vrrp virtual-mac enable
undo vrrp virtual-mac enable
Default
Virtual MAC address advertisement is enabled.
Views
System view
Predefined user roles
network-admin
context-admin
Usage guidelines
Application scenarios
Typically, a VRRP group uses the virtual MAC address dynamically generated by the master to communicate with the upstream and downstream devices. The virtual MAC address might change upon a restart of the VRRP group, and cannot be used to identify the VRRP group. If the static ARP entries on the upstream and downstream devices contain the virtual MAC address, a communication failure might occur upon a virtual MAC address change.
To address this issue, you can disable virtual MAC address advertisement. After you disable virtual MAC address advertisement, the following situations will occur:
· The VRRP group will use the real MAC address of the interface configured with VRRP to communicate with the upstream and downstream devices.
· The master will advertise the virtual IP address and real MAC address in gratuitous ARP packets.
· Upon receiving an ARP request, the master will respond with the real MAC address.
A real MAC address is fixed, and is applicable to scenarios where static ARP entries are configured.
Restrictions and guidelines
To use a real MAC address to communicate with a VRRP group, configure the undo vrrp virtual-mac enable command during the network deployment phase. If you configure the undo vrrp virtual-mac enable command when the device is operating, network traffic might be interrupted. The maximum interruption time is the ARP entry aging time.
This command takes effect only when VRRP operates in standard mode.
Examples
# Disable virtual MAC address advertisement.
<Sysname> system-view
[Sysname] undo vrrp virtual-mac enable
Related commands
vrrp mode
vrrp vrid
Use vrrp vrid to create an IPv4 VRRP group and assign a virtual IP address to it, or to assign a virtual IP address to an existing IPv4 VRRP group.
Use undo vrrp vrid to remove all configurations of an IPv4 VRRP group, or to remove a virtual IP address from an IPv4 VRRP group.
Syntax
In common networks:
vrrp vrid virtual-router-id virtual-ip virtual-address [ mask | mask-length ]
undo vrrp vrid virtual-router-id [ virtual-ip [ virtual-address [ mask | mask-length ] ] ]
In VRRP-HA group associated networks:
vrrp vrid virtual-router-id virtual-ip virtual-address [ mask | mask-length ] { active | standby }
undo vrrp vrid virtual-router-id [ virtual-ip [ virtual-address [ mask | mask-length ] ] ]
Default
No IPv4 VRRP groups exist.
Views
Interface view
Predefined user roles
network-admin
context-admin
Parameters
virtual-router-id: Specifies an IPv4 VRRP group by its virtual router ID in the range of 1 to 255.
virtual-ip: Configure a virtual IP address for the IPv4 VRRP group. If you do not specify this keyword, the undo form of the command deletes the entire IPv4 VRRP group.
virtual-address: Specifies a virtual IP address. You cannot specify the virtual IP address as any of the following IP addresses:
· All-zero address (0.0.0.0).
· Broadcast address (255.255.255.255).
· Loopback address.
· IP address of other than Class A, Class B, and Class C.
· Invalid IP address (for example, 0.0.0.1).
If you do not specify this argument, the undo form of the command removes all virtual IP addresses from the specified IPv4 VRRP group.
mask: Specifies the subnet mask of the IPv4 address, in dotted decimal notation. If you do not specify the mask or mask-length argument, a 32-bit mask is used.
mask-length: Specifies the mask length of the IPv4 address, in the range of 1 to 32. If you do not specify the mask or mask-length argument, a 32-bit mask is used.
active: Associates the VRRP group with HA group by adding the device to the VRRP active group. The initial role of the device is master. For more information about the HA group, see HA group configuration in High Availability Configuration Guide.
standby: Associates the VRRP group with HA group by adding the device to the VRRP standby group. The initial role of the device is backup.
Usage guidelines
You can execute this command multiple times to assign multiple virtual IP addresses to an IPv4 VRRP group. In general network scenarios, an IPv4 VRRP group can have a maximum of 16 virtual IP addresses. In network scenarios where VRRP is associated with HA group, an IPv4 VRRP group can have a maximum of 4096 virtual IP addresses (including network addresses with subnet masks specified).
An IPv4 VRRP group without virtual IP addresses configured can exist on a device provided that other settings (for example, priority and preemption mode) are available. Such a VRRP group stays in inactive state and does not function.
The virtual IP address of an IPv4 VRRP group and the downlink interface IP addresses of the VRRP group members must be in the same subnet. Otherwise, the hosts in the subnet might fail to access external networks.
For VRRP to operate correctly in load balancing mode, make sure the virtual IP address of an IPv4 VRRP group is not the IP address of any interfaces in the VRRP group.
You cannot associate a VRRP group operating in load balancing mode with HA group.
A VRRP group associated with HA group cannot contain an IP address owner.
You cannot associate a VRRP group with both HA group and Track.
To modify the settings for the command, first execute the undo form of the command, and then execute the vrrp vrid command again.
Examples
# Create IPv4 VRRP group 1 and assign virtual IP address 10.10.10.10 to the VRRP group. Then assign virtual IP address 10.10.10.11 to the VRRP group.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] vrrp vrid 1 virtual-ip 10.10.10.10
[Sysname-GigabitEthernet1/0/1] vrrp vrid 1 virtual-ip 10.10.10.11
Related commands
display vrrp
vrrp vrid authentication-mode
Use vrrp vrid authentication-mode to configure the authentication mode and the authentication key for an IPv4 VRRP group to send and receive VRRP packets.
Use undo vrrp vrid authentication-mode to restore the default.
Syntax
vrrp vrid virtual-router-id authentication-mode { md5 | simple } { cipher | plain } string
undo vrrp vrid virtual-router-id authentication-mode
Default
Authentication is disabled when a VRRP group sends and receives VRRP packets.
Views
Interface view
Predefined user roles
network-admin
context-admin
Parameters
virtual-router-id: Specifies an IPv4 VRRP group by its virtual router ID in the range of 1 to 255.
md5: Specifies the MD5 authentication mode.
simple: Specifies the simple authentication mode.
cipher: Specifies a key in encrypted form.
plain: Specifies a key in plaintext form. For security purposes, the key specified in plaintext form will be stored in encrypted form.
string: Specifies the key. Its plaintext form is a case-sensitive string of 1 to 8 characters. Its encrypted form is a case-sensitive string of 1 to 41 characters.
Usage guidelines
To avoid attacks from unauthorized users, VRRP member routers add authentication keys in VRRP packets to authenticate one another. VRRP provides the following authentication modes:
· simple—Simple text authentication.
The sender fills an authentication key into the VRRP packet, and the receiver compares the received authentication key with its local authentication key. If the two authentication keys are the same, the received VRRP packet is legitimate. Otherwise, the received packet is illegitimate.
· md5—MD5 authentication.
The sender computes a digest for the VRRP packet by using the authentication key and MD5 algorithm, and saves the result to the authentication header. The receiver performs the same operation by using the authentication key and MD5 algorithm, and it compares the result with the content in the authentication header. If the results are the same, the received VRRP packet is legitimate. Otherwise, the received packet is illegitimate.
The MD5 authentication is more secure than the simple text authentication, but it costs more resources.
IMPORTANT: · You can configure different authentication modes and authentication keys for the VRRP groups on an interface. However, members of the same VRRP group must use the same authentication mode and authentication key. · For VRRPv3, this command does not take effect because VRRPv3 does not support authentication. |
Examples
# Set the authentication mode to simple and the authentication key to Sysname for VRRP group 1 on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] vrrp vrid 1 authentication-mode simple plain Sysname
Related commands
display vrrp
vrrp version
vrrp vrid preempt-mode
Use vrrp vrid preempt-mode to enable the preemptive mode for the device in an IPv4 VRRP group and set the preemption delay.
Use undo vrrp vrid preempt-mode to disable the preemptive mode for the device in an IPv4 VRRP group.
Use undo vrrp vrid preempt-mode delay to restore the default preemption delay.
Syntax
vrrp vrid virtual-router-id preempt-mode [ delay delay-value ]
undo vrrp vrid virtual-router-id preempt-mode [ delay ]
Default
The device operates in preemptive mode and the preemption delay is 0 centiseconds.
Views
Interface view
Predefined user roles
network-admin
context-admin
Parameters
virtual-router-id: Specifies an IPv4 VRRP group by its virtual router ID in the range of 1 to 255.
delay delay-value: Specifies the preemption delay in the range of 0 to 180000 in centiseconds.
Usage guidelines
Application scenarios
The preemptive mode ensures that the master router is always the device with the highest priority in the VRRP group.
Operating mechanism
In the VRRP network, if the master router or link fails, or the VRRP priority of the master router becomes 0, the following conditions might occur:
· The backup router cannot receive VRRP advertisement packets from the master router upon expiration of the timeout timer.
· The priority of VRRP advertisement packets received by the backup router is 0.
If the previous conditions exist, the backup router immediately becomes the master regardless of whether the preemptive mode is configured.
The preemption mechanism starts only when the VRRP priority of the master router becomes greater than 0 and smaller than the backup router priority due to track entry state change. The preemption rules are as follows:
· If the device is configured with the preemptive mode, it immediately becomes the new master upon receiving a VRRP advertisement with lower VRRP priority than the local device.
· If the device is configured with the preemptive mode and a preemption delay, it starts a timer upon receiving a VRRP advertisement with lower VRRP priority than the local device. The device becomes the new master only if the VRRP priority of all received VRRP advertisements is lower than the local device when the delay timer expires.
· If the device is configured with the non-preemptive mode, the device does not become the new master even if it receives a VRRP advertisement with lower VRRP priority than the local device.
You can configure an appropriate VRRP preemption delay timer for the following purposes:
· Avoid frequent state changes among members in a VRRP group because the network is unstable.
· Reserve enough data backup time for the device.
Recommended configuration
As a best practice, configure preemption parameters as follows:
· Configure the preemptive mode for the backup router without configuring a preemption delay. This ensures that a switchover is triggered when the VRRP priority of the master router is decreased. The backup router immediately takes over as the new master.
· Configure the preemptive mode for the master router and configure a preemption delay of n minutes. If the original master recovers, before services switch back, it has enough time (n minutes) to synchronize data from the current master. This ensures stability and data consistency of the VRRP group. The value range for n depends on the service data amount in the network.
¡ If the value for n is too small, data backup might not be completed when traffic switches back to the original master, affecting services.
¡ Set a greater value for n as needed to have the current master process services for service continuity.
Examples
# Enable the preemptive mode for the device in VRRP group 1, and set the preemption delay to 5000 centiseconds.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] vrrp vrid 1 preempt-mode delay 5000
Related commands
display vrrp
vrrp vrid priority
Use vrrp vrid priority to set the priority of the device in an IPv4 VRRP group.
Use undo vrrp vrid priority to restore the default.
Syntax
vrrp vrid virtual-router-id priority priority-value
undo vrrp vrid virtual-router-id priority
Default
The priority of a device in an IPv4 VRRP group is 100.
Views
Interface view
Predefined user roles
network-admin
context-admin
Parameters
virtual-router-id: Specifies an IPv4 VRRP group by its virtual router ID in the range of 1 to 255.
priority-value: Specifies a priority value in the range of 1 to 254. A higher value indicates a higher priority.
Usage guidelines
VRRP determines the role (master or backup) of each device in a VRRP group by priority. A device with a higher priority is more likely to become the master.
Priorities 1 to 254 are configurable. Priority 0 is reserved for special uses, and priority 255 is for the IP address owner. The IP address owner in a VRRP group always has a running priority of 255 and acts as the master as long as it operates correctly.
Examples
# Set the priority of the router to 150 in VRRP group 1 on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] vrrp vrid 1 priority 150
Related commands
display vrrp
vrrp vrid track
vrrp vrid shutdown
Use vrrp vrid shutdown to disable an IPv4 VRRP group.
Use undo vrrp vrid shutdown to enable an IPv4 VRRP group.
Syntax
vrrp vrid virtual-router-id shutdown
undo vrrp vrid virtual-router-id shutdown
Default
An IPv4 VRRP group is enabled.
Views
Interface view
Predefined user roles
network-admin
context-admin
Parameters
virtual-router-id: Specifies an IPv4 VRRP group by its virtual router ID in the range of 1 to 255.
Usage guidelines
CAUTION: You can use this command to temporarily disable an IPv4 VRRP group. After you execute this command, packets sent to the IPv4 VRRP group might be discarded. |
After this command is configured, the VRRP group stays in Initialize state, and its configurations remain unchanged. You can change the configuration of the VRRP group, and your changes take effect when you enable the VRRP group again.
Examples
# Disable IPv4 VRRP group 1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] vrrp vrid 1 shutdown
vrrp vrid source-interface
Use vrrp vrid source-interface to specify the source interface for an IPv4 VRRP group, instead of the interface where the VRRP group resides, to send and receive VRRP packets.
Use undo vrrp source-interface to cancel the specified source interface.
Syntax
vrrp vrid virtual-router-id source-interface interface-type interface-number
undo vrrp vrid virtual-router-id source-interface
Default
No source interface is specified for a VRRP group. The interface where the VRRP group resides sends and receives VRRP packets.
Views
Interface view
Predefined user roles
network-admin
context-admin
Parameters
virtual-router-id: Specifies an IPv4 VRRP group by its virtual router ID in the range of 1 to 255.
interface-type interface-number: Specifies an interface by its type and number.
Usage guidelines
If VRRP group members cannot exchange VRRP packets through the interfaces where the VRRP group resides, use this command to specify interfaces for VRRP packet exchange.
Examples
# Specify GigabitEthernet 1/0/2 as the source interface for VRRP packet exchange in IPv4 VRRP group 10.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] vrrp vrid 10 source-interface gigabitethernet 1/0/2
vrrp vrid timer advertise
Use vrrp vrid timer advertise to set the interval at which the master in an IPv4 VRRP group sends VRRP advertisements.
Use undo vrrp vrid timer advertise to restore the default.
Syntax
vrrp vrid virtual-router-id timer advertise adver-interval
undo vrrp vrid virtual-router-id timer advertise
Default
The master in an IPv4 VRRP group sends VRRP advertisements at an interval of 100 centiseconds.
Views
Interface view
Predefined user roles
network-admin
context-admin
Parameters
virtual-router-id: Specifies an IPv4 VRRP group by its virtual router ID in the range of 1 to 255.
adver-interval: Specifies an interval for the master in the specified IPv4 VRRP group to send VRRP advertisements. The value range for this argument is 10 to 4095 centiseconds. For VRRPv2, the value of the adver-interval argument can only be a multiple of 100. For example, if you configure values in the range of 10 to 100, 101 to 200, and 4001 to 4095, the actual values are 100, 200, and 4100, respectively. For VRRPv3, the configured value for the adver-interval argument takes effect.
Usage guidelines
The master in an IPv4 VRRP group periodically sends VRRP advertisements to declare its presence. You can use this command to configure the interval at which the master sends VRRP advertisements.
As a best practice to maintain system stability, set the VRRP advertisement interval to be greater than 100 centiseconds.
In VRRPv2, all routers in an IPv4 VRRP group must have the same interval for sending VRRP advertisements.
In VRRPv3, the routers in an IPv4 VRRP group can have different intervals for sending VRRP advertisements. The master in the VRRP group sends VRRP advertisements at the specified interval and carries the interval attribute in the advertisements. After a backup receives the advertisement, it records the interval in the advertisement. If the backup does not receive any VRRP advertisement when the timer (3 × recorded interval + Skew_Time) expires, it regards the master as failed and takes over.
Large network traffic might disable a backup from receiving VRRP advertisements from the master within the specified timer and trigger an unexpected master switchover. To solve this problem, you can use this command to set a larger interval.
Examples
# Configure the master in IPv4 VRRP group 1 to send VRRP advertisements at an interval of 500 centiseconds.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] vrrp vrid 1 timer advertise 500
Related commands
display vrrp
vrrp vrid track
Use vrrp vrid track to associate a VRRP group or the VFs in a VRRP group with a track entry.
Use undo vrrp vrid track to remove the association between a VRRP group or the VFs in a VRRP group and a track entry.
Syntax
vrrp vrid virtual-router-id track track-entry-number { forwarder-switchover member-ip ip-address | priority reduced [ priority-reduced ] | switchover | weight reduced [ weight-reduced ] }
undo vrrp vrid virtual-router-id track [ track-entry-number ] [ forwarder-switchover | priority reduced | switchover | weight reduced ]
Default
A VRRP group and the VFs in a VRRP group are not associated with any track entries.
Views
Interface view
Predefined user roles
network-admin
context-admin
Parameters
virtual-router-id: Specifies an IPv4 VRRP group number in the range of 1 to 255.
track-entry-number: Specifies a track entry by its number in the range of 1 to 1024.
forwarder-switchover member-ip ip-address: Enables the LVF on the router to take over the role of the AVF at the specified IP address immediately after the specified track entry changes to the Negative state. The ip-address argument specifies the IP address of a member router. You can use the display vrrp verbose command to view the IP addresses of the members.
priority reduced [ priority-reduced ]: Reduces the priority of the router in the VRRP group by the specified value when the state of the specified track entry changes to Negative. The value range for the priority-reduced argument is 1 to 255, and the default value is 10.
switchover: Enables the router in backup state to take over as the master immediately after the specified track entry changes to the Negative state.
weight reduced [ weight-reduced ]: Reduces the weight of all VFs on the router in the VRRP group by the specified value when the state of the specified track entry changes to Negative. The value range for the weight-reduced argument is 1 to 255, and the default value is 30.
Usage guidelines
When the associated track entry changes to the Negative state, one of the following events occurs depending on your configuration:
· The priority of the router in the VRRP group decreases by a specified value.
· The weight of VFs decreases by a specified value.
· The router immediately takes over as the master if it is a backup.
· The LVF on the router immediately takes over the role of the AVF at the specified IP address.
When the track entry changes from Negative to Positive or NotReady, one of the following events occurs:
· The router automatically restores its priority or VF weight.
· The failed master router becomes the master again.
· The failed AVF becomes active again.
Before executing this command, create a VRRP group on the interface and assign a virtual IP address to the VRRP group.
You can create a track entry by using the track command before or after you associate it with a VRRP group or the VFs in a VRRP group. For more information about configuring track entries, see Network Management and Monitoring Configuration Guide.
If no track entry is specified, the undo vrrp vrid track command removes all associations between track entries and the VRRP group or VFs in the VRRP group.
The vrrp vrid track priority reduced command and the vrrp vrid track switchover command do not take effect on an IP address owner. If you configure the command on an IP address owner, the configuration takes effect after the router changes to be a non-IP address owner.
The following parameters take effect only when the IPv4 VRRP group is operating in load balancing mode:
· The forwarder-switchover member-ip ip-address option.
· The weight reduced weight-reduced option.
· The weight reduced keyword.
The weight of a VF is 255, and its lower limit of failure is 10.
When the weight of a VF owner is higher than or equal to the lower limit of failure, its priority is always 255. The priority does not change with the weight. When the upstream link of the VF owner fails, an LVF must take over as the AVF. The switchover occurs when the weight of the VF owner drops below the lower limit of failure. This requires that the reduced weight for the VF owner be higher than 245.
Examples
# Associate VRRP group 1 on GigabitEthernet 1/0/1 with track entry 1 and decrease the router priority by 50 when the state of track entry 1 changes to Negative.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] vrrp vrid 1 track 1 priority reduced 50
# Associate the VFs of IPv4 VRRP group 1 on GigabitEthernet 1/0/1 with track entry 1. Enable the LVF to take over the role of the AVF at the IP address of 10.1.1.3 immediately when the state of track entry 1 changes to Negative.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] vrrp vrid 1 track 1 forwarder-switchover member-ip 10.1.1.3
# Associate the VFs of IPv4 VRRP group 1 on GigabitEthernet 1/0/1 with track entry 1. Decrease the weight of all VFs on the router in the VRRP group by 50 when the state of track entry 1 changes to Negative.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] vrrp vrid 1 track 1 weight reduced 50
Related commands
display vrrp
IPv6 VRRP commands
display vrrp ipv6
Use display vrrp ipv6 to display the states of IPv6 VRRP groups.
Syntax
display vrrp ipv6 [ interface interface-type interface-number [ vrid virtual-router-id ] ] [ verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
context-admin
context-operator
Parameters
interface interface-type interface-number: Specifies an interface by its type and number.
vrid virtual-router-id: Specifies an IPv6 VRRP group by its virtual router ID in the range of 1 to 255.
verbose: Displays detailed IPv6 VRRP group information. If you do not specify the verbose keyword, the command displays brief IPv6 VRRP group information.
Usage guidelines
If no interface or VRRP group is specified, this command displays the states of all IPv6 VRRP groups.
If only an interface is specified, this command displays the states of all IPv6 VRRP groups on the specified interface.
If both an interface and an IPv6 VRRP group are specified, this command displays the states of the specified IPv6 VRRP group on the specified interface.
Examples
# Display brief information about all IPv6 VRRP groups on the device when VRRP operates in standard mode.
<Sysname> display vrrp ipv6
IPv6 Virtual Router Information:
Running Mode : Standard
RBM control channel is established
IPv6 VRRP active group status: Master
IPv6 VRRP standby group status: Backup
Total number of virtual routers : 1
Interface VRID State Running Adver Auth Virtual
Pri Timer Type IP
-----------------------------------------------------------------------------
GE1/0/1 1 Master 150 100 Not supported FE80::1
Table 7 Command output (in standard mode)
Field |
Description |
Running Mode |
VRRP operating mode (standard mode). |
RBM control channel is established |
The HA control channel has been established. This field is displayed only when IPv6 VRRP is associated with HA group. |
IPv6 VRRP active group status |
Running status of the device in the IPv6 VRRP active group: Master or Backup. This field is displayed only when IPv6 VRRP is associated with HA group. |
IPv6 VRRP standby group status |
Running status of the device in the IPv6 VRRP standby group: Master or Backup. This field is displayed only when IPv6 VRRP is associated with HA group. |
Total number of virtual routers |
Total number of VRRP groups. |
Interface |
Interface where the VRRP group is configured. |
VRID |
Virtual router ID (VRRP group number). |
State |
State of the router in the VRRP group: · Master—The device is the master in the VRRP group. · Backup—The device is the backup in the VRRP group. · Initialize—The VRRP group is in disabled state on the device. · Inactive—The VRRP group is in invalid state, for example, when the VRRP group is not assigned a virtual IP address. |
Running Pri |
Current priority of the router. When a track entry is associated with a VRRP group on the router, the router's priority changes when the track entry's status changes. |
Adver Timer |
VRRP advertisement sending interval in centiseconds. |
Auth Type |
Authentication type. The value can only be Not supported. |
Virtual IP |
Virtual IP address of the VRRP group. |
# Display detailed information about all IPv6 VRRP groups on the device when VRRP operates in standard mode.
<Sysname> display vrrp ipv6 verbose
IPv6 Virtual Router Information:
Running Mode : Standard
RBM control channel is established
IPv6 VRRP active group status: Master
IPv6 VRRP standby group status: Backup
Total number of virtual routers : 2
Interface GigabitEthernet1/0/1
VRID : 1 Adver Timer : 100
Admin Status : Up State : Master
Config Pri : 150 Running Pri : 150
Preempt Mode : Yes Delay Time : 10
Auth Type : Not supported
Virtual IP : FE80::1/128
Virtual MAC : 0000-5e00-0201
Master IP : FE80::2
VRRP Track Information:
Track Object : 1 State : Positive Pri Reduced : 50
Interface GigabitEthernet1/0/1
VRID : 2 Adver Timer : 100
Admin Status : Up State : Backup
Config Pri : 80 Running Pri : 80
Preempt Mode : Yes Delay Time : 0
Become Master : 2450ms left
Auth Type : Not supported
Virtual IP : FE80::11/128
Master IP : FE80::12
Table 8 Command output (in standard mode)
Field |
Description |
|
Running Mode |
VRRP operating mode (standard mode). |
|
RBM control channel is established |
The HA control channel has been established. This field is displayed only when IPv6 VRRP is associated with HA group. |
|
IPv6 VRRP active group status |
Running status of the device in the IPv6 VRRP active group: Master or Backup. This field is displayed only when IPv6 VRRP is associated with HA group. |
|
IPv6 VRRP standby group status |
Running status of the device in the IPv6 VRRP standby group: Master or Backup. This field is displayed only when IPv6 VRRP is associated with HA group. |
|
Total number of virtual routers |
Total number of VRRP groups. |
|
Interface |
Interface where the VRRP group is configured. |
|
VRID |
Virtual router ID (VRRP group number). |
|
Adver Timer |
VRRP advertisement sending interval in centiseconds. |
|
Admin Status |
Administrative status: Up or Down. |
|
State |
State of the router in the VRRP group: · Master—The device is the master in the VRRP group. · Backup—The device is the backup in the VRRP group. · Initialize—The VRRP group is in disabled state on the device. · Inactive—The VRRP group is in invalid state, for example, when the VRRP group is not assigned a virtual IP address. |
|
Config Pri |
Configured priority of the router, which is configured by using the vrrp ipv6 vrid priority command. |
|
Running Pri |
Current priority of the router. When a track entry is associated with a VRRP group on the router, the router's priority changes when the track entry's status changes. |
|
Preempt Mode |
Preemptive mode: · Yes. · No. |
|
Delay Time |
Preemption delay in centiseconds. |
|
Become Master |
Time (in milliseconds) that a backup router has to wait before it becomes the master. This field is displayed only when the router is a backup. |
|
Auth Type |
Authentication type. The value can only be Not supported. |
|
Virtual IP |
Virtual IP address and prefix length of the VRRP group. |
|
Virtual MAC |
Virtual MAC address of the VRRP group's virtual IP address, which is displayed when the router is the master. |
|
Master IP |
Link-local address of the interface where the master resides. |
|
VRRP Track Information |
Track entry information. This field is displayed only after you configure the vrrp ipv6 vrid track command. |
|
Track Object |
Track entry which is associated with the VRRP group. |
|
State |
Track entry state: · Negative. · Positive. · NotReady. |
|
Pri Reduced |
Value by which the priority decreases when the state of the associated track entry becomes Negative. |
|
Switchover |
Switchover mode. When the state of the associated track entry becomes Negative, the backup immediately becomes the master. |
|
# Display brief information about all IPv6 VRRP groups on the device when VRRP operates in load balancing mode.
<Sysname> display vrrp ipv6
IPv6 Virtual Router Information:
Running Mode : Load Balance
Total number of virtual routers : 1
Interface VRID State Running Address Active
Pri
----------------------------------------------------------------------
GE1/0/1 1 Master 150 FE80::1 Local
----- VF 1 Active 255 000f-e2ff-4011 Local
Table 9 Command output (in load balancing mode)
Field |
Description |
Running Mode |
VRRP operating mode (load balancing mode). |
Total number of virtual routers |
Total number of VRRP groups. |
Interface |
Interface where the VRRP group is configured. |
VRID |
Virtual router ID (VRRP group number) or VF ID. |
State |
· For a VRRP group, this field indicates the state of the router in the VRRP group: ¡ Master—The device is the master in the VRRP group. ¡ Backup—The device is the backup in the VRRP group. ¡ Initialize—The VRRP group is in disabled state on the device. ¡ Inactive—The VRRP group is in invalid state, for example, when the VRRP group is not assigned a virtual IP address. · For a VF, this field indicates the state of the VF in the VRRP group: ¡ Active—The VF is in forwarding state. ¡ Listening—The VF is in listening (backup) state. ¡ Initialize—The VF is in initialized state. |
Running Pri |
· For a VRRP group, this field indicates the running priority of the router. When a track entry is associated with a VRRP group on the router, the router's priority changes when the track entry's status changes. · For a VF, this field indicates the running priority of the VF. When a track entry is associated with a VF, the priority of the VF changes if the state of the track entry changes. |
Address |
· For a VRRP group, this field indicates the virtual IP address of the VRRP group. · For a VF, this field indicates the virtual MAC address of the VF. |
Active |
· For a VRRP group, this field indicates the link-local address of the interface where the master resides. If the current router is the master, this field displays local. · For a VF, this field indicates the link-local address of the interface where the AVF resides. If the current VF is the AVF, this field displays local. |
# Display detailed information about all IPv6 VRRP groups on the device when VRRP operates in load balancing mode.
<Sysname> display vrrp ipv6 verbose
IPv6 Virtual Router Information:
Running Mode : Load Balance
Total number of virtual routers : 2
Interface GigabitEthernet1/0/1
VRID : 1 Adver Timer : 100
Admin Status : Up State : Master
Config Pri : 150 Running Pri : 150
Preempt Mode : Yes Delay Time : 5
Auth Type : Not supported
Virtual IP : FE80::10/128
Member IP List : FE80::3 (Local, Master)
FE80::2 (Backup)
Master IP : FE80::3
VRRP Track Information:
Track Object : 1 State : Positive Pri Reduced : 50
Forwarder Information: 2 Forwarders 1 Active
Config Weight : 255
Running Weight : 255
Forwarder 01
State : Active
Virtual MAC : 000f-e2ff-4011 (Owner)
Owner ID : 0000-5e01-1101
Priority : 255
Active : local
Forwarder 02
State : Listening
Virtual MAC : 000f-e2ff-4012 (Learnt)
Owner ID : 0000-5e01-1103
Priority : 127
Active : FE80::2
Forwarder Weight Track Information:
Track Object : 1 State : Positive Weight Reduced : 250
Interface GigabitEthernet1/0/1
VRID : 11 Adver Timer : 100
Admin Status : Up State : Backup
Config Pri : 80 Running Pri : 80
Preempt Mode : Yes Delay Time : 0
Become Master : 2450ms left
Auth Type : Not supported
Virtual IP : FE80::11/128
Member IP List : FE80::3 (Local, Backup)
FE80::2 (Master)
Master IP : FE80::2
Forwarder Information: 2 Forwarders 1 Active
Config Weight : 255
Running Weight : 255
Forwarder 01
State : Active
Virtual MAC : 000f-e2ff-40b1 (Learnt)
Owner ID : 0000-5e01-1103
Priority : 127
Active : FE80::2
Forwarder 02
State : Listening
Virtual MAC : 000f-e2ff-40b2 (Owner)
Owner ID : 0000-5e01-1101
Priority : 255
Active : local
Table 10 Command output (in load balancing mode)
Field |
Description |
Running Mode |
VRRP operating mode (load balancing mode). |
Total number of virtual routers |
Total number of VRRP groups. |
Interface |
Interface where the VRRP group is configured. |
VRID |
Virtual router ID (VRRP group number). |
Adver Timer |
VRRP advertisement sending interval in centiseconds. |
Admin Status |
Administrative status: Up or Down. |
State |
State of the router in the VRRP group: · Master—The device is the master in the VRRP group. · Backup—The device is the backup in the VRRP group. · Initialize—The VRRP group is in disabled state on the device. · Inactive—The VRRP group is in invalid state, for example, when the VRRP group is not assigned a virtual IP address. |
Config Pri |
Configured priority of the router, which is configured by using the vrrp ipv6 vrid priority command. |
Running Pri |
Current priority of the router. When a track entry is associated with a VRRP group on the router, the router's priority changes when the track entry's status changes. |
Preempt Mode |
Preemptive mode: · Yes. · No. |
Delay Time |
Preemption delay in centiseconds. |
Become Master |
Time (in milliseconds) that a backup router has to wait before it becomes the master. This field is displayed only when the router is a backup. |
Auth Type |
Authentication type. The value can only be Not supported. |
Virtual IP |
List of virtual IPv6 addresses and prefix lengths of the VRRP group. |
Member IP List |
IP addresses of the member devices in the VRRP group: · Local—IP address of the local router. · Master—IP address of the master. · Backup—IP address of the backup. |
VRRP Track Information |
Track entry that is associated with the VRRP group. This field is displayed only after you configure the vrrp ipv6 vrid track command. |
Track Object |
Track entry to be monitored. This field is displayed only after you configure the vrrp ipv6 vrid track command. |
State |
Track entry state: · Negative. · Positive. · NotReady. |
Pri Reduced |
Value by which the priority decreases when the status of the associated track entry becomes Negative. This field is displayed only after you configure the vrrp ipv6 vrid track command. |
Switchover |
Switchover mode. When the status of the associated track entry becomes Negative, the backup immediately becomes the master. |
Forwarder Information: 2 Forwarders 1 Active |
VF information: Two VFs exist and one is the AVF. |
Config Weight |
Configured weight of the VF: 255. |
Running Weight |
Current weight of the VF. When a track entry is associated with the VFs of a VRRP group, the VFs' weights change when the track entry's status changes. |
Forwarder 01 |
Information about VF 01. |
State |
VF state: · Active—The VF is in forwarding state and can forward packets. · Listening—The VF is in listening state and cannot forward packets. · Initialize—The VF is in Initialize state and does not provide the VRRP backup functions. |
Virtual MAC |
Virtual MAC address of the VF. In VRRP load balancing mode, the value for this field also contains the virtual MAC address attribute, for example, 000f-e2ff-40b2 (Owner). Options for the virtual MAC address attribute include: · Owner—The device is the VF owner of the virtual MAC address. · Learnt—The device is not the VF owner. Instead, it is the backup for the VF owner. · Take Over—The device has taken over the VF owner and has become the AVF to forward traffic. (If the VF owner failure is not recovered upon expiration of the VF timeout timer about 1800 seconds, the system automatically deletes the VF.) |
Owner ID |
Real MAC address of the VF owner. |
Priority |
VF priority in the range of 1 to 255. |
Active |
Link-local address of the interface where the AVF resides. If the current VF is the AVF, this field displays local. |
Forwarder Weight Track Configuration |
VF weight Track configuration. The field is displayed only after you configure the vrrp ipv6 vrid track command. |
Track Object |
Track entry which is associated with the VFs. The field is displayed only after you configure the vrrp ipv6 vrid track command. |
State |
Track entry state: · Negative. · Positive. · NotReady. |
Weight Reduced |
Value by which the weights of the VFs decrease when the state of the associated track entry changes to Negative. The field is displayed only after you configure the vrrp ipv6 vrid track command. |
display vrrp ipv6 statistics
Use display vrrp ipv6 statistics to display statistics for IPv6 VRRP groups.
Syntax
display vrrp ipv6 statistics [ interface interface-type interface-number [ vrid virtual-router-id ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
context-admin
context-operator
Parameters
interface interface-type interface-number: Specifies an interface by its type and number.
vrid virtual-router-id: Specifies an IPv6 VRRP group by its virtual router ID in the range of 1 to 255.
Usage guidelines
If no interface or VRRP group is specified, this command displays statistics for all IPv6 VRRP groups.
If only an interface is specified, this command displays statistics for all IPv6 VRRP groups on the specified interface.
If both an interface and an IPv6 VRRP group are specified, this command displays statistics for the specified IPv6 VRRP group on the specified interface.
Examples
# Display statistics for all IPv6 VRRP groups when VRRP operates in standard mode.
<Sysname> display vrrp ipv6 statistics
Interface : GigabitEthernet1/0/1
VRID : 1
CheckSum Errors : 0 Version Errors : 0
Invalid Pkts Rcvd : 0 Unexpected Pkts Rcvd : 0
Hop Limit Errors : 0 Advertisement Interval Errors : 0
Invalid Auth Type : 0 Auth Failures : 0
Packet Length Errors : 0 Auth Type Mismatch : 0
Become Master : 1 Address List Errors : 0
Adver Rcvd : 0 Priority Zero Pkts Rcvd : 0
Adver Sent : 425 Priority Zero Pkts Sent : 0
Global statistics
CheckSum Errors : 0
Version Errors : 0
VRID Errors : 0
# Display statistics for all IPv6 VRRP groups when VRRP operates in load balancing mode.
<Sysname> display vrrp ipv6 statistics
Interface : GigabitEthernet1/0/1
VRID : 1
CheckSum Errors : 0 Version Errors : 0
Invalid Pkts Rcvd : 0 Unexpected Pkts Rcvd : 0
Hop Limit Errors : 0 Advertisement Interval Errors : 0
Invalid Auth Type : 0 Auth Failures : 0
Packet Length Errors : 0 Auth Type Mismatch : 0
Become Master : 39 Address List Errors : 0
Become AVF : 13 Packet Option Errors : 0
Adver Rcvd : 2562 Priority Zero Pkts Rcvd : 1
Adver Sent : 16373 Priority Zero Pkts Sent : 49
Request Rcvd : 2 Reply Rcvd : 10
Request Sent : 12 Reply Sent : 2
Release Rcvd : 0 VF Priority Zero Pkts Rcvd : 1
Release Sent : 0 VF Priority Zero Pkts Sent : 11
Redirect Timer Expires : 1 Time-out Timer Expires : 0
Global statistics
CheckSum Errors : 0
Version Errors : 0
VRID Errors : 0
Table 11 Command output (in standard mode)
Field |
Description |
Interface |
Interface where the VRRP group is configured. |
VRID |
VRRP group number. |
CheckSum Errors |
Number of packets with checksum errors. |
Version Errors |
Number of packets with version errors. |
Invalid Pkts Rcvd |
Number of received packets of invalid packet types. |
Unexpected Pkts Rcvd |
Number of received unexpected packets. |
Advertisement Interval Errors |
Number of packets with advertisement interval errors. |
Hop Limit Errors |
Number of packets with hop limit errors. |
Auth Failures |
Number of packets with authentication failures. |
Invalid Auth Type |
Number of packets with authentication failures because of invalid authentication types. |
Auth Type Mismatch |
Number of packets with authentication failures because of mismatching authentication types. |
Packet Length Errors |
Number of packets with VRRP packet length errors. |
Address List Errors |
Number of packets with virtual IP address list errors. |
Become Master |
Number of times that the router has been elected as the master. |
Priority Zero Pkts Rcvd |
Number of received advertisements with the router priority of 0. |
Adver Rcvd |
Number of received advertisements. |
Priority Zero Pkts Sent |
Number of sent advertisements with the router priority of 0. |
Adver Sent |
Number of sent advertisements. |
Global statistics |
Global statistics for all IPv6 VRRP groups. |
CheckSum Errors |
Total number of packets with checksum errors. |
Version Errors |
Total number of packets with version errors. |
VRID Errors |
Total number of packets with VRID errors. |
Table 12 Command output (in load balancing mode)
Field |
Description |
Interface |
Interface where the VRRP group is configured. |
VRID |
VRRP group number. |
CheckSum Errors |
Number of packets with checksum errors. |
Version Errors |
Number of packets with version errors. |
Invalid Pkts Rcvd |
Number of received packets of invalid packet types. |
Unexpected Pkts Rcvd |
Number of received unexpected packets. |
Advertisement Interval Errors |
Number of packets with advertisement interval errors. |
Hop Limit Errors |
Number of packets with hop limit errors. |
Auth Failures |
Number of packets with authentication failures. |
Invalid Auth Type |
Number of packets with authentication failures because of invalid authentication types. |
Auth Type Mismatch |
Number of packets with authentication failures because of mismatching authentication types. |
Packet Length Errors |
Number of packets with VRRP packet length errors. |
Address List Errors |
Number of packets with virtual IP address list errors. |
Become Master |
Number of times that the router has been elected as the master. |
Redirect Timer Expires |
Number of times that the redirect timer expired. |
Become AVF |
Number of times that the VF has been elected as the AVF. |
Time-out Timer Expires |
Number of times that the time-out timer expired. |
Adver Rcvd |
Number of received advertisements. |
Request Rcvd |
Number of received requests. |
Adver Sent |
Number of sent advertisements. |
Request Sent |
Number of sent requests. |
Reply Rcvd |
Number of received replies. |
Release Rcvd |
Number of received release packets. |
Reply Sent |
Number of sent replies. |
Release Sent |
Number of sent release packets. |
Priority Zero Pkts Rcvd |
Number of received advertisements with the router priority of 0. |
VF Priority Zero Pkts Rcvd |
Number of received advertisements with the VF priority of 0. |
Priority Zero Pkts Sent |
Number of sent advertisements with the router priority of 0. |
VF Priority Zero Pkts Sent |
Number of sent advertisements with the VF priority of 0. |
Packet Option Errors |
Number of packet option errors. |
Global statistics |
Global statistics for all IPv6 VRRP groups. |
CheckSum Errors |
Total number of packets with checksum errors. |
Version Errors |
Total number of packets with version errors. |
VRID Errors |
Total number of packets with VRID errors. |
Related commands
reset vrrp ipv6 statistics
reset vrrp ipv6 statistics
Use reset vrrp ipv6 statistics to clear statistics for IPv6 VRRP groups.
Syntax
reset vrrp ipv6 statistics [ interface interface-type interface-number [ vrid virtual-router-id ] ]
Views
User view
Predefined user roles
network-admin
context-admin
Parameters
interface interface-type interface-number: Specifies an interface by its type and number.
vrid virtual-router-id: Specifies an IPv6 VRRP group by its virtual router ID in the range of 1 to 255.
Usage guidelines
If no interface or VRRP group is specified, this command clears statistics for all IPv6 VRRP groups.
If only an interface is specified, this command clears statistics for all IPv6 VRRP groups on the specified interface.
If both an interface and an IPv6 VRRP group are specified, this command clears statistics for the specified IPv6 VRRP group on the specified interface.
Examples
# Clear statistics for all IPv6 VRRP groups on all interfaces.
<Sysname> reset vrrp ipv6 statistics
Related commands
display vrrp ipv6 statistics
vrrp ipv6 dot1q
Use vrrp ipv6 dot1q to specify IPv6 VRRP control VLANs.
Use undo vrrp ipv6 dot1q to restore the default.
Syntax
vrrp ipv6 dot1q vid vlan-id
undo vrrp ipv6 dot1q
Default
No IPv6 VRRP control VLANs are specified. If the ambiguous termination-enabled interface supports transmitting broadcasts/multicasts, the master sends IPv6 VRRP advertisements within all VLANs whose packets are terminated by the interface.
Views
Layer 3 Ethernet subinterface view
Layer 3 aggregate subinterface view
Reth subinterface view
Predefined user roles
network-admin
context-admin
Parameters
vid vlan-id: Specifies an IPv6 VRRP control VLAN by its VLAN ID in the range of 1 to 4094.
Usage guidelines
If you execute this command multiple times, the most recent configuration takes effect.
This command takes effect only on the following interfaces:
· Layer 3 Ethernet subinterfaces.
· Layer 3 aggregate subinterfaces.
· Reth subinterfaces.
Examples
# Specify VLAN 2 as the IPv6 VRRP control VLAN.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1.2
[Sysname-GigabitEthernet1/0/1.2] vrrp ipv6 dot1q vid 2
vrrp ipv6 dscp
Use vrrp ipv6 dscp to set a DSCP value for IPv6 VRRP packets.
Use undo vrrp ipv6 dscp to restore the default.
Syntax
vrrp ipv6 dscp dscp-value
undo vrrp ipv6 dscp
Default
The DSCP value for IPv6 VRRP packets is 56.
Views
System view
Predefined user roles
network-admin
context-admin
Parameters
dscp-value: Specifies a DSCP value for IPv6 VRRP packets, in the range of 0 to 63.
Usage guidelines
The DSCP value identifies the packet priority during transmission. A greater DSCP value means a higher packet priority.
Examples
# Set the DSCP value to 30 for IPv6 VRRP packets.
<Sysname> system-view
[Sysname] vrrp ipv6 dscp 30
vrrp ipv6 isolate enable
Use vrrp ipv6 isolate enable to enable the isolation mode for IPv6 VRRP.
Use undo vrrp ipv6 isolate enable to disable the isolation mode for IPv6 VRRP.
Syntax
vrrp ipv6 isolate enable
undo vrrp ipv6 isolate enable
Default
The isolation mode is disabled for IPv6 VRRP.
Views
System view
Predefined user roles
network-admin
context-admin
Usage guidelines
To maintain the master in an IPv6 VRRP group, execute this command to perform a master/backup switchover. In isolation mode, the maintenance operation on the device is performed after a master/backup switchover and does not affect services.
Enabling the isolation mode sets the priority of the device to 0 in the IPv6 VRRP group.
If you set the priority with the vrrp ipv6 vrid priority command for a device in isolation mode, the setting does not take effect until the isolation mode is disabled.
Examples
# Enable the isolation mode for IPv6 VRRP.
<Sysname> system-view
[Sysname] vrrp ipv6 isolate enable
Related commands
vrrp ipv6 vrid priority
vrrp ipv6 mode
Use vrrp ipv6 mode to specify the operating mode for IPv6 VRRP.
Use undo vrrp ipv6 mode to restore the default.
Syntax
vrrp ipv6 mode load-balance
undo vrrp ipv6 mode
Default
IPv6 VRRP operates in standard mode.
Views
System view
Predefined user roles
network-admin
context-admin
Parameters
load-balance: Specifies the load balancing mode.
Usage guidelines
For IPv6 VRRP to operate correctly in load balancing mode, make sure the virtual IPv6 address of an IPv6 VRRP group is not the IPv6 address of any interfaces in the VRRP group.
After you create IPv6 VRRP groups on the router, you can use this command to modify their operating mode. All IPv6 VRRP groups on the router operate in the specified mode.
Examples
# Specify the load balancing mode for IPv6 VRRP.
<Sysname> system-view
[Sysname] vrrp ipv6 mode load-balance
Related commands
display vrrp ipv6
vrrp ipv6 virtual-mac enable
Use vrrp ipv6 virtual-mac enable to enable virtual MAC address advertisement.
Use undo vrrp ipv6 virtual-mac enable to disable virtual MAC address advertisement.
Syntax
vrrp ipv6 virtual-mac enable
undo vrrp ipv6 virtual-mac enable
Default
Virtual MAC address advertisement is enabled.
Views
System view
Predefined user roles
network-admin
context-admin
Usage guidelines
Application scenarios
Typically, an IPv6 VRRP group uses the virtual MAC address dynamically generated by the master to communicate with the upstream and downstream devices. The virtual MAC address might change upon a restart of the IPv6 VRRP group, and cannot be used to identify the IPv6 VRRP group. If the static ARP entries on the upstream and downstream devices contain the virtual MAC address, a communication failure might occur upon a virtual MAC address change.
To address this issue, you can disable virtual MAC address advertisement. After you disable virtual MAC address advertisement, the following situations will occur:
· The IPv6 VRRP group will use the real MAC address of the interface configured with IPv6 VRRP to communicate with the upstream and downstream devices.
· The master will advertise the virtual IP address and real MAC address in gratuitous ARP packets.
· Upon receiving an ARP request, the master will respond with the real MAC address.
A real MAC address is fixed, and is applicable to scenarios where static ARP entries are configured.
Restrictions and guidelines
To use a real MAC address to communicate with a VRRP group, configure the undo vrrp ipv6 virtual-mac enable command during the network deployment phase. If you configure the undo vrrp ipv6 virtual-mac enable command when the device is operating, network traffic might be interrupted. The maximum interruption time is the ND entry aging time.
This command takes effect only when IPv6 VRRP operates in standard mode.
Examples
# Disable virtual MAC address advertisement.
<Sysname> system-view
[Sysname] undo vrrp ipv6 virtual-mac enable
Related commands
vrrp ipv6 mode
vrrp ipv6 vrid
Use vrrp ipv6 vrid to create an IPv6 VRRP group and assign a virtual IPv6 address to it, or to assign a virtual IPv6 address to an existing IPv6 VRRP group.
Use undo vrrp ipv6 vrid to remove all configurations of an IPv6 VRRP group, or to remove a virtual IPv6 address from an IPv6 VRRP group.
Syntax
In common networks:
vrrp ipv6 vrid virtual-router-id virtual-ip virtual-address [ prefix-length ] [ link-local ]
undo vrrp ipv6 vrid virtual-router-id [ virtual-ip [ virtual-address [ prefix-length ] [ link-local ] ] ]
In VRRP-HA group associated networks:
vrrp ipv6 vrid virtual-router-id virtual-ip virtual-address [ prefix-length ] [ link-local { active | standby } ]
undo vrrp ipv6 vrid virtual-router-id [ virtual-ip [ virtual-address [ prefix-length ] [ link-local ] ] ]
Default
No IPv6 VRRP groups exist.
Views
Interface view
Predefined user roles
network-admin
context-admin
Parameters
virtual-router-id: Specifies an IPv6 VRRP group by its virtual router ID in the range of 1 to 255.
virtual-ip: Configure a virtual IPv6 address for the IPv6 VRRP group. If you do not specify this keyword, the undo form of the command deletes the entire IPv6 VRRP group.
virtual-address: Specifies a virtual IPv6 address. If you do not specify this argument, the undo form of the command removes all virtual IPv6 addresses from the specified IPv6 VRRP group.
prefix-length: Specifies the prefix length of the IPv6 address, in the range of 1 to 128. The default prefix length is 128.
link-local: Specifies a link-local address as the virtual IPv6 address. The first 10 bits of the IPv6 link-local address must be 1111111010 in binary format, which means the first group of hexadecimal digits in the IPv6 address is in the range of FE80 to FEBF.
active: Associates the IPv6 VRRP group with HA group by adding the device to the IPv6 VRRP active group. The initial role of the device is master. For more information about the HA group, see HA group configuration in High Availability Configuration Guide.
standby: Associates the IPv6 VRRP group with HA group by adding the device to the IPv6 VRRP standby group. The initial role of the device is backup.
Usage guidelines
You can execute this command multiple times to assign multiple virtual IPv6 addresses to an IPv6 VRRP group. In general network scenarios, an IPv6 VRRP group can have a maximum of 16 virtual IPv6 addresses. In network scenarios where VRRP is associated with HA group, an IPv6 VRRP group can have a maximum of 4096 virtual IPv6 addresses (including network addresses with prefix lengths specified).
The first virtual IPv6 address that you assign to an IPv6 VRRP group must be a link-local address, and it must be removed last.
An IPv6 VRRP group can have only one link-local address as its virtual IPv6 address.
An IPv6 VRRP group without virtual IPv6 addresses configured can exist on a device provided that other settings (for example, priority and preemption mode) are available. Such a VRRP group stays in inactive state and does not function.
The virtual IPv6 address of an IPv6 VRRP group and the downlink interface IPv6 address of the VRRP group members must be in the same subnet. Otherwise, the hosts in the subnet might fail to access external networks.
For IPv6 VRRP to operate correctly in load balancing mode, make sure the virtual IPv6 address of an IPv6 VRRP group is not the IPv6 address of any interfaces in the IPv6 VRRP group.
You cannot associate an IPv6 VRRP group operating in load balancing mode with HA group.
An IPv6 VRRP group associated with HA group cannot contain an IPv6 address owner.
You cannot associate an IPv6 VRRP group with both HA group and Track.
To modify the settings for the command, first execute the undo form of the command, and then execute the vrrp ipv6 vrid command again.
Examples
# Create IPv6 VRRP group 1 and assign virtual IPv6 address fe80::10 to the VRRP group. Then assign virtual IPv6 address 1::10 to the VRRP group.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] vrrp ipv6 vrid 1 virtual-ip fe80::10 link-local
[Sysname-GigabitEthernet1/0/1] vrrp ipv6 vrid 1 virtual-ip 1::10
Related commands
display vrrp ipv6
vrrp ipv6 vrid preempt-mode
Use vrrp ipv6 vrid preempt-mode to enable the preemptive mode for the router in an IPv6 VRRP group and set the preemption delay.
Use undo vrrp ipv6 vrid preempt-mode to disable the preemptive mode for the router in an IPv6 VRRP group.
Use undo vrrp ipv6 vrid preempt-mode delay to restore the default preemption delay.
Syntax
vrrp ipv6 vrid virtual-router-id preempt-mode [ delay delay-value ]
undo vrrp ipv6 vrid virtual-router-id preempt-mode [ delay ]
Default
The router operates in preemptive mode and the preemption delay is 0 centiseconds.
Views
Interface view
Predefined user roles
network-admin
context-admin
Parameters
virtual-router-id: Specifies an IPv6 VRRP group by its virtual router ID in the range of 1 to 255.
delay delay-value: Specifies the preemption delay in the range of 0 to 180000 in centiseconds.
Usage guidelines
Application scenarios
The preemptive mode ensures that the master router is always the device with the highest priority in the VRRP group.
Operating mechanism
In the VRRP network, if the master router or link fails, or the VRRP priority of the master router becomes 0, the following conditions might occur:
· The backup router cannot receive VRRP advertisement packets from the master router upon expiration of the timeout timer.
· The priority of VRRP advertisement packets received by the backup router is 0.
If the previous conditions exist, the backup router immediately becomes the master regardless of whether the preemptive mode is configured.
The preemption mechanism starts only when the VRRP priority of the master router becomes greater than 0 and smaller than the backup router priority due to track entry state change. The preemption rules are as follows:
· If the device is configured with the preemptive mode, it immediately becomes the new master upon receiving a VRRP advertisement with lower VRRP priority than the local device.
· If the device is configured with the preemptive mode and a preemption delay, it starts a timer upon receiving a VRRP advertisement with lower VRRP priority than the local device. The device becomes the new master only if the VRRP priority of all received VRRP advertisements is lower than the local device when the delay timer expires.
· If the device is configured with the non-preemptive mode, the device does not become the new master even if it receives a VRRP advertisement with lower VRRP priority than the local device.
You can configure an appropriate VRRP preemption delay timer for the following purposes:
· Avoid frequent state changes among members in a VRRP group because the network is unstable.
· Reserve enough data backup time for the device.
Recommended configuration
As a best practice, configure preemption parameters as follows:
· Configure the preemptive mode for the backup router without configuring a preemption delay. This ensures that a switchover is triggered when the VRRP priority of the master router is decreased. The backup router immediately takes over as the new master.
· Configure the preemptive mode for the master router and configure a preemption delay of n minutes. If the original master recovers, before services switch back, it has enough time (n minutes) to synchronize data from the current master. This ensures stability and data consistency of the VRRP group. The value range for n depends on the service data amount in the network.
¡ If the value for n is too small, data backup might not be completed when traffic switches back to the original master, affecting services.
¡ Set a greater value for n as needed to have the current master process services for service continuity.
Examples
# Enable the preemptive mode for VRRP group 1, and set the preemption delay to 5000 centiseconds.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] vrrp ipv6 vrid 10 preempt-mode delay 5000
Related commands
display vrrp ipv6
vrrp ipv6 vrid priority
Use vrrp ipv6 vrid priority to set the priority of the router in an IPv6 VRRP group.
Use undo vrrp ipv6 vrid priority to restore the default.
Syntax
vrrp ipv6 vrid virtual-router-id priority priority-value
undo vrrp ipv6 vrid virtual-router-id priority
Default
The priority of a router in an IPv6 VRRP group is 100.
Views
Interface view
Predefined user roles
network-admin
context-admin
Parameters
virtual-router-id: Specifies an IPv6 VRRP group by its virtual router ID in the range of 1 to 255.
priority-value: Specifies a priority value in the range of 1 to 254. A higher value indicates a higher priority.
Usage guidelines
VRRP determines the role (master or backup) of each router in a VRRP group by priority. A router with a higher priority is more likely to become the master.
Priorities 1 to 254 are configurable. Priority 0 is reserved for special uses, and priority 255 is for the IP address owner. The IP address owner in a VRRP group always has a running priority of 255 and acts as the master as long as it operates correctly.
Examples
# Set the priority of the router to 150 in VRRP group 1 on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] vrrp ipv6 vrid 1 priority 150
Related commands
display vrrp ipv6
vrrp ipv6 vrid shutdown
Use vrrp ipv6 vrid shutdown to disable an IPv6 VRRP group.
Use undo vrrp ipv6 vrid shutdown to enable an IPv6 VRRP group.
Syntax
vrrp ipv6 vrid virtual-router-id shutdown
undo vrrp ipv6 vrid virtual-router-id shutdown
Default
An IPv6 VRRP group is enabled.
Views
Interface view
Predefined user roles
network-admin
context-admin
Parameters
virtual-router-id: Specifies an IPv6 VRRP group by its virtual router ID in the range of 1 to 255.
Usage guidelines
CAUTION: You can use this command to temporarily disable an IPv6 VRRP group. After you execute this command, packets sent to the IPv6 VRRP group might be discarded. |
After this command is configured, the VRRP group stays in Initialize state, and its configurations remain unchanged. You can change the configuration of the VRRP group, and your changes take effect when you enable the VRRP group again.
Examples
# Disable IPv6 VRRP group 1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] vrrp ipv6 vrid 1 shutdown
vrrp ipv6 vrid timer advertise
Use vrrp ipv6 vrid timer advertise to set the interval at which the master in an IPv6 VRRP group sends VRRP advertisements.
Use undo vrrp ipv6 vrid timer advertise to restore the default.
Syntax
vrrp ipv6 vrid virtual-router-id timer advertise adver-interval
undo vrrp ipv6 vrid virtual-router-id timer advertise
Default
The master in an IPv6 VRRP group sends VRRP advertisements at an interval of 100 centiseconds.
Views
Interface view
Predefined user roles
network-admin
context-admin
Parameters
virtual-router-id: Specifies an IPv6 VRRP group by its virtual router ID in the range of 1 to 255.
adver-interval: Specifies an interval for the master in the specified IPv6 VRRP group to send VRRP advertisements, in the range of 100 to 4095 centiseconds.
Usage guidelines
The master in an IPv6 VRRP group periodically sends VRRP advertisements to declare its presence. You can use this command to set the interval at which the master sends VRRP advertisements.
As a best practice to maintain system stability, set the VRRP advertisement interval to be greater than 100 centiseconds.
The routers in an IPv6 VRRP group can have different intervals for sending VRRP advertisements. The master in the VRRP group sends VRRP advertisements at the specified interval and carries the interval attribute in the advertisements. After a backup receives the advertisement, it records the interval in the advertisement. If the backup does not receive any VRRP advertisement when the timer (3 × VRRP advertisement sending interval + Skew_Time) expires, it regards the master as failed and takes over.
Large network traffic might disable a backup from receiving VRRP advertisements from the master within the specified timer and trigger an unexpected master switchover. To solve this problem, you can use this command to configure a larger interval.
Examples
# Configure the master in IPv6 VRRP group 1 to send VRRP advertisements at an interval of 500 centiseconds.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] vrrp ipv6 vrid 1 timer advertise 500
Related commands
display vrrp ipv6
vrrp ipv6 vrid track
Use vrrp ipv6 vrid track to associate an IPv6 VRRP group or the VFs in an IPv6 VRRP group with a track entry.
Use undo vrrp ipv6 vrid track to remove the association between an IPv6 VRRP group or the VFs in an IPv6 VRRP group and a track entry.
Syntax
vrrp ipv6 vrid virtual-router-id track track-entry-number { forwarder-switchover member-ip ipv6-address | priority reduced [ priority-reduced ] | switchover | weight reduced [ weight-reduced ] }
undo vrrp ipv6 vrid virtual-router-id track [ track-entry-number ] [ forwarder-switchover | priority reduced | switchover | weight reduced ] ]
Default
An IPv6 VRRP group and the VFs in an IPv6 VRRP group are not associated with any track entries.
Views
Interface view
Predefined user roles
network-admin
context-admin
Parameters
virtual-router-id: Specifies an IPv6 VRRP group number in the range of 1 to 255.
track-entry-number: Specifies a track entry by its number in the range of 1 to 1024.
forwarder-switchover member-ip ipv6-address: Enables the LVF on the router to take over the role of the AVF at the specified IPv6 address immediately after the specified track entry changes to the Negative state. The ipv6-address argument specifies the IPv6 address of a member router. You can use the display vrrp ipv6 verbose command to view the IPv6 addresses of the members.
priority reduced [ priority-reduced ]: Reduces the priority of the router in the VRRP group by the specified value when the state of the specified track entry changes to Negative. The value range for the priority-reduced argument is 1 to 255, and the default value is 10.
switchover: Enables the router in backup state to take over as the master immediately after the specified track entry changes to the Negative state.
weight reduced [ weight-reduced ]: Reduces the weight of all VFs on the router in the VRRP group by the specified value when the state of the specified track entry changes to Negative. The value range for the weight-reduced argument is 1 to 255, and the default value is 30.
Usage guidelines
When the associated track entry changes to the Negative state, one of the following events occurs depending on your configuration:
· The priority of the router in the VRRP group decreases by a specified value.
· The weight of VFs decreases by a specified value.
· The router immediately takes over as the master if it is a backup.
· The LVF on the router immediately takes over the role of the AVF at the specified IPv6 address.
When the track entry changes from Negative to Positive or NotReady, one of the following events occurs:
· The router automatically restores its priority or VF weight.
· The failed master router becomes the master again.
· The failed AVF becomes active again.
Before executing this command, create an IPv6 VRRP group on the interface and assign a virtual IPv6 address to the IPv6 VRRP group.
You can create a track entry by using the track command before or after you associate it with an IPv6 VRRP group or the VFs in an IPv6 VRRP group. For more information about configuring track entries, see Network Management and Monitoring Configuration Guide.
If no track entry is specified, the undo vrrp ipv6 vrid track command removes all associations between track entries and the IPv6 VRRP group or VFs in the IPv6 VRRP group.
The vrrp ipv6 vrid track priority reduced command and the vrrp ipv6 vrid track switchover command do not take effect on an IP address owner. If you configure the command on an IP address owner, the configuration takes effect after the router changes to be a non-IP address owner.
The following parameters take effect only when the IPv6 VRRP group is operating in load balancing mode:
· The forwarder-switchover member-ip ip-address option.
· The weight reduced weight-reduced option.
· The weight reduced keyword.
The weight of a VF is 255, and its lower limit of failure is 10.
When the weight of a VF owner is higher than or equal to the lower limit of failure, its priority is always 255. The priority does not change with the weight. When the upstream link of the VF owner fails, an LVF must take over as the AVF. The switchover happens when the weight of the VF owner drops below the lower limit of failure. This requires that the reduced weight for the VF owner be higher than 245.
Examples
# Associate IPv6 VRRP group 1 on GigabitEthernet 1/0/1 with track entry 1 and decrease the router priority by 50 when the state of track entry 1 changes to Negative.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] vrrp ipv6 vrid 1 track 1 priority reduced 50
# Associate the VFs of IPv6 VRRP group 1 on GigabitEthernet 1/0/1 with track entry 1. Enable the LVF to take over the role of the AVF at the IPv6 address of 1::3 immediately when the state of track entry 1 changes to Negative.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] vrrp ipv6 vrid 1 track 1 forwarder-switchover member-ip 1::3
# Associate the VFs of IPv6 VRRP group 1 on GigabitEthernet 1/0/1 with track entry 1. Decrease the weight of all VFs on the router in the VRRP group by 50 when the state of track entry 1 changes to Negative.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] vrrp ipv6 vrid 1 track 1 weight reduced 50
Related commands
display vrrp ipv6