HP MSR Series Configuration Manual
Hide thumbs Also See for MSR Series:
Table of Contents

Advertisement

HP MSR Router Series

High Availability

Configuration Guide(V5)
Part number: 5998-2031
Software version: CMW520-R2509
Document version: 6PW102-20130925

Advertisement

Table of Contents
loading

Summary of Contents for HP MSR Series

  • Page 1: High Availability

    HP MSR Router Series High Availability Configuration Guide(V5) Part number: 5998-2031 Software version: CMW520-R2509 Document version: 6PW102-20130925...
  • Page 2 The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty.
  • Page 3: Table Of Contents

    Contents High availability overview ··········································································································································· 1   Availability requirements ·················································································································································· 1   Availability evaluation ······················································································································································ 1   High availability technologies ········································································································································· 2   Fault detection technologies ···································································································································· 2   Protection switchover technologies ························································································································· 2   Configuring BFD ··························································································································································· 4   Introduction to BFD ····························································································································································...
  • Page 4 Multiple masters appear in a VRRP group ········································································································ 114   Frequent VRRP state transition ···························································································································· 115   Support and other resources ·································································································································· 116   Contacting HP ······························································································································································ 116   Subscription service ············································································································································ 116   Related information ······················································································································································ 116   Documents ···························································································································································· 116  ...
  • Page 5: High Availability Overview

    High availability overview Because communication interruptions can seriously affect widely-deployed value-added services such as IPTV and video conference, basic network infrastructures must be able to provide high availability. The following are the effective ways to improve availability: Increasing fault tolerance. •...
  • Page 6: High Availability Technologies

    MTTR = fault detection time + hardware replacement time + system initialization time + link recovery time + routing time + forwarding recovery time. A smaller value of each item means a smaller MTTR and a higher availability. High availability technologies Increasing MTBF or decreasing MTTR can enhance the availability of a network.
  • Page 7 A single availability technology cannot solve all problems. You should use a combination of availability technologies, chosen on the basis of detailed analysis of network environments and user requirements, to enhance network availability. For example, access-layer devices should be connected to distribution-layer devices over redundant links, and core-layer devices should be fully meshed.
  • Page 8: Configuring Bfd

    Configuring BFD Introduction to BFD Devices must detect communication failures quickly so that measures can be taken in time to ensure service continuity and enhance network availability. Fault detection methods include the following: Hardware detection—Detects link failures by sending hardware detection signals, such as •...
  • Page 9 BFD session establishment Figure 1 BFD session establishment (on OSPF routers) As shown in Figure 1, BFD sessions are established as follows: A protocol sends Hello messages to discover neighbors and establish neighborships. After establishing neighborships, the protocol notifies BFD of the neighbor information, including destination and source addresses.
  • Page 10 Single-hop detection—Detects the IP connectivity between two directly connected systems. • • Multi-hop detection—Detects any of the paths between two systems. These paths have multiple hops and might be overlapped. Bidirectional detection—Sends detection packets at two sides of a bidirectional link to detect the •...
  • Page 11: Bfd Packet Format

    SHA1—SHA1 (Secure Hash Algorithm 1) authentication. • BFD packet format BFD control packets are encapsulated into UDP packets with port number 3784 for single-hop detection or port number 4784 for multi-hop detection (also can be 3784 based on the configuration task). BFD echo packets have a similar format as BFD control packets with UDP port number 3785 except that the Desired Min TX Interval and Required Min RX Interval fields are null.
  • Page 12: Supported Features

    Control Plane Independent(C)—If set, the transmitting system's BFD implementation does not share • fate with its control plane. That is, BFD is implemented in the forwarding plane and can continue to function through disruptions in the control plane. If clear, the transmitting system's BFD implementation shares fate with its control plane.
  • Page 13: Protocols And Standards

    IP fast reroute (FRR). IP FRR is supported by OSPF, RIP, IS-IS and static routing. For more information, • see Layer 3—IP Routing Configuration Guide. Protocols and standards RFC 5880, Bidirectional Forwarding Detection (BFD) • RFC 5881, Bidirectional Forwarding Detection (BFD) for IPv4 and IPv6 (Single Hop) •...
  • Page 14: Enabling Trap

    Step Command Remarks interface interface-type Enter interface view. interface-number Optional. Configure the minimum For more information, see the bfd min-echo-receive-interval interval for receiving BFD description of the Required Min value echo packets. Echo RX Interval field in "BFD packet format." Optional.
  • Page 15: Displaying And Maintaining Bfd

    output the trap messages and the output destinations). For the information center configuration, see Network Management and Monitoring Configuration Guide. To enable BFD trap: Step Command Remarks Enter system view. system-view Optional. Enabled by default. For more information about the Enable BFD trap.
  • Page 16: Configuring Interface Backup

    Configuring interface backup Overview Interface backup increases network reliability. The active interface transmits services, and the standby interfaces are in the backup state. When the active interface fails or the link fails, or when the traffic on the active interface exceeds the configured threshold, a standby interface is activated to transmit services.
  • Page 17: How Interface Backup Works

    How interface backup works Interface backup operates in active/standby mode or in load balancing mode. Active/standby mode As shown in Figure 5, interface Serial 2/0 on Router A acts as the active interface and interfaces Serial 2/1 and Serial 2/2 act as the standby interfaces. Figure 5 Diagram for active/standby mode In active/standby mode, only one interface transmits data at any given time.
  • Page 18: Interface Backup Configuration Task List

    NOTE: Adopt active/standby or load balancing mode depending on whether you have configured an upper or lower threshold for the active interface traffic. If this threshold is configured, load balancing mode is adopted. Otherwise, active/standby mode is adopted. Interface backup configuration task list Task Remarks Configuring active/standby mode...
  • Page 19: Associating An Interface With A Track Entry

    Step Command Remarks Specify a standby standby interface By default, no standby interface is specified interface for the active interface-type for the active interface. interface. interface-number [ priority ] Optional. standby timer delay Set switchover delays. Both thresholds are 0 by default, indicating enable-delay disable-delay immediate switchover without delay.
  • Page 20: Configuring The Delay Timer For The Backup Function To Take Effect On System Startup

    Generally, HP recommends that you use the default settings for the devices supporting this feature. If you set a too short timer, the standby interfaces will be activated and deactivated in a short time on system startup;...
  • Page 21: Displaying And Maintaining Interface Backup

    Step Command Remarks Set the delay timer for the Optional. backup function to take standby timer startup seconds 30 seconds by default. effect on system startup. Displaying and maintaining interface backup Task Command Remarks Display statistics about the traffic display standby flow [ | { begin | exclude on the active interfaces enabled Available in any view.
  • Page 22: Multi-Interface Load Balancing Configuration Example

    [RouterA] ip route-static 192.168.2.0 24 serial 2/1 [RouterA] ip route-static 192.168.2.0 24 serial 2/2 # On Router B, configure a static route to the segment 192.168.1.0/24 where Host A resides. <RouterB> system-view [RouterB] ip route-static 192.168.1.0 24 serial 2/0 [RouterB] ip route-static 192.168.1.0 24 serial 2/1 [RouterB] ip route-static 192.168.1.0 24 serial 2/2 Configure the standby interfaces and switch delays on Router A: # Specify interfaces Serial 2/1 and Serial 2/2 on Router A to back up Serial 2/0, and assign...
  • Page 23 Configure the available bandwidth used for setting the thresholds and the enable-threshold and disable-threshold of load balancing. Figure 8 Network diagram Configuration procedure Configure IP addresses: Follow Figure 8 to configure the IP address and subnet mask for each interface. (Details not shown.) Configure a static route: # On Router A, configure a static route to the segment 192.168.2.0/24 where Host B resides.
  • Page 24 [RouterB-Serial2/0] quit [RouterB] interface serial 2/1 [RouterB-Serial2/1] undo ip fast-forwarding [RouterB-Serial2/1] quit [RouterB] interface serial 2/2 [RouterB-Serial2/2] undo ip fast-forwarding [RouterB-Serial2/2] quit Configure the standby interfaces and load balancing on Router A: # Specify interfaces Serial 2/1 and Serial 2/2 on Router A to back up Serial 2/0, and assign them the priorities 30 and 20, respectively.
  • Page 25 Backup-flag meaning: M---MAIN B---BACKUP V---MOVED U---USED D---LOAD P---PULLED...
  • Page 26: Configuring Track

    Configuring Track Track overview The Track module works between application and detection modules, as shown in Figure 9. It shields the differences between various detection modules from application modules. Collaboration is enabled after you associate the Track module with a detection module and an application module.
  • Page 27: Collaboration Application Example

    NQA. • • BFD. Interface management module. • Collaboration between the Track module and an application module After being associated with an application module, when the status of the track entry changes, the Track module notifies the application module, which then takes proper actions. The following application modules can be associated with the Track module: •...
  • Page 28: Track Configuration Task List

    Figure 10 Network diagram If the uplink fails, the AC disables the radio on the AP that associates with the AC. If the uplink recovers, the AC enables the radio on the AP. For this purpose, configure collaboration between the NQA, Track, and uplink detection: Configure an NQA test group to check the accessibility of the Device.
  • Page 29: Associating Track With Bfd

    An NQA test group functions as follows when it is associated with a track entry: • If the consecutive failures reach the specified threshold, the NQA module tells the Track module that the tracked object malfunctions. Then the Track module sets the track entry to Negative state. If the specified threshold is not reached, the NQA module tells the Track module that the tracked •...
  • Page 30: Associating Track With Interface Management

    NOTE: When associating Track with BFD, do not configure the virtual IP address of a VRRP group as the local • or remote address of a BFD session. The remote and local addresses in the track bfd echo command indicate the next hop and destination •...
  • Page 31: Associating The Track Module With An Application Module

    Associating the Track module with an application module Associating Track with VRRP VRRP is an error-tolerant protocol. It adds a group of routers that can act as network gateways to a VRRP group, which forms a virtual router. Routers in the VRRP group elect the master acting as the gateway according to their priorities.
  • Page 32: Associating Track With Static Routing

    Step Command Remarks interface interface-type Enter interface view. interface-number Create a VRRP group and vrrp vrid virtual-router-id virtual-ip No VRRP group is created by configure its virtual IP virtual-address default. address. No track entry is specified for a VRRP group by default. vrrp [ ipv6 ] vrid virtual-router-id Associate a track entry with a This command is supported when...
  • Page 33: Associating Track With Pbr

    If you specify the next hop but not the egress interface when configuring a static route, you can establish collaborations among the static route, the Track module, and detection modules. This enables you to check the accessibility of the static route by the status of the track entry. •...
  • Page 34 priority, outgoing interface, next hop, default outgoing interface, default next hop, and other parameters to guide the forwarding of packets that match specific ACLs or have specific lengths. PBR cannot detect the availability of any action taken on packets. When an action is not available, packets processed by the action might be discarded.
  • Page 35: Associating Track With Interface Backup

    Step Command Remarks • Set the outgoing interface, and associate it with a track entry: apply output-interface interface-type interface-number [ track track-entry-number ] [ interface-type interface-number [ track track-entry-number ] ] • Set the next hop, and associate it with a track entry: apply ip-address next-hop ip-address [ track track-entry-number ] [ ip-address...
  • Page 36: Displaying And Maintaining Track Entries

    Step Command Remarks interface interface-type Enter interface view. interface-number Associate the interface with a standby track track-entry-number Not configured by default. track entry. NOTE: You can associate an interface with only one track entry. If you execute the standby track command repeatedly, the last configuration takes effect.
  • Page 37 Figure 11 Network diagram Configuration procedure Configure the IP address of each interface as shown in Figure 11. (Details not shown.) Configure an NQA test group on Router A: # Create an NQA test group with the administrator name admin and the operation tag test. <RouterA>...
  • Page 38 [RouterA-Ethernet1/1] vrrp vrid 1 authentication-mode simple hello # Configure the master to send VRRP packets at an interval of five seconds. [RouterA-Ethernet1/1] vrrp vrid 1 timer advertise 5 # Configure Router A to operate in preemptive mode, and set the preemption delay to five seconds.
  • Page 39 Total number of virtual routers : 1 Interface Ethernet1/1 VRID Adver Timer Admin Status : Up State : Backup Config Pri : 100 Running Pri : 100 Preempt Mode : Yes Delay Time Become Master : 2200ms left Auth Type : Simple : ****** Virtual IP...
  • Page 40: Configuring Bfd For A Vrrp Backup To Monitor The Master

    Master IP : 10.1.1.2 The output shows that when a fault is on the link between Router A and Router C, the priority of Router A decreases to 80. Router A becomes the backup, and Router B becomes the master. Packets from Host A to Host B are forwarded through Router B.
  • Page 41 [RouterA-Ethernet1/1] vrrp vrid 1 virtual-ip 192.168.0.10 [RouterA-Ethernet1/1] vrrp vrid 1 priority 110 [RouterA-Ethernet1/1] return Configure BFD on Router B: # Configure the source address of BFD echo packets as 10.10.10.10. <RouterB> system-view [RouterB] bfd echo-source-ip 10.10.10.10 Create a track entry to be associated with the BFD session on Router B: # Create track entry 1 to be associated with the BFD session to check whether Router A is reachable.
  • Page 42 Preempt Mode : Yes Delay Time Become Master : 2200ms left Auth Type : None Virtual IP : 192.168.0.10 Master IP : 192.168.0.101 VRRP Track Information: Track Object State : Positive Switchover # Display information about track entry 1 on Router B. <RouterB>...
  • Page 43: Configuring Bfd For The Vrrp Master To Monitor The Uplink

    Track Object State : Negative Switchover The output shows that when BFD detects that Router A fails, it notifies VRRP through the Track module to change the status of Router B to master without waiting for a period three times the advertisement interval. This ensures that a backup can quickly preempt as the master.
  • Page 44 [RouterA] track 1 bfd echo interface ethernet 1/1 remote ip 1.1.1.2 local ip 1.1.1.1 Configure VRRP on Router A: # Create VRRP group 1, and configure the virtual IP address of the group as 192.168.0.10. Configure the priority of Router A in VRRP group 1 as 110, and configure VRRP group 1 to monitor the status of track entry 1.
  • Page 45 # Display detailed information about the VRRP group on Router B. <RouterB> display vrrp verbose IPv4 Standby Information: Run Mode : Standard Run Method : Virtual MAC Total number of virtual routers : 1 Interface Ethernet1/2 VRID Adver Timer Admin Status : Up State : Backup...
  • Page 46: Static Routing-Track-Nqa Collaboration Configuration Example

    IPv4 Standby Information: Run Mode : Standard Run Method : Virtual MAC Total number of virtual routers : 1 Interface Ethernet1/2 VRID Adver Timer Admin Status : Up State : Master Config Pri : 100 Running Pri : 100 Preempt Mode : Yes Delay Time Auth Type...
  • Page 47 Figure 14 Network diagram Configuration procedure Configure the IP address of each interface as shown in Figure 14. (Details not shown.) Configure Router A: # Configure a static route to 30.1.1.0/24, with the address of the next hop as 10.1.1.2 and the default priority 60.
  • Page 48 [RouterA] nqa schedule admin test start-time now lifetime forever # Configure track entry 1, and associate it with reaction entry 1 of the NQA test group (with the administrator admin, and the operation tag test). [RouterA] track 1 nqa entry admin test reaction 1 Configure Router B: # Configure a static route to 30.1.1.0/24, with the address of the next hop as 10.2.1.4.
  • Page 49 [RouterD] track 1 nqa entry admin test reaction 1 Verifying the configuration # Display information about the track entry on Router A. [RouterA] display track all Track ID: 1 Status: Positive Duration: 0 days 0 hours 0 minutes 32 seconds Notification delay: Positive 0, Negative 0 (in seconds) Reference object: NQA entry: admin test...
  • Page 50 Destinations : 10 Routes : 10 Destination/Mask Proto Cost NextHop Interface 10.1.1.0/24 Direct 0 10.1.1.1 Eth1/1 10.1.1.1/32 Direct 0 127.0.0.1 InLoop0 10.2.1.0/24 Static 60 10.1.1.2 Eth1/1 10.3.1.0/24 Direct 0 10.3.1.1 Eth1/2 10.3.1.1/32 Direct 0 127.0.0.1 InLoop0 20.1.1.0/24 Direct 0 20.1.1.1 Eth1/3 20.1.1.1/32 Direct 0...
  • Page 51: Static Routing-Track-Bfd Collaboration Configuration Example

    Static routing-Track-BFD collaboration configuration example Network requirements As shown in Figure 15, Router A, Router B, and Router C are connected to two segments 20.1.1.0/24 and 30.1.1.0/24. Configure static routes on these routers so that the two segments can communicate with each other.
  • Page 52 [RouterA] ip route-static 30.1.1.0 24 10.3.1.3 preference 80 # Configure the source address of BFD echo packets as 10.10.10.10. [RouterA] bfd echo-source-ip 10.10.10.10 # Configure track entry 1, and associate it with the BFD session. Check whether Router A can be interoperated with the next hop of static route, which is Router B.
  • Page 53 10.2.1.0/24 Direct 0 10.2.1.1 Eth1/1 10.2.1.1/32 Direct 0 127.0.0.1 InLoop0 10.3.1.0/24 Direct 0 10.3.1.1 Eth1/2 10.3.1.1/32 Direct 0 127.0.0.1 InLoop0 20.1.1.0/24 Direct 0 20.1.1.1 Eth1/3 20.1.1.1/32 Direct 0 127.0.0.1 InLoop0 30.1.1.0/24 Static 60 10.2.1.2 Eth1/1 127.0.0.0/8 Direct 0 127.0.0.1 InLoop0 127.0.0.1/32 Direct 0 127.0.0.1...
  • Page 54: Vrrp-Track-Interface Management Collaboration Configuration Example

    # When the master route fails, the hosts in 20.1.1.0/24 can still communicate with the hosts in 30.1.1.0/24. [RouterA] ping -a 20.1.1.1 30.1.1.1 PING 30.1.1.1: 56 data bytes, press CTRL_C to break Reply from 30.1.1.1: bytes=56 Sequence=1 ttl=254 time=2 ms Reply from 30.1.1.1: bytes=56 Sequence=2 ttl=254 time=1 ms Reply from 30.1.1.1: bytes=56 Sequence=3 ttl=254 time=1 ms Reply from 30.1.1.1: bytes=56 Sequence=4 ttl=254 time=2 ms...
  • Page 55 Figure 16 Network diagram Configuration procedure Configure the IP address of each interface as shown in Figure 16. (Details not shown.) Configure a track entry on Router A: # Configure track entry 1, and associate it with the physical status of the uplink interface Ethernet 1/2.
  • Page 56 VRID Adver Timer Admin Status : Up State : Master Config Pri : 110 Running Pri : 110 Preempt Mode : Yes Delay Time Auth Type : None Virtual IP : 10.1.1.10 Virtual MAC : 0000-5e00-0101 Master IP : 10.1.1.1 VRRP Track Information: Track Object State : Positive...
  • Page 57 Master IP : 10.1.1.2 VRRP Track Information: Track Object State : Negative Pri Reduced : 30 # After shutting down the uplink interface on Router A, display detailed information about VRRP group 1 on Router B. [RouterB-Ethernet1/1] display vrrp verbose IPv4 Standby Information: Run Mode : Standard...
  • Page 58: Configuring Vrrp

    Configuring VRRP The interfaces that VRRP involves can be only Layer 3 Ethernet interfaces and VLAN interfaces unless otherwise specified. VRRP overview As shown in Figure 17, you can typically configure a default route with the gateway as the next hop for every host on a LAN.
  • Page 59: Vrrp Standard Mode

    Load balancing mode—Extends the standard mode and realizes load balancing. For more • information, see "VRRP load balancing mode." VRRP standard mode VRRP group VRRP combines a group of routers (including a master and multiple backups) on a LAN into a virtual router called VRRP group.
  • Page 60 VRRP priority is in the range of 0 to 255, and the greater the number, the higher the priority. Priorities 1 to 254 are configurable. Priority 0 is reserved for special uses and priority 255 is for the IP address owner. The router acting as the IP address owner in a VRRP group always has the running priority 255 and acts as the master as long as it works correctly.
  • Page 61 VRRP packets are encapsulated in IP packets, with the protocol number being 1 12. Figure 19 shows the IPv4 VRRPv2 packet format, Figure 20 shows the IPv6 VRRPv2 packet format, and Figure 21 shows the IPv4/IPv6 VRRPv3 packet format. Figure 19 IPv4 VRRPv2 packet format Figure 20 IPv6 VRRPv2 packet format Version Type...
  • Page 62 Figure 21 IPv4/IPv6 VRRPv3 packet format A VRRP packet comprises the following fields: • Version—Version number of the protocol, 2 for IPv4 VRRPv2, and 3 for IPv6 VRRPv2 and IPv4/IPv6 VRRPv3. Type—Type of the VRRP packet. It must be VRRP advertisement, represented by 1. •...
  • Page 63 If the timer of a backup expires but the backup still does not receive any VRRP advertisement, it • considers that the master failed. In this case, the backup considers itself as the master and sends VRRP advertisements to start a new master election. •...
  • Page 64 Figure 22 VRRP in master/backup mode Assume that Router A is acting as the master to forward packets to external networks, and Router B and Router C are backups in listening state. When Router A fails, Router B and Router C elect a new master to forward packets for hosts on the LAN.
  • Page 65: Vrrp Load Balancing Mode

    VRRP group 1—Router A is the master. Router B and Router C are the backups. VRRP group 2—Router B is the master. Router A and Router C are the backups. VRRP group 3—Router C is the master. Router A and Router B are the backups. For load sharing among Router A, Router B, and Router C, hosts on the LAN need to be configured to use VRRP group 1, 2, and 3 as the default gateways, respectively.
  • Page 66 Figure 24 Virtual MAC address assignment When an ARP request arrives, the master (Router A) selects a virtual MAC address based on the load balancing algorithm to answer the ARP request. In this example, Router A returns the virtual MAC address of itself in response to the ARP request from Host A. It returns the virtual MAC address of Router B in response to the ARP request from Host B (see Figure 25).
  • Page 67 Figure 26 Sending packets to different routers for forwarding Virtual forwarder Creating a virtual forwarder Virtual MAC addresses enable traffic distribution across the routers in a VRRP group. To enable the routers in the VRRP group to forward the packets, be sure to create virtual forwarders (VFs) on the routers.
  • Page 68 On a router that does not own the VF, if the weight of the VF is higher than or equal to the lower limit of failure, the priority of the VF is weight/(number of local AVFs +1). If the weight of the VF is lower than the lower limit of failure, the priority of the VF is 0. VF backup The VFs corresponding to a virtual MAC address on different routers in the VRRP group back up each other.
  • Page 69: Configuring Ipv4 Vrrp

    can share traffic load if the VF owner resumes normal operation within this time. When this timer times out, the master stops using the virtual MAC address corresponding to the failed AVF to respond to ARP/ND requests from the hosts. Timeout Timer—Duration that the new AVF takes over the VF owner.
  • Page 70: Specifying An Ipv4 Vrrp Operating Mode

    Task Remarks Specifying an IPv4 VRRP operating mode Optional. Specifying the IPv4 VRRP version Optional. Optional. Specifying the type of MAC addresses mapped to This configuration does not apply to VRRP load virtual IP addresses balancing mode. Creating a VRRP group and assigning a virtual IP Required.
  • Page 71: Specifying The Type Of Mac Addresses Mapped To Virtual Ip Addresses

    If VRRP groups with the same ID are created on multiple interfaces, and the VRRP advertisements of these VRRP groups are to be sent across a QinQ network, HP recommends that you use real MAC to virtual IP mapping to guarantee successful transmission of the VRRP advertisements.
  • Page 72 IP address on the subnet where the VRRP group resides or the IP address of an interface on a router in the VRRP group. In the latter case, the router is called the IP address owner. When a router is the IP address owner in a VRRP group, HP recommends not configuring the •...
  • Page 73: Configuring Router Priority, Preemptive Mode, And Tracking Function

    Configuring router priority, preemptive mode, and tracking function Configuration guidelines The running priority of an IP address owner is always 255 and you do not need to configure it. An • IP address owner always operates in preemptive mode. If you configure an interface to be tracked or a track entry to be monitored on a router that is the IP •...
  • Page 74: Configuring Vf Tracking

    Step Command Remarks Optional. vrrp vrid virtual-router-id track Configure VRRP to track a track-entry-number [ reduced By default, VRRP is not configured specified track entry. priority-reduced | switchover ] to track a specified track entry. Configuring VF tracking Configuration prerequisites Before you configure the VF tracking function, create a VRRP group and configure a virtual IP address for Configuration procedure VRRP operates in load balancing mode.
  • Page 75: Configuring Ipv4 Vrrp Packet Attributes

    Step Command Remarks • Configure the VF tracking function to monitor a specified track entry and specify the value by which the weight decreases: vrrp vrid virtual-router-id weight track track-entry-number Use either method. [ reduced weight-reduced ] Configure VF tracking. The VF tracking function is not •...
  • Page 76: Enabling The Trap Function For Vrrp

    Step Command Remarks Configure the time interval for Optional. vrrp vrid virtual-router-id timer the master in the VRRP group advertise adver-interval 1 second by default. to send VRRP advertisements. Optional. By default, TTL check on VRRP packets Disable TTL check on VRRP vrrp un-check ttl is enabled.
  • Page 77: Configuring Ipv6 Vrrp

    Configuring IPv6 VRRP Task Remarks Specifying an IPv4 VRRP operating mode Optional. Specifying the IPv4 VRRP version Optional. Optional. Specifying the type of MAC addresses mapped to virtual IPv6 When VRRP operates in load balancing addresses mode, this configuration is not effective. Creating a VRRP group and assigning a virtual IPv6 address Required.
  • Page 78: Creating A Vrrp Group And Assigning A Virtual Ipv6 Address

    • When a router is the IP address owner in a VRRP group, HP recommends not using the IPv6 address of the interface (virtual IPv6 address of the VRRP group) to establish an OSPFv3 neighbor relationship with the adjacent router, that is, not to use the ospfv3 area command to enable OSPFv3 on the interface.
  • Page 79: Configuring Router Priority, Preemptive Mode, And Tracking Function

    Step Command Remarks No VRRP group is created by default. Create a VRRP group and The first virtual IPv6 address of the configure its virtual IPv6 vrrp ipv6 vrid virtual-router-id VRRP group must be a link local address, which is a link local virtual-ip virtual-address link-local address.
  • Page 80: Configuring Vf Tracking

    Step Command Remarks Enter the specified interface interface interface-type view. interface-number Optional. Configure the priority of the vrrp ipv6 vrid virtual-router-id router in the VRRP group. priority priority-value 100 by default. Optional. Configure the router in the VRRP group to operate in vrrp ipv6 vrid virtual-router-id The router in the VRRP group preemptive mode and...
  • Page 81: Configuring Ipv6 Vrrp Packet Attributes

    Step Command Remarks Enter system view. system-view Enter the specified interface interface interface-type view. interface-number • Configure the VF tracking function to monitor a specified track entry and specify the value by which the weight decreases: vrrp ipv6 vrid virtual-router-id weight track track-entry-number Use either method.
  • Page 82: Displaying And Maintaining Ipv6 Vrrp

    Step Command Remarks Configure the authentication Optional. vrrp ipv6 vrid virtual-router-id mode and authentication key authentication-mode simple Authentication is not performed by when the VRRP groups send [ cipher ] key default. or receive VRRP packets. Configure the time interval for Optional.
  • Page 83 Figure 28 Network diagram Configuration procedure Configure Router A: <RouterA> system-view [RouterA] interface ethernet 1/1 [RouterA-Ethernet1/1] ip address 202.38.160.1 255.255.255.0 # Create VRRP group 1 and configure its virtual IP address as 202.38.160.111. [RouterA-Ethernet1/1] vrrp vrid 1 virtual-ip 202.38.160.111 # Configure the priority of Router A in the VRRP group 1 as 110, which is higher than that of Router B (100), so that Router A can become the master.
  • Page 84 Total number of virtual routers : 1 Interface Ethernet1/1 VRID Adver Timer Admin Status : Up State : Master Config Pri : 110 Running Pri : 110 Preempt Mode : Yes Delay Time Auth Type : None Virtual IP : 202.38.160.111 Virtual MAC : 0000-5e00-0101 Master IP...
  • Page 85: Vrrp Interface Tracking Configuration Example

    # After Router A resumes normal operation, use the display vrrp verbose command to display the detailed information about VRRP group 1 on Router A. [RouterA-Ethernet1/1] display vrrp verbose IPv4 Standby Information: Run Mode : Standard Run Method : Virtual MAC Total number of virtual routers : 1 Interface Ethernet1/1 VRID...
  • Page 86 Configuration procedure Configure Router A: <RouterA> system-view [RouterA] interface ethernet 1/2 [RouterA-Ethernet1/2] ip address 202.38.160.1 255.255.255.0 # Create VRRP group 1 and configure its virtual IP address as 202.38.160.111. [RouterA-Ethernet1/2] vrrp vrid 1 virtual-ip 202.38.160.111 # Configure the priority of Router A in the VRRP group as 110, which is higher than that of Router B (100), so that Router A can become the master.
  • Page 87 Total number of virtual routers : 1 Interface Ethernet1/2 VRID Adver Timer Admin Status : Up State : Master Config Pri : 110 Running Pri : 110 Preempt Mode : Yes Delay Time Auth Type : Simple : hello Virtual IP : 202.38.160.111 Virtual MAC : 0000-5e00-0101...
  • Page 88: Multiple Vrrp Groups Configuration Example

    VRRP Track Information: Track Interface: Eth1/1 State : Down Pri Reduced : 30 # If interface Ethernet 1/1 on Router A is not available, the detailed information about VRRP group 1 on Router B is displayed. [RouterB-Ethernet1/2] display vrrp verbose IPv4 Standby Information: Run Mode : Standard...
  • Page 89 Configuration procedure Configure Router A: <RouterA> system-view [RouterA] interface ethernet 1/1 [RouterA-Ethernet1/1] ip address 202.38.160.1 255.255.255.0 # Create VRRP group 1 and configure its virtual IP address as 202.38.160.111. [RouterA-Ethernet1/1] vrrp vrid 1 virtual-ip 202.38.160.111 # Set the priority of Router A in VRRP group 1 to 110, which is higher than that of Router B (100), so that Router A can become the master in VRRP group 1.
  • Page 90: Vrrp Load Balancing Configuration Example

    Auth Type : None Virtual IP : 202.38.160.112 Master IP : 202.38.160.2 # Display the detailed information about the VRRP group on Router B. [RouterB-Ethernet1/1] display vrrp verbose IPv4 Standby Information: Run Mode : Standard Run Method : Virtual MAC Total number of virtual routers : 2 Interface Ethernet1/1 VRID...
  • Page 91 Configure a track entry on Router A, Router B, and Router C to monitor their own Ethernet 1/2. • When the interface on Router A, Router B, or Router C fails, the weight of the corresponding router decreases so that another router with a higher weight can take over. •...
  • Page 92 [RouterA] track 1 interface ethernet 1/2 # Configure VF tracking to monitor track entry 1 and specify the value by which the weight decreases, making the weight of Router A decrease by more than 245 (250 in this example) when track entry 1 turns to negative.
  • Page 93 [RouterC-Ethernet1/1] vrrp vrid 1 weight track 1 reduced 250 [RouterC-Ethernet1/1] quit # Create track entries 2 and 3 to monitor Router A and Router B, respectively. If a track entry becomes negative, it indicates that the corresponding router fails. [RouterC] bfd echo-source-ip 1.2.3.4 [RouterC] track 2 bfd echo interface ethernet 1/1 remote ip 10.1.1.2 local ip 10.1.1.4 [RouterC] track 3 bfd echo interface ethernet 1/1 remote ip 10.1.1.3 local ip 10.1.1.4 # Configure VF tracking to monitor track entry 2.
  • Page 94 Virtual MAC : 000f-e2ff-0012 (Learnt) Owner ID : 0000-5e01-1103 Priority : 127 Active : 10.1.1.3 Forwarder 03 State : Listening Virtual MAC : 000f-e2ff-0013 (Learnt) Owner ID : 0000-5e01-1105 Priority : 127 Active : 10.1.1.4 Forwarder Weight Track Information: Track Object State : Positive Weight Reduced : 250 # Display the detailed information about VRRP group 1 on Router B.
  • Page 95 Priority : 127 Active : 10.1.1.4 Forwarder Weight Track Information: Track Object State : Positive Weight Reduced : 250 # Display the detailed information about VRRP group 1 on Router C. [RouterC-Ethernet1/1] display vrrp verbose IPv4 Standby Information: Run Mode : Load Balance Run Method : Virtual MAC...
  • Page 96 Member IP : 10.1.1.3 The output shows that in VRRP group 1, Router A is the master and Router B and Router C are the backups. Each router has one AVF and two LVFs that act as the backups. # When Ethernet 1/2 on Router A fails, use the display vrrp verbose command to display the detailed information about VRRP group 1 on Router A.
  • Page 97 Run Method : Virtual MAC Total number of virtual routers : 1 Interface Ethernet1/1 VRID Adver Timer Admin Status : Up State : Backup Config Pri : 100 Running Pri : 100 Preempt Mode : Yes Delay Time Become Master : 4200ms left Auth Type : None...
  • Page 98 # When the timeout timer (about 1800 seconds) expires, display the detailed information about VRRP group 1 on Router C. [RouterC-Ethernet1/1] display vrrp verbose IPv4 Standby Information: Run Mode : Load Balance Run Method : Virtual MAC Total number of virtual routers : 1 Interface Ethernet1/1 VRID Adver Timer...
  • Page 99 Run Method : Virtual MAC Total number of virtual routers : 1 Interface Ethernet1/1 VRID Adver Timer Admin Status : Up State : Master Config Pri : 110 Running Pri : 110 Preempt Mode : Yes Delay Time Auth Type : None Virtual IP : 10.1.1.1...
  • Page 100: Ipv6 Vrrp Configuration Examples

    Forwarder 02 State : Active Virtual MAC : 000f-e2ff-0012 (Take Over) Owner ID : 0000-5e01-1103 Priority : 85 Active : local Redirect Time : 93 secs Time-out Time : 1293 secs Forwarder 03 State : Active Virtual MAC : 000f-e2ff-0013 (Owner) Owner ID : 0000-5e01-1105 Priority...
  • Page 101 Figure 32 Network diagram Configuration procedure Configure Router A: <RouterA> system-view [RouterA] ipv6 [RouterA] interface ethernet 1/1 [RouterA-Ethernet1/1] ipv6 address fe80::1 link-local [RouterA-Ethernet1/1] ipv6 address 1::1 64 # Create a VRRP group 1 and set its virtual IPv6 addresses to FE80::10 and 1::10. [RouterA-Ethernet1/1] vrrp ipv6 vrid 1 virtual-ip fe80::10 link-local [RouterA-Ethernet1/1] vrrp ipv6 vrid 1 virtual-ip 1::10 # Configure the priority of Router A in VRRP group 1 as 110, which is higher than that of Router...
  • Page 102 # Enable Router B to send RA messages, so that Host A can learns the default gateway address. [RouterB-Ethernet1/1] undo ipv6 nd ra halt Verify the configuration: After the configuration, Host B can be pinged successfully on Host A. To verify your configuration, use the display vrrp ipv6 verbose command.
  • Page 103: Vrrp Interface Tracking Configuration Example

    Interface Ethernet1/1 VRID Adver Timer : 100 Admin Status : Up State : Master Config Pri : 100 Running Pri : 100 Preempt Mode : Yes Delay Time Auth Type : None Virtual IP : FE80::10 1::10 Virtual MAC : 0000-5e00-0201 Master IP : FE80::2 The output shows that when Router A fails, Router B becomes the master, and packets sent from...
  • Page 104 Figure 33 Network diagram Configuration procedure Configure Router A: <RouterA> system-view [RouterA] ipv6 [RouterA] interface ethernet 1/2 [RouterA-Ethernet1/2] ipv6 address fe80::1 link-local [RouterA-Ethernet1/2] ipv6 address 1::1 64 # Create a VRRP group 1 and set its virtual IPv6 addresses to FE80::10 and 1::10. [RouterA-Ethernet1/2] vrrp ipv6 vrid 1 virtual-ip fe80::10 link-local [RouterA-Ethernet1/2] vrrp ipv6 vrid 1 virtual-ip 1::10 # Configure the priority of Router A in VRRP group 1 as 110, which is higher than that of Router...
  • Page 105 [RouterB] interface ethernet 1/2 [RouterB-Ethernet1/2] ipv6 address fe80::2 link-local [RouterB-Ethernet1/2] ipv6 address 1::2 64 # Create a VRRP group 1 and set its virtual IPv6 addresses to FE80::10 and 1::10. [RouterB-Ethernet1/2] vrrp ipv6 vrid 1 virtual-ip fe80::10 link-local [RouterB-Ethernet1/2] vrrp ipv6 vrid 1 virtual-ip 1::10 # Set the authentication mode of VRRP group 1 as simple and authentication key as hello.
  • Page 106 Preempt Mode : Yes Delay Time Become Master : 2200ms left Auth Type : Simple : hello Virtual IP : FE80::10 1::10 Master IP : FE80::1 The output shows that in VRRP group 1 Router A is the master, Router B is the backup and packets sent from Host A to Host B are forwarded by Router A.
  • Page 107: Multiple Vrrp Groups Configuration Example

    The output shows that when interface Ethernet 1/1 on Router A is not available, the priority of Router A reduces to 80 and it becomes the backup. Router B becomes the master and packets sent from Host A to Host B are forwarded by Router B. Multiple VRRP groups configuration example Network requirements In the network, some hosts use 1::10/64 as their default gateway and some hosts use 1::20/64 as...
  • Page 108: Verify The Configuration

    <RouterB> system-view [RouterB] ipv6 [RouterB] interface ethernet 1/1 [RouterB-Ethernet1/1] ipv6 address fe80::2 link-local [RouterB-Ethernet1/1] ipv6 address 1::2 64 # Create VRRP group 1 and set its virtual IPv6 addresses to FE80::10 and 1::10. [RouterB-Ethernet1/1] vrrp ipv6 vrid 1 virtual-ip fe80::10 link-local [RouterB-Ethernet1/1] vrrp ipv6 vrid 1 virtual-ip 1::10 # Create VRRP group 2 set its virtual IPv6 addresses to FE80::20 and 1::20.
  • Page 109: Vrrp Load Balancing Configuration Example

    Total number of virtual routers : 2 Interface Ethernet1/1 VRID Adver Timer : 100 Admin Status : Up State : Backup Config Pri : 100 Running Pri : 100 Preempt Mode : Yes Delay Time Become Master : 2200ms left Auth Type : None Virtual IP...
  • Page 110 Figure 35 Network diagram Configuration procedure Configure Router A: # Configure VRRP to operate in load balancing mode. <RouterA> system-view [RouterA] vrrp mode load-balance # Create VRRP group 1 and configure its virtual IPv6 addresses as FE80::10 and 1::10. [RouterA] interface ethernet 1/1 [RouterA-Ethernet1/1] ipv6 address fe80::1 link-local [RouterA-Ethernet1/1] ipv6 address 1::1 64 [RouterA-Ethernet1/1] vrrp ipv6 vrid 1 virtual-ip fe80::10 link-local...
  • Page 111 [RouterA] track 1 interface ethernet 1/2 # Configure VF tracking to monitor track entry 1 and specify the value by which the weight decreases, making the weight of Router A decrease by more than 245 (250 in this example) when track entry 1 turns to negative.
  • Page 112 # Enable Router C to send RA messages, so that hosts in network segment 1::/64 can learn the default gateway address. [RouterC-Ethernet1/1] undo ipv6 nd ra halt [RouterC-Ethernet1/1] quit # Create track entry 1 to associate with the physical status of Ethernet 1/2 on Router C. When the track entry becomes negative, it means that the interface fails.
  • Page 113 State : Listening Virtual MAC : 000f-e2ff-4013 (Learnt) Owner ID : 0000-5e01-1105 Priority : 127 Active : FE80::3 Forwarder Weight Track Information: Track Object State : Positive Weight Reduced : 250 # Display the detailed information about VRRP group 1 on Router B. [RouterB-Ethernet1/1] display vrrp ipv6 verbose IPv6 Standby Information: Run Mode...
  • Page 114 # Display the detailed information about VRRP group 1 on Router C. [RouterC-Ethernet1/1] display vrrp ipv6 verbose IPv6 Standby Information: Run Mode : Load Balance Run Method : Virtual MAC Total number of virtual routers : 1 Interface Ethernet1/1 VRID Adver Timer : 100 Admin Status...
  • Page 115 Run Method : Virtual MAC Total number of virtual routers : 1 Interface Ethernet1/1 VRID Adver Timer : 100 Admin Status : Up State : Master Config Pri : 120 Running Pri : 120 Preempt Mode : Yes Delay Time Auth Type : None Virtual IP...
  • Page 116 Become Master : 4200ms left Auth Type : None Virtual IP : FE80::10 1::10 Member IP List : FE80::3 (Local, Backup) FE80::1 (Master) FE80::2 (Backup) Forwarder Information: 3 Forwarders 2 Active Config Weight : 255 Running Weight : 255 Forwarder 01 State : Active Virtual MAC...
  • Page 117 Preempt Mode : Yes Delay Time Become Master : 4200ms left Auth Type : None Virtual IP : FE80::10 1::10 Member IP List : FE80::3 (Local, Backup) FE80::1 (Master) FE80::2 (Backup) Forwarder Information: 2 Forwarders 1 Active Config Weight : 255 Running Weight : 255 Forwarder 02 State...
  • Page 118: Troubleshooting Vrrp

    Forwarder 02 State : Active Virtual MAC : 000f-e2ff-4012 (Owner) Owner ID : 0000-5e01-1103 Priority : 255 Active : local Forwarder 03 State : Listening Virtual MAC : 000f-e2ff-4013 (Learnt) Owner ID : 0000-5e01-1105 Priority : 127 Active : FE80::3 Forwarder Weight Track Information: Track Object State : Positive...
  • Page 119: Frequent Vrrp State Transition

    If the ping fails, check network connectivity. • • If the ping succeeds, check that their configurations are consistent in terms of number of virtual IP addresses, virtual IP addresses, advertisement interval, and authentication. Frequent VRRP state transition Symptom Frequent VRRP state transition. Analysis The VRRP advertisement interval is set too short.
  • Page 120: Support And Other Resources

    Related information Documents To find related documents, browse to the Manuals page of the HP Business Support Center website: http://www.hp.com/support/manuals For related documentation, navigate to the Networking section, and select a networking category. •...
  • Page 121: Conventions

    Conventions This section describes the conventions used in this documentation set. Command conventions Convention Description Boldface Bold text represents commands and keywords that you enter literally as shown. Italic Italic text represents arguments that you replace with actual values. Square brackets enclose syntax choices (keywords or arguments) that are optional. Braces enclose a set of required syntax choices separated by vertical bars, from which { x | y | ...
  • Page 122 Network topology icons Represents a generic network device, such as a router, switch, or firewall. Represents a routing-capable device, such as a router or Layer 3 switch. Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supports Layer 2 forwarding and other Layer 2 features.
  • Page 123: Index

    VRRP,73 Configuring load balancing,15 Configuring the delay timer for the backup function to Related information,1 16 take effect on system startup,16 Contacting HP,1 16 Track configuration examples,32 Conventions,1 17 Track configuration task list,24 Track overview,22 Displaying and maintaining BFD,1 1...

Table of Contents