HP VSR1000 High Availability Configuration Manual
  1. Manuals
  2. Brands
  3. HP Manuals
  4. Network Router
  5. VSR1000
  6. High availability configuration manual
HP VSR1000 High Availability Configuration Manual

HP VSR1000 High Availability Configuration Manual

Virtual services router
Hide thumbs Also See for VSR1000:
Table of Contents

Advertisement

Quick Links

Download this manual See also: Configuration Manual
HP VSR1000 Virtual Services Router

High Availability

Configuration Guide

Part number: 5998-4649
Software version: VSR1000_HP-CMW710-E0101P01-X64
Document version: 5W100-20130918

Advertisement

Table of Contents
loading

Related Manuals for HP VSR1000

Summary of Contents for HP VSR1000

  • Page 1: High Availability

    HP VSR1000 Virtual Services Router High Availability Configuration Guide Part number: 5998-4649 Software version: VSR1000_HP-CMW710-E0101P01-X64 Document version: 5W100-20130918...
  • Page 2 The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an...

  • Page 3: Table Of Contents

    Contents Configuring VRRP ························································································································································· 1   Overview ············································································································································································ 1   VRRP standard mode ························································································································································ 2   Router priority in a VRRP group ······························································································································ 2   Preemption ································································································································································ 2   Authentication method ············································································································································· 3   VRRP timers ······························································································································································· 3   Master election ························································································································································· 4  ...
  • Page 4 Static routing-Track-BFD collaboration configuration example ········································································· 77   VRRP-Track-interface management collaboration configuration example ······················································· 80   Support and other resources ····································································································································· 84   Contacting HP ································································································································································ 84   Subscription service ·············································································································································· 84   Related information ························································································································································ 84   Documents ······························································································································································ 84  ...

  • Page 5: Configuring Vrrp

    Configuring VRRP Overview Typically, you can configure a default gateway for every host on a LAN. All packets destined for other networks are sent through the default gateway. As shown in Figure 1, when the default gateway fails, no hosts can communicate with external networks. Figure 1 LAN networking Using a default gateway facilitates your configuration but requires high availability.

  • Page 6: Vrrp Standard Mode

    VRRP standard mode In VRRP standard mode, only the master in the VRRP group can provide gateway service. When the master fails, the backup routers elect a new master to take over for nonstop gateway service. Figure 2 VRRP networking As shown in Figure 2, Router A, Router B, and Router C form a virtual router, which has its own IP address.

  • Page 7: Authentication Method

    Authentication method To avoid attacks from unauthorized users, VRRP member routers add authentication keys in VRRP packets to authenticate one another. VRRP provides the following authentication methods: • Simple authentication The sender fills an authentication key into the VRRP packet, and the receiver compares the received authentication key with its local authentication key.

  • Page 8: Master Election

    Master election Routers in a VRRP group determine their roles by priority. When a router joins a VRRP group, it has a backup role. The router role changes according to the following situations: • If the backup does not receive any VRRP advertisement when the timer (3 × advertisement interval + Skew_Time) expires, it becomes the master.
  • Page 9 Figure 3 VRRP in master/backup mode Assume that Router A is acting as the master to forward packets to external networks, and Router B and Router C are backups in listening state. When Router A fails, Router B and Router C elect a new master to forward packets for hosts on the subnet.

  • Page 10: Vrrp Load Balancing Mode

    VRRP group 1—Router A is the master. Router B and Router C are the backups. • • VRRP group 2—Router B is the master. Router A and Router C are the backups. VRRP group 3—Router C is the master. Router A and Router B are the backups. •...
  • Page 11 Figure 5 Virtual MAC address assignment Network Router A Router B Master Backup Virtual IP: 10.1.1.1/24 Virtual MAC: 000f-e2ff-0012 Virtual MAC: 000f-e2ff-0011 Allocate Virtual MAC 000f-e2ff-0012 to Router B Gateway IP: 10.1.1.1/24 Gateway IP: 10.1.1.1/24 Host A Host B When an ARP request arrives, the master (Router A) selects a virtual MAC address based on the load balancing algorithm to answer the ARP request.

  • Page 12: Virtual Forwarder

    Figure 7 Sending packets to different routers for forwarding Virtual forwarder Virtual forwarder creation Virtual MAC addresses enable traffic distribution across routers in a VRRP group. To enable routers in the VRRP group to forward packets, VFs must be created on them. Each VF is associated with a virtual MAC address in the VRRP group and forwards packets that are sent to this virtual MAC address.
  • Page 13 On a router that does not own the VF, if the weight of the VF is higher than or equal to the lower limit • of failure, the priority of the VF is calculated as weight/(number of local AVFs +1). If the weight of the VF is lower than the lower limit of failure, the priority of the VF is 0.

  • Page 14: Protocols And Standards

    Redirect timer—Before this timer expires, the master still uses the virtual MAC address • corresponding to the failed AVF to respond to ARP/ND requests from hosts, and the VF owner can share traffic load if the VF owner resumes normal operation within this time. When this timer expires, the master stops using the virtual MAC address corresponding to the failed AVF to respond to ARP/ND requests from hosts.

  • Page 15: Specifying An Ipv4 Vrrp Operating Mode

    Tasks at a glance Remarks (Optional.) Disabling an IPv4 VRRP group Specifying an IPv4 VRRP operating mode A VRRP group can operate in either of the following modes: Standard mode—Only the master can forward packets. • Load balancing mode—All members that have an AVF can forward packets. •...

  • Page 16: Configuring The Router Priority, Preemptive Mode, And Tracking Function

    When VRRP is operating in standard mode, the virtual IP address of a VRRP group can be either an • unused IP address on the subnet where the VRRP group resides or the IP address of an interface on a router in the VRRP group. •...

  • Page 17: Configuring Ipv4 Vrrp Packet Attributes

    Step Command Remarks Enter system view. system-view interface interface-type Enter interface view. interface-number Configure the priority of the vrrp vrid virtual-router-id priority The default setting is 100. router in the VRRP group. priority-value By default, the router in a VRRP Enable the preemptive mode vrrp vrid virtual-router-id group operates in preemptive...

  • Page 18: Configuring Vf Tracking

    The default setting is 100 centiseconds. Configure the interval at which the master in an IPv4 vrrp vrid virtual-router-id timer To maintain system stability, HP VRRP group sends VRRP advertise adver-interval recommends that you set the VRRP advertisements. advertisement interval to be greater than 100 centiseconds.

  • Page 19: Enabling Snmp Notifications For Vrrp

    Step Command Remarks Configure the VFs in a VRRP vrrp vrid virtual-router-id weight group to monitor a track entry By default, no track entry is track track-entry-number [ reduced and configure the reduced specified. weight-reduced ] weight. Enabling SNMP notifications for VRRP Perform this task to enable VRRP to report important events through notifications to the SNMP module.

  • Page 20: Configuring Ipv6 Vrrp

    Task Command Clear statistics for IPv4 VRRP reset vrrp statistics [ interface interface-type interface-number [ vrid groups. virtual-router-id ] ] Configuring IPv6 VRRP This section describes how to configure IPv6 VRRP. IPv6 VRRP configuration task list Tasks at a glance Remarks (Required.) Specifying an IPv6 VRRP operating...

  • Page 21: Creating A Vrrp Group And Assigning A Virtual Ipv6 Address

    Creating a VRRP group and assigning a virtual IPv6 address A VRRP group can work correctly after you create it and assign at least one virtual IPv6 address for it. You can configure multiple virtual IPv6 addresses for the VRRP group on an interface that connects to multiple subnets for router backup.

  • Page 22: Configuring The Router Priority, Preemptive Mode, And Tracking Function

    Configuring the router priority, preemptive mode, and tracking function Configuration guidelines The running priority of an IP address owner is always 255, and you do not need to configure it. An • IP address owner always operates in preemptive mode. If you associate a track entry with a VRRP group on an IP address owner, the association does not •...

  • Page 23: Configuring Ipv6 Vrrp Packet Attributes

    Enter interface view. interface-number The default setting is 100 centiseconds. To maintain system stability, HP Configure the IPv6 VRRP vrrp ipv6 vrid virtual-router-id recommends that you set the advertisement interval. timer advertise adver-interval VRRP advertisement interval to be greater than 100 centiseconds.

  • Page 24: Disabling An Ipv6 Vrrp Group

    Disabling an IPv6 VRRP group You can temporarily disable an IPv6 VRRP group. After being disabled, the VRRP group stays in initialized state, and its configurations remain unchanged. You can change the configuration of a VRRP group when it is disabled. Your changes take effect when you enable the VRRP group again. To disable an IPv6 VRRP group: Step Command...
  • Page 25 Figure 9 Network diagram Configuration procedure Configure Router A: # Specify an IP address for Router A. <RouterA> system-view [RouterA] interface gigabitethernet 1/0 [RouterA-GigabitEthernet1/0] ip address 10.1.1.1 255.255.255.0 # Create VRRP group 1 on GigabitEthernet 1/0 and set its virtual IP address to 10.1.1.111. [RouterA-GigabitEthernet1/0] vrrp vrid 1 virtual-ip 10.1.1.111 # Assign Router A a higher priority than Router B in VRRP group 1, so Router A can become the master.
  • Page 26 Running Mode : Standard Total number of virtual routers : 1 Interface GigabitEthernet1/0 VRID Adver Timer : 100 Admin Status : Up State : Master Config Pri : 110 Running Pri : 110 Preempt Mode : Yes Delay Time Auth Type : None Virtual IP : 10.1.1.111...

  • Page 27: Multiple Vrrp Groups Configuration Example

    [RouterA-GigabitEthernet1/0] display vrrp verbose IPv4 Virtual Router Information: Running Mode : Standard Total number of virtual routers : 1 Interface GigabitEthernet1/0 VRID Adver Timer : 100 Admin Status : Up State : Master Config Pri : 110 Running Pri : 110 Preempt Mode : Yes Delay Time...
  • Page 28 [RouterA] interface gigabitethernet 1/0 [RouterA-GigabitEthernet1/0] ip address 10.1.1.1 255.255.255.0 # Create VRRP group 1 and set its virtual IP address to 10.1.1.111. [RouterA-GigabitEthernet1/0] vrrp vrid 1 virtual-ip 10.1.1.111 # Assign Router A a higher priority than Router B in VRRP group 1, so Router A can become the master in the group.

  • Page 29: Vrrp Load Balancing Configuration Example

    # Display detailed information about the VRRP groups on Router B. [RouterB-GigabitEthernet1/0] display vrrp verbose IPv4 Virtual Router Information: Running Mode : Standard Total number of virtual routers : 2 Interface GigabitEthernet1/0 VRID Adver Timer : 100 Admin Status : Up State : Backup Config Pri...
  • Page 30 Figure 11 Network diagram Network Router A Router B Router C GE2/0 GE2/0 GE2/0 Master Backup Backup AVF 1 AVF 2 AVF 3 GE1/0 GE1/0 GE1/0 IP: 10.1.1.2/24 IP: 10.1.1.3/24 IP: 10.1.1.4/24 VIP: 10.1.1.1/24 VIP: 10.1.1.1/24 VIP: 10.1.1.1/24 IP: 10.1.1.5/24 IP: 10.1.1.6/24 IP: 10.1.1.7/24 Gateway IP: 10.1.1.1/24...
  • Page 31 # Configure VRRP to operate in load balancing mode. <RouterB> system-view [RouterB] vrrp mode load-balance # Create VRRP group 1, and set its virtual IP address to 10.1.1.1. [RouterB] interface gigabitethernet 1/0 [RouterB-GigabitEthernet1/0] ip address 10.1.1.3 24 [RouterB-GigabitEthernet1/0] vrrp vrid 1 virtual-ip 10.1.1.1 # Assign Router B a higher priority than Router C in VRRP group 1, so Router B can become the master when Router A fails.
  • Page 32 VRID Adver Timer : 100 Admin Status : Up State : Master Config Pri : 120 Running Pri : 120 Preempt Mode : Yes Delay Time Auth Type : None Virtual IP : 10.1.1.1 Member IP List : 10.1.1.2 (Local, Master) 10.1.1.3 (Backup) 10.1.1.4 (Backup) Forwarder Information: 3 Forwarders 1 Active...
  • Page 33 Forwarder Information: 3 Forwarders 1 Active Config Weight : 255 Running Weight : 255 Forwarder 01 State : Listening Virtual MAC : 000f-e2ff-0011 (Learnt) Owner ID : 0000-5e01-1101 Priority : 127 Active : 10.1.1.2 Forwarder 02 State : Active Virtual MAC : 000f-e2ff-0012 (Owner) Owner ID : 0000-5e01-1103...
  • Page 34 Forwarder 02 State : Listening Virtual MAC : 000f-e2ff-0012 (Learnt) Owner ID : 0000-5e01-1103 Priority : 127 Active : 10.1.1.3 Forwarder 03 State : Active Virtual MAC : 000f-e2ff-0013 (Owner) Owner ID : 0000-5e01-1105 Priority : 255 Active : local Forwarder Weight Track Information: Track Object State : Positive...
  • Page 35 State : Initialize Virtual MAC : 000f-e2ff-0013 (Learnt) Owner ID : 0000-5e01-1105 Priority Active : 10.1.1.4 Forwarder Weight Track Information: Track Object State : Negative Weight Reduced : 250 # Display detailed information about VRRP group 1 on Router C. [RouterC-GigabitEthernet1/0] display vrrp verbose IPv4 Virtual Router Information: Running Mode...
  • Page 36 forward traffic. The VF for MAC address 000f-e2ff-0011 on Router C becomes the AVF to forward traffic. # When the timeout timer (about 1800 seconds) expires, display detailed information about VRRP group 1 on Router C. [RouterC-GigabitEthernet1/0] display vrrp verbose IPv4 Virtual Router Information: Running Mode : Load Balance...

  • Page 37: Ipv6 Vrrp Configuration Examples

    Virtual IP : 10.1.1.1 Member IP List : 10.1.1.3 (Local, Master) 10.1.1.4 (Backup) Forwarder Information: 2 Forwarders 1 Active Config Weight : 255 Running Weight : 255 Forwarder 02 State : Active Virtual MAC : 000f-e2ff-0012 (Owner) Owner ID : 0000-5e01-1103 Priority : 255 Active...
  • Page 38 Figure 12 Network diagram Configuration procedure Configure Router A: # Specify an IPv6 address for Router A. <RouterA> system-view [RouterA] interface gigabitethernet 1/0 [RouterA-GigabitEthernet1/0] ipv6 address fe80::1 link-local [RouterA-GigabitEthernet1/0] ipv6 address 1::1 64 # Create VRRP group 1, and set its virtual IPv6 addresses to FE80::10 and 1::10. [RouterA-GigabitEthernet1/0] vrrp ipv6 vrid 1 virtual-ip fe80::10 link-local [RouterA-GigabitEthernet1/0] vrrp ipv6 vrid 1 virtual-ip 1::10 # Assign Router A a higher priority than Router B in VRRP group 1, so Router A can become the...
  • Page 39 [RouterB-GigabitEthernet1/0] undo ipv6 nd ra halt Verify the configuration: # Ping Host B from Host A. (Details not shown.) # Display detailed information about VRRP group 1 on Router A. [RouterA-GigabitEthernet1/0] display vrrp ipv6 verbose IPv6 Virtual Router Information: Running Mode : Standard Total number of virtual routers : 1 Interface GigabitEthernet1/0...

  • Page 40: Multiple Vrrp Groups Configuration Example

    Auth Type : None Virtual IP : FE80::10 1::10 Virtual MAC : 0000-5e00-0201 Master IP : FE80::2 The output shows that when Router A fails, Router B takes over to forward packets from Host A to Host B. # Recover the link between Host A and Router A, and display detailed information about VRRP group 1 on Router A.
  • Page 41 Figure 13 Network diagram Configuration procedure Configure Router A: # Specify an IPv6 address for Router A. <RouterA> system-view [RouterA] interface gigabitethernet 1/0 [RouterA-GigabitEthernet1/0] ipv6 address fe80::1 link-local [RouterA-GigabitEthernet1/0] ipv6 address 1::1 64 # Create VRRP group 1, and set its virtual IPv6 addresses to FE80::10 to 1::10. [RouterA-GigabitEthernet1/0] vrrp ipv6 vrid 1 virtual-ip fe80::10 link-local [RouterA-GigabitEthernet1/0] vrrp ipv6 vrid 1 virtual-ip 1::10 # Assign a higher priority to Router A than Router B in VRRP group 1, so Router A can become the...
  • Page 42 # Assign Router B a higher priority than Router A in VRRP group 2, so Router B can become the master in the group. [RouterB-GigabitEthernet1/0] vrrp ipv6 vrid 2 priority 110 Verify the configuration: # Display detailed information about the VRRP groups on Router A. [RouterA-GigabitEthernet1/0] display vrrp ipv6 verbose IPv6 Virtual Router Information: Running Mode...

  • Page 43: Vrrp Load Balancing Configuration Example

    Admin Status : Up State : Master Config Pri : 110 Running Pri : 110 Preempt Mode : Yes Delay Time Auth Type : None Virtual IP : FE80::20 1::20 Virtual MAC : 0000-5e00-0202 Master IP : FE80::2 The output shows that Router A is operating as the master in VRRP group 1 to forward Internet traffic for hosts that use the default gateway 1::10/64.
  • Page 44 Configuration procedure Configure Router A: # Configure VRRP to operate in load balancing mode. <RouterA> system-view [RouterA] vrrp ipv6 mode load-balance # Create VRRP group 1, and set its virtual IPv6 addresses to FE80::10 and 1::10. [RouterA] interface gigabitethernet 1/0 [RouterA-GigabitEthernet1/0] ipv6 address fe80::1 link-local [RouterA-GigabitEthernet1/0] ipv6 address 1::1 64 [RouterA-GigabitEthernet1/0] vrrp ipv6 vrid 1 virtual-ip fe80::10 link-local...
  • Page 45 [RouterB-GigabitEthernet1/0] quit # Create track entry 1 to monitor the upstream link status of GigabitEthernet 2/0. When the upstream link fails, the track entry transits to Negative. [RouterB] track 1 interface ethernet 1/2 # Configure the VFs in VRRP group 1 to monitor track entry 1, and decrease their weights by 250 when the track entry transits to Negative.
  • Page 46 Member IP List : FE80::1 (Local, Master) FE80::2 (Backup) FE80::3 (Backup) Forwarder Information: 3 Forwarders 1 Active Config Weight : 255 Running Weight : 255 Forwarder 01 State : Active Virtual MAC : 000f-e2ff-4011 (Owner) Owner ID : 0000-5e01-1101 Priority : 255 Active : local...
  • Page 47 Virtual MAC : 000f-e2ff-4011 (Learnt) Owner ID : 0000-5e01-1101 Priority : 127 Active : FE80::1 Forwarder 02 State : Active Virtual MAC : 000f-e2ff-4012 (Owner) Owner ID : 0000-5e01-1103 Priority : 255 Active : local Forwarder 03 State : Listening Virtual MAC : 000f-e2ff-4013 (Learnt) Owner ID...
  • Page 48 Priority : 127 Active : FE80::2 Forwarder 03 State : Active Virtual MAC : 000f-e2ff-4013 (Owner) Owner ID : 0000-5e01-1105 Priority : 255 Active : local Forwarder Weight Track Information: Track Object State : Positive Weight Reduced : 250 The output shows that Router A is the master in VRRP group 1, and each of the three routers has one AVF and two LVFs.
  • Page 49 Priority Active : FE80::3 Forwarder Weight Track Information: Track Object State : Negative Weight Reduced : 250 # Display detailed information about VRRP group 1 on Router C. [RouterC-GigabitEthernet1/0] display vrrp ipv6 verbose IPv6 Virtual Router Information: Running Mode : Load Balance Total number of virtual routers : 1 Interface GigabitEthernet1/0 VRID...
  • Page 50 # When the timeout timer (about 1800 seconds) expires, display detailed information about VRRP group 1 on Router C. [RouterC-GigabitEthernet1/0] display vrrp ipv6 verbose IPv6 Virtual Router Information: Running Mode : Load Balance Total number of virtual routers : 1 Interface GigabitEthernet1/0 VRID Adver Timer...

  • Page 51: Troubleshooting Vrrp

    Virtual IP : FE80::10 1::10 Member IP List : FE80::2 (Local, Master) FE80::3 (Backup) Forwarder Information: 2 Forwarders 1 Active Config Weight : 255 Running Weight : 255 Forwarder 02 State : Active Virtual MAC : 000f-e2ff-4012 (Owner) Owner ID : 0000-5e01-1103 Priority : 255...

  • Page 52: Multiple Masters Appear In A Vrrp Group

    Multiple masters appear in a VRRP group Symptom Multiple masters appear in a VRRP group. Analysis It is normal for a VRRP group to have multiple masters for a short time, and this situation requires no manual intervention. If multiple masters coexist for a longer period, it might be because the masters cannot receive advertisements from each other, or because the received advertisements are illegitimate.

  • Page 53: Configuring Bfd

    Configuring BFD Introduction to BFD Bidirectional forwarding detection (BFD) provides a general-purpose, standard, medium- and protocol-independent fast failure detection mechanism. It can detect and monitor the connectivity of links in IP to detect communication failures quickly so that measures can be taken to ensure service continuity and enhance network availability.

  • Page 54: Supported Features

    Echo packet mode The local end of the link sends echo packets to establish BFD sessions and monitor link status. The peer end does not establish BFD sessions and only forwards the packets back to the originating end. In echo packet mode, BFD supports only single-hop detection and the BFD session is independent of the operating mode.

  • Page 55: Protocols And Standards

    Protocols and standards RFC 5880, Bidirectional Forwarding Detection (BFD) • • RFC 5881, Bidirectional Forwarding Detection (BFD) for IPv4 and IPv6 (Single Hop) RFC 5882, Generic Application of Bidirectional Forwarding Detection (BFD) • RFC 5883, Bidirectional Forwarding Detection (BFD) for Multihop Paths •...

  • Page 56: Configuring Control Packet Mode

    Configuring control packet mode To configure control packet mode for single-hop detection: Step Command Remarks Enter system view. system-view Specify the mode for bfd session init-mode { active | By default, active is specified. establishing a BFD session. passive } interface interface-type Enter interface view.

  • Page 57: Displaying And Maintaining Bfd

    Step Command Remarks Configure the multi-hop bfd multi-hop detect-multiplier The default setting is 5. detection time multiplier. value Configure the minimum By default, the minimum interval for bfd multi-hop min-receive-interval interval for receiving multi-hop receiving multi-hop BFD control value BFD control packets. packets is 500 milliseconds.

  • Page 58: Configuring Track

    Configuring Track Overview The Track module works between application modules and detection modules, as shown in Figure 15. It shields the differences between various detection modules from application modules. Collaboration is enabled after you associate the Track module with a detection module and an application module.

  • Page 59: Collaboration Application Example

    BFD. • • Interface management. Collaboration between the Track module and an application module The following application modules can be associated with the Track module: • VRRP. Static routing. • Policy-based routing. • When configuring a track entry for an application module, you can set a notification delay to avoid immediate notification of status changes, which can cause communication failure.

  • Page 60: Associating The Track Module With A Detection Module

    Associating the Track module with a detection module Associating Track with NQA NQA supports multiple test types to analyze network performance, services, and service quality. For example, an NQA test group can periodically detect whether a destination is reachable, or whether the TCP connection to a TCP server can be set up.

  • Page 61: Associating Track With Interface Management

    Configuration procedure To associate Track with BFD: Step Command Remarks Enter system view. system-view No track entry is created Create a track entry, by default. associate it with the BFD track track-entry-number bfd { control | session, and specify the delay echo } interface interface-type Do not configure the time for the Track module to...

  • Page 62: Associating The Track Module With An Application Module

    Associating the Track module with an application module Associating Track with VRRP When VRRP is operating in standard mode or load balancing mode, associate the Track module with the VRRP group to implement the following actions: Change the priority of a router according to the status of the uplink. If a fault occurs on the uplink •...

  • Page 63: Associating Track With Static Routing

    To associate Track with VRRP VF: Step Command Remarks Enter system view. system-view interface interface-type Enter interface view. interface-number By default, no track entry is specified for a VF. This command is configurable vrrp [ ipv6 ] vrid virtual-router-id when VRRP is operating in Associate Track with VRRP VF.

  • Page 64: Associating Track With Pbr

    To associate Track with static routing: Step Command Remarks Enter system view. system-view • Method 1: ip route-static dest-address { mask | mask-length } { next-hop-address [ track track-entry-number ] | interface-type interface-number [ next-hop-address ] | vpn-instance d-vpn-instance-name next-hop-address [ track track-entry-number ] } [ permanent ] [ preference preference-value ] [ tag tag-value ] [ description Associate the static...

  • Page 65: Configuration Prerequisites

    Default outgoing interface. • • Default next hop. Configuration prerequisites Before you associate Track with PBR, create a policy or a policy node and configure the match criteria as well. Configuration procedure You can associate a nonexistent track entry with PBR. The association takes effect only after you use the track command to create the track entry.

  • Page 66: Displaying And Maintaining Track Entries

    Step Command Remarks Create a policy or policy ipv6 policy-based-route policy-name [ deny | node and enter PBR policy permit ] node node-number node view. • Define an IPv6 packet length match criterion: if-match packet-length min-len max-len By default, no packets Define a match criterion.

  • Page 67: Network Requirements

    Network requirements As shown in Figure 16, configure Host A to access Host B on the Internet. The default gateway of • Host A is 10.1.1.10/24. • Router A and Router B belong to VRRP group 1, which has the virtual IP address 10.1.1.10. When Router A works correctly, packets from Host A to Host B are forwarded through Router A.
  • Page 68 Configure VRRP on Router A: # Create VRRP group 1, and configure the virtual IP address 10.1.1.10 for the group. [RouterA] interface gigabitethernet 1/0 [RouterA-GigabitEthernet1/0] vrrp vrid 1 virtual-ip 10.1.1.10 # Set the priority of Router A in VRRP group 1 to 110. [RouterA-GigabitEthernet1/0] vrrp vrid 1 priority 110 # Set the authentication mode of VRRP group 1 to simple, and the authentication key to hello.
  • Page 69 # Display detailed information about VRRP group 1 on Router B. [RouterB-GigabitEthernet1/0] display vrrp verbose IPv4 Virtual Router Information: Running Mode : Standard Total number of virtual routers : 1 Interface GigabitEthernet1/0 VRID Adver Timer : 500 Admin Status : Up State : Backup Config Pri...

  • Page 70: Configuring Bfd For A Vrrp Backup To Monitor The Master

    Virtual IP : 10.1.1.10 Virtual MAC : 0000-5e00-0101 Master IP : 10.1.1.2 The output shows that when a fault is on the link between Router A and Router C, the priority of Router A decreases to 80. Router A becomes the backup, and Router B becomes the master. Packets from Host A to Host B are forwarded through Router B.
  • Page 71 # Create VRRP group 1, and configure the virtual IP address 192.168.0.10 for the group. Set the priority of Router A in VRRP group 1 to 110. [RouterA-GigabitEthernet1/0] vrrp vrid 1 virtual-ip 192.168.0.10 [RouterA-GigabitEthernet1/0] vrrp vrid 1 priority 110 [RouterA-GigabitEthernet1/0] return Configure BFD on Router B: # Configure the source address of BFD echo packets as 10.10.10.10.
  • Page 72 Preempt Mode : Yes Delay Time Become Master : 2200ms left Auth Type : None Virtual IP : 192.168.0.10 Master IP : 192.168.0.101 VRRP Track Information: Track Object State : Positive Switchover # Display information about track entry 1 on Router B. <RouterB>...

  • Page 73: Configuring Bfd For The Vrrp Master To Monitor The Uplink

    Track Object State : Negative Switchover The output shows that when BFD detects that Router A fails, it notifies VRRP through the Track module to change the status of Router B to master without waiting for a period three times the advertisement interval. This ensures that a backup can quickly preempt as the master.
  • Page 74 [RouterA] track 1 bfd echo interface gigabitethernet 1/0 remote ip 1.1.1.2 local ip 1.1.1.1 Configure VRRP on Router A: # Create VRRP group 1, and configure the virtual IP address of the group as 192.168.0.10. Configure the priority of Router A in VRRP group 1 as 110, and configure VRRP group 1 to monitor the status of track entry 1.
  • Page 75 # Display detailed information about the VRRP group on Router B. <RouterB> display vrrp verbose IPv4 Virtual Router Information: Running Mode : Standard Total number of virtual routers : 1 Interface GigabitEthernet2/0 VRID Adver Timer : 100 Admin Status : Up State : Backup Config Pri...

  • Page 76: Static Routing-Track-Nqa Collaboration Configuration Example

    Running Mode : Standard Total number of virtual routers : 1 Interface GigabitEthernet2/0 VRID Adver Timer : 100 Admin Status : Up State : Master Config Pri : 100 Running Pri : 100 Preempt Mode : Yes Delay Time Auth Type : None Virtual IP : 192.168.0.10...
  • Page 77 Figure 19 Network diagram Configuration procedure Configure the IP address of each interface as shown in Figure 19. (Details not shown.) Configure Router A: # Configure a static route to 30.1.1.0/24, with the address of the next hop as 10.1.1.2 and the default priority 60.
  • Page 78 [RouterA] nqa schedule admin test start-time now lifetime forever # Configure track entry 1, and associate it with reaction entry 1 of the NQA test group (with the administrator admin, and the operation tag test). [RouterA] track 1 nqa entry admin test reaction 1 Configure Router B: # Configure a static route to 30.1.1.0/24, with the address of the next hop as 10.2.1.4.
  • Page 79 [RouterD] track 1 nqa entry admin test reaction 1 Verifying the configuration # Display information about the track entry on Router A. [RouterA] display track all Track ID: 1 State: Positive Duration: 0 days 0 hours 0 minutes 32 seconds Notification delay: Positive 0, Negative 0 (in seconds) Tracked object: NQA entry: admin test...
  • Page 80 Destinations : 10 Routes : 10 Destination/Mask Proto Cost NextHop Interface 10.1.1.0/24 Direct 0 10.1.1.1 GE1/0 10.1.1.1/32 Direct 0 127.0.0.1 InLoop0 10.2.1.0/24 Static 60 10.1.1.2 GE1/0 10.3.1.0/24 Direct 0 10.3.1.1 GE2/0 10.3.1.1/32 Direct 0 127.0.0.1 InLoop0 20.1.1.0/24 Direct 0 20.1.1.1 GE3/0 20.1.1.1/32 Direct 0...

  • Page 81: Static Routing-Track-Bfd Collaboration Configuration Example

    Static routing-Track-BFD collaboration configuration example Network requirements As shown in Figure 20, Router A, Router B, and Router C are connected to two segments 20.1.1.0/24 and 30.1.1.0/24. Configure static routes on these routers so that the two segments can communicate with each other.
  • Page 82 [RouterA] ip route-static 30.1.1.0 24 10.3.1.3 preference 80 # Configure the source address of BFD echo packets as 10.10.10.10. [RouterA] bfd echo-source-ip 10.10.10.10 # Configure track entry 1, and associate it with the BFD session. Check whether Router A can be interoperated with the next hop of static route, which is Router B.
  • Page 83 Destination/Mask Proto Cost NextHop Interface 10.2.1.0/24 Direct 0 10.2.1.1 GE1/0 10.2.1.1/32 Direct 0 127.0.0.1 InLoop0 10.3.1.0/24 Direct 0 10.3.1.1 GE2/0 10.3.1.1/32 Direct 0 127.0.0.1 InLoop0 20.1.1.0/24 Direct 0 20.1.1.1 GE3/0 20.1.1.1/32 Direct 0 127.0.0.1 InLoop0 30.1.1.0/24 Static 60 10.2.1.2 GE1/0 127.0.0.0/8 Direct 0 127.0.0.1...

  • Page 84: Vrrp-Track-Interface Management Collaboration Configuration Example

    The output shows the BFD detection result: if the next hop 10.2.1.2 is unreachable (the status of the track entry is Negative), the backup static route takes effect, and Router A forwards packets to 30.1.1.0/24 through Router C and Router B. # When the master route fails, the hosts in 20.1.1.0/24 can still communicate with the hosts in 30.1.1.0/24.
  • Page 85 Figure 21 Network diagram Configuration procedure Configure the IP address of each interface as shown in Figure 21. (Details not shown.) Configure a track entry on Router A: # Configure track entry 1, and associate it with the link status of the uplink interface GigabitEthernet 2/0.
  • Page 86 Admin Status : Up State : Master Config Pri : 110 Running Pri : 110 Preempt Mode : Yes Delay Time Auth Type : None Virtual IP : 10.1.1.10 Virtual MAC : 0000-5e00-0101 Master IP : 10.1.1.1 VRRP Track Information: Track Object State : Positive Pri Reduced : 30...
  • Page 87 # After shutting down the uplink interface on Router A, display detailed information about VRRP group 1 on Router B. [RouterB-GigabitEthernet1/0] display vrrp verbose IPv4 Virtual Router Information: Running Mode : Standard Total number of virtual routers : 1 Interface GigabitEthernet1/0 VRID Adver Timer : 100...

  • Page 88: Support And Other Resources

    Related information Documents To find related documents, browse to the Manuals page of the HP Business Support Center website: http://www.hp.com/support/manuals For related documentation, navigate to the Networking section, and select a networking category. •...

  • Page 89: Conventions

    Conventions This section describes the conventions used in this documentation set. Command conventions Convention Description Boldface Bold text represents commands and keywords that you enter literally as shown. Italic Italic text represents arguments that you replace with actual values. Square brackets enclose syntax choices (keywords or arguments) that are optional. Braces enclose a set of required syntax choices separated by vertical bars, from which { x | y | ...
  • Page 90 Network topology icons Represents a generic network device, such as a router, switch, or firewall. Represents a routing-capable device, such as a router or Layer 3 switch. Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supports Layer 2 forwarding and other Layer 2 features.

  • Page 91: Index

    Protocols and standards,10 Configuring BFD basic functions,51 Configuring IPv4 VRRP,10 Related information,84 Configuring IPv6 VRRP,16 Contacting HP,84 Conventions,85 Track configuration examples,62 Track configuration task list,55 Troubleshooting VRRP,47 Displaying and maintaining BFD,53 Displaying and maintaining track entries,62 VRRP load balancing...

This manual is also suitable for:

Msr3000 seriesMsr4000 seriesMsr2000 series

Table of Contents