Figure 18: Vrf Internet And Associated Vlans/Networks - Avaya 8600 Technical Configuration Manual

avaya.com
Internet
FW1 FW2
Site3
.20 .20
Vlan3991 Vlan3992
10.255.91.0/24 10.255.92.0/24
VRRP IP = .10 VRRP IP = .10
.1
.2
Master VRRP
Site1 Site2
IST MLT
.1
VRRP Master
.2
Site4 Site5

Figure 18: VRF Internet and associated VLANs/Networks

In this design this will be achieved by deploying VRRP instances as shown in figure 18. The ERS 8600
locally attached to the firewall will be made the VRRP Master for the relevant VLAN. The VRRP Master
will also be configured with a suitably high VRRP hold-down timer. The firewalls must have IP routes with
next-hop pointing at the VRRP IP address.
When Site1 restarts, the VRRP instance on VLAN 3991 will not immediately become Master. Provided
that VRRP Hellos for that instance are being received from Site2, Site1 will remain in VRRP Backup state
for the duration of the VRRP hold-down timer. During this time, all traffic received from FW1 will
automatically be L2 switched by Site1 over to Site2 who will continue to IP route traffic sent to the VRRP
MAC for the duration of the hold-down timer.
Site 1
CLI
Site1:5# config ip vrf internet create id 255
Site1:5# config vlan 3991 create byport 1 name "VRF255-FW1"
Site1:5# config vlan 3991 vrf internet
Site1:5# config vlan 3991 add-mlt 32
Network Design Implementation to Provide L2 & L3 VPN Connectivity
74
November 2010
between Sites using SMLT and IPVPN-Lite for ERS 8600
Technical Configuration Guide