Huawei Quidway S3700 Series Configuration Manual page 328

Quidway S3700 Series Ethernet Switches
Configuration Guide - Reliability
switches have different priorities in this backup group. The switch with the highest priority serves
as the master switch.
l
l
Load Balancing Mode
In the load balancing mode, two or more backup groups are created. Multiple backup groups
undertake services at the same time.
In the load balancing mode, the VRRP backup groups have the following features:
l
l
l
Tracking the Interface Status
In the S3700, the interfaces can be tracked. When the interface status changes, the priority of
the switch is automatically adjusted. The priorities of switches in the backup group change and
a new master switch is elected.
VRRP Fast Switchover
The S3700 supports bidirectional forwarding detection (BFD), which detects connectivity of
links and routes on the network. VRRP monitors the status of BFD sessions to perform fast
switchover between the master and backup switches. You can configure up to eight BFD
sessions. The switchover can be complete within 1 second. Working with the BFD sessions,
VRRP shortens the duration of the switchover.
Enable/Disable the Ping Function to the Virtual IP Address
To ping through virtual IP addresses that are used in the VRRP backup group, you can monitor
the operating status of the virtual switches but the VRRP backup group may suffer the ICMP
attack. In the S3700, you can run a command to enable the function to ping the virtual IP address.
VRRP Security Functions
For different security levels of networks, you can set different authentication modes and
authentication keys in the header of VRRP packets.
In a secure network, you can adopt the default configuration. That is, the switch does not
authenticate the VRRP packets to be sent and received. The switch considers all the received
packets as real and valid VRRP packets. In this case, no authentication key is required.
VRRP provides simple text authentication and MD5 authentication for networks that are
vulnerable to attacks. In simple text authentication mode, a string of 1 to 8 characters can be
configured as the authentication key. In MD5 authentication mode, a string of 1 to 8 characters
in plain text or a string of 24 characters in encrypted text can be configured as the authentication
key.
Issue 01 (2011-10-26)
The master switch undertakes all the services in normal condition.
The backup switches undertake the services only when the master switch fails.
In the S3700, a switch can join several VRRP backup groups and has different priorities in
different backup groups. Multiple virtual switches carry out load balancing.
Each backup group consists of a master switch and several backup switches.
The master switch of each backup group can be different.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
7 VRRP and VRRP6 Configuration
316