1. Manuals
  2. Brands
  3. HP Manuals
  4. Network Router
  5. MSR SERIES
  6. Configuration manual

HP MSR Series Configuration Manual

High availability
Hide thumbs Also See for MSR Series:
Table of Contents

Advertisement

Quick Links

Download this manual See also: Configuration Manual
HP MSR Router Series

High Availability

Configuration Guide(V7)
Part number: 5998-7716b
Software version: CMW710-R0304
Document version: 6PW104-20150914

Advertisement

Table of Contents
loading

Related Manuals for HP MSR Series

Summary of Contents for HP MSR Series

  • Page 1: High Availability

    HP MSR Router Series High Availability Configuration Guide(V7) Part number: 5998-7716b Software version: CMW710-R0304 Document version: 6PW104-20150914...
  • Page 2 The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an...

  • Page 3: Table Of Contents

    Contents Configuring interface backup ····································································································································· 1   Overview ············································································································································································ 1   Compatible interfaces ·············································································································································· 1   Backup modes ·························································································································································· 1   Configuration restrictions and guidelines ······················································································································· 3   Interface backup configuration task list ·························································································································· 4   Configuring strict active/standby interface backup ······································································································ 4  ...
  • Page 4 Configuring IPv6 VRRP packet attributes ············································································································ 34   Disabling an IPv6 VRRP group ····························································································································· 34   Displaying and maintaining IPv6 VRRP ··············································································································· 35   IPv4 VRRP configuration examples ······························································································································· 35   Single VRRP group configuration example ········································································································· 35   Multiple VRRP groups configuration example ···································································································· 38  ...
  • Page 5 Configuring a self affinity ··································································································································· 105   Optimizing process placement ··································································································································· 106   Displaying process placement ···································································································································· 106   Support and other resources ·································································································································· 107   Contacting HP ······························································································································································ 107   Subscription service ············································································································································ 107   Related information ······················································································································································ 107   Documents ···························································································································································· 107  ...

  • Page 6: Configuring Interface Backup

    Configuring interface backup Overview Interface backup enables you to configure multiple backup interfaces for a Layer 3 interface to increase link availability. When the primary interface fails or is overloaded, its backup interfaces can take over or participate in traffic forwarding. Compatible interfaces The interface backup feature is configurable for the interfaces in Table...
  • Page 7 In strict active/standby mode, traffic loss occurs when the active interface is overloaded. Load sharing mode improves link efficiency and reduces the risk of packet loss. Strict active/standby mode In strict active/standby mode, the primary interface always has higher priority than all backup interfaces. When the primary interface is operating correctly, all traffic is transmitted through the primary •...

  • Page 8: Configuration Restrictions And Guidelines

    When the amount of traffic on the primary interface decreases below the lower threshold, the • backup interfaces are deactivated in ascending order of priority. This action continues until the amount of traffic exceeds the lower threshold. • When the primary interface fails (in DOWN state), the strict active/standby mode applies. Only one backup interface can forward traffic.

  • Page 9: Interface Backup Configuration Task List

    Interface backup configuration task list Task Remarks You cannot use these two methods at the same time for a primary interface and its backup interfaces. Configuring strict active/standby interface backup: • (Method 1.) Explicitly specifying backup interfaces Use method 1 if you want to monitor the interface without traffic thresholds state of the primary interface for a switchover to occur.

  • Page 10: Using Interface Backup With The Track Module

    Step Command Remarks Enter system view. system-view interface interface-type Enter interface view. This interface must be the primary interface. interface-number By default, an interface does not have any backup interfaces. Specify a backup backup interface interface-type interface. interface-number [ priority ] Repeat this command to specify up to three backup interfaces for the interface.

  • Page 11: Configuring Load-Shared Interface Backup

    To associate Track with an interface: Step Command Remarks Enter system view. system-view interface interface-type This interface must be the interface Enter interface view. interface-number you are using as a backup. Associate the interface with a By default, an interface is not backup track track-entry-number track entry.

  • Page 12: Interface Backup Configuration Examples

    Task Command Display traffic statistics for load-shared interfaces. display interface-backup statistics Display the status of primary and backup interfaces. display interface-backup state Interface backup configuration examples Strict active/standby interface backup configuration example Network requirements As shown in Figure • Specify GigabitEthernet 2/0/2 and GigabitEthernet 2/0/3 on Router A to back up GigabitEthernet 2/0/1.

  • Page 13: Strict Active/Standby Interface Backup With The Track Module Configuration Example

    # Specify GigabitEthernet 2/0/2 and GigabitEthernet 2/0/3 to back up GigabitEthernet 2/0/1, and assign them a priority of 30 and 20, respectively. [RouterA] interface gigabitethernet 2/0/1 [RouterA-GigabitEthernet2/0/1] backup interface gigabitethernet 2/0/2 30 [RouterA-GigabitEthernet2/0/1] backup interface gigabitethernet 2/0/3 20 # Set both up and down delay timers to 10 seconds. [RouterA-GigabitEthernet2/0/1] backup timer delay 10 10 Verifying the configuration # Display states of the primary and backup interfaces.
  • Page 14 Figure 4 Network diagram Configuration procedure Assign IP addresses to interfaces, as shown in Figure 4. (Details not shown.) Configure routes: # On Router A, configure static routes to 192.168.2.0/24 through the primary and backup interfaces. <RouterA> system-view [RouterA] ip route-static 192.168.2.0 24 gigabitethernet 2/0/1 [RouterA] ip route-static 192.168.2.0 24 gigabitethernet 2/0/2 # On Router B, configure static routes to 192.168.1.0/24.

  • Page 15: Load-Shared Interface Backup Configuration Example

    Load-shared interface backup configuration example Network requirements As shown in Figure Configure GigabitEthernet 2/0/2 and GigabitEthernet 2/0/3 on Router A to back up the primary • interface GigabitEthernet 2/0/1. Assign GigabitEthernet 2/0/2 higher priority than GigabitEthernet 2/0/3. • • On the primary interface: Specify the interface bandwidth used for traffic load calculation.
  • Page 16 # Set the upper and lower thresholds to 80 and 20, respectively. [RouterA-GigabitEthernet2/0/1] backup threshold 80 20 Verifying the configuration # Display traffic statistics for load-shared interfaces. [RouterA-GigabitEthernet2/0/1] display interface-backup statistics Interface: GigabitEthernet2/0/1 Statistics interval: 30 s Bandwidth: 10000000 bps PrimaryTotalIn: 102 bytes PrimaryTotalOut: 108 bytes PrimaryIntervalIn: 102 bytes...

  • Page 17: Configuring Vrrp

    Configuring VRRP Overview Typically, you can configure a default gateway for every host on a LAN. All packets destined for other networks are sent through the default gateway. As shown in Figure 6, when the default gateway fails, no hosts can communicate with external networks. Figure 6 LAN networking Using a default gateway facilitates your configuration but requires high availability.

  • Page 18: Vrrp Standard Mode

    VRRP has two versions: VRRPv2 and VRRPv3. VRRPv2 supports IPv4 VRRP. VRRPv3 supports IPv4 VRRP and IPv6 VRRP. VRRP standard mode In VRRP standard mode, only the master in the VRRP group can provide gateway service. When the master fails, the backup routers elect a new master to take over for nonstop gateway service. Figure 7 VRRP networking As shown in Figure...

  • Page 19: Authentication Method

    Authentication method To avoid attacks from unauthorized users, VRRP member routers add authentication keys in VRRP packets to authenticate one another. VRRP provides the following authentication methods: • Simple authentication The sender fills an authentication key into the VRRP packet, and the receiver compares the received authentication key with its local authentication key.

  • Page 20: Master Election

    Master election Routers in a VRRP group determine their roles by priority. When a router joins a VRRP group, it has a backup role. The router role changes according to the following situations: • If the backup does not receive any VRRP advertisement when the timer (3 × advertisement interval + Skew_Time) expires, it becomes the master.
  • Page 21 Figure 8 VRRP in master/backup mode Assume that Router A is acting as the master to forward packets to external networks, and Router B and Router C are backups in listening state. When Router A fails, Router B and Router C elect a new master to forward packets for hosts on the subnet.

  • Page 22: Vrrp Load Balancing Mode

    VRRP group 1—Router A is the master. Router B and Router C are the backups. • • VRRP group 2—Router B is the master. Router A and Router C are the backups. VRRP group 3—Router C is the master. Router A and Router B are the backups. •...
  • Page 23 Figure 10 Virtual MAC address assignment Network Router A Router B Master Backup Virtual MAC: 000f-e2ff-0012 Virtual MAC: 000f-e2ff-0011 Virtual IP address:10.1.1.1/24 Virtual IP address:10.1.1.1/24 Allocate Virtual MAC 000f-e2ff-0012 to Router B Gateway IP: 10.1.1.1/24 Gateway IP: 10.1.1.1/24 Host A Host B When an ARP request arrives, the master (Router A) selects a virtual MAC address based on the load balancing algorithm to answer the ARP request.

  • Page 24: Virtual Forwarder

    Figure 12 Sending packets to different routers for forwarding In the ARP reply sent by the master, the source MAC address in the Ethernet header is different from the sender MAC address in the message body. To make sure the Layer 2 device can forward the ARP packet, follow these configuration guidelines on the Layer 2 device: Do not enable ARP packet source MAC address consistency check.
  • Page 25 the listening virtual forwarders (LVFs). VF priority is in the range of 0 to 255, where 255 is reserved for the VF owner. When the weight of a VF owner is higher than or equal to the lower limit of failure, the priority of the VF owner is 255.

  • Page 26: Protocols And Standards

    A VF always operates in preemptive mode. When an LVF finds its priority value higher than the one advertised by the AVF, the LVF declares itself as the AVF. VF timers When the AVF on a router fails, the new AVF on another router creates the following timers for the failed AVF: •...

  • Page 27: Specifying An Ipv4 Vrrp Operating Mode

    Tasks at a glance Remarks (Optional.) Configuring the router priority, preemptive mode, and tracking function This configuration does not apply (Optional.) Specifying an IPv4 VRRP control VLAN to VRRP load balancing mode. (Optional.) Configuring IPv4 VRRP packet attributes This configuration applies only to (Optional.) Configuring VF tracking VRRP load balancing mode.

  • Page 28: Creating A Vrrp Group And Assigning A Virtual Ip Address

    No IP address owner can exist in a VRRP group. • On an IP address owner, HP recommends not using the network command to enable OSPF on the interface owning the virtual IP address of the VRRP group. For more information about the network command, see Layer 3—IP Routing Command Reference.

  • Page 29: Configuring The Router Priority, Preemptive Mode, And Tracking Function

    Configuring the router priority, preemptive mode, and tracking function The router priority determines which router in the VRRP group acts as the master. The preemptive mode enables a backup to take over as the master when it detects that it has a higher priority than the current master.
  • Page 30 When VRRP is operating in load balancing mode, you cannot specify the VRRP control VLAN. • After you specify a VRRP control VLAN, HP recommends that you configure the arp • send-gratuitous-arp command on the routers in the VRRP group. This command enables the routers to periodically send gratuitous ARP packets.

  • Page 31: Configuring Ipv4 Vrrp Packet Attributes

    Configuration procedure To specify a VRRP control VLAN: Step Command Remarks Enter system view. system-view Enter Layer 3 Ethernet interface interface-type subinterface view or Layer 3 interface-number aggregate subinterface view. • Specify a VRRP control VLAN for the ambiguous Dot1q By default, no VRRP control termination-enabled subinterface: VLAN is specified.

  • Page 32: Configuring Vf Tracking

    Remarks The default setting is 100 centiseconds. Set the interval at which the vrrp vrid virtual-router-id timer To maintain system stability, HP master in an IPv4 VRRP group advertise adver-interval recommends that you set the VRRP sends VRRP advertisements. advertisement interval to be greater than 100 centiseconds.

  • Page 33: Enabling Snmp Notifications For Vrrp

    Step Command Remarks vrrp vrid virtual-router-id track Configure the VFs in a VRRP track-entry-number group to monitor a track entry { forwarder-switchover member-ip By default, no track entry is and configure the reduced ip-address | priority reduced specified. weight. [ priority-reduced ] | switchover | weight reduced [ weight-reduced ] } Enabling SNMP notifications for VRRP Perform this task to enable VRRP to report important events through notifications to the SNMP module.

  • Page 34: Configuring Ipv6 Vrrp

    Task Command Display statistics for IPv4 VRRP display vrrp statistics [ interface interface-type interface-number [ vrid groups. virtual-router-id ] ] Clear statistics for IPv4 VRRP reset vrrp statistics [ interface interface-type interface-number [ vrid groups. virtual-router-id ] ] Configuring IPv6 VRRP This section describes how to configure IPv6 VRRP.

  • Page 35: Creating A Vrrp Group And Assigning A Virtual Ipv6 Address

    Configuration guidelines On an IP address owner, HP recommends not using the ospfv3 area command to enable OSPF on • the interface owning the virtual IPv6 address of the VRRP group. For more information about the ospfv3 area command, see Layer 3—IP Routing Command Reference.

  • Page 36: Configuring The Router Priority, Preemptive Mode, And Tracking Function

    Configuring the router priority, preemptive mode, and tracking function Configuration guidelines • The running priority of an IP address owner is always 255, and you do not need to configure it. An IP address owner always operates in preemptive mode. If you configure the vrrp ipv6 vrid track priority reduced or vrrp ipv6 vrid track switchover •...
  • Page 37 as needed. The packets are transmitted within all VLANs whose VLAN packets are configured to be terminated by the subinterface. Figure 15 IPv6 VRRP control VLAN Virtual IP address 1: 1001::1/64 GE1/0/1.10 Router A 1001::2/64 VLAN 10 Pos5/0 Gateway: 1001::1/64 GE1/0/1.20 Router C 2001::2/64...

  • Page 38: Configuring Vf Tracking

    Step Command Remarks Enter Layer 3 Ethernet interface interface-type subinterface view or Layer 3 interface-number aggregate subinterface view. • Specify an IPv6 VRRP control VLAN By default, no IPv6 VRRP for the ambiguous Dot1q control VLAN is specified. The termination-enabled subinterface: master sends IPv6 VRRP vrrp ipv6 dot1q vid vlan-id Specify an IPv6 VRRP control...

  • Page 39: Configuring Ipv6 Vrrp Packet Attributes

    Enter interface view. interface-number The default setting is 100 centiseconds. Set the IPv6 VRRP advertisement vrrp ipv6 vrid virtual-router-id timer To maintain system stability, HP interval. advertise adver-interval recommends that you set the VRRP advertisement interval to be greater than 100 centiseconds.

  • Page 40: Displaying And Maintaining Ipv6 Vrrp

    Step Command Remarks vrrp ipv6 vrid virtual-router-id By default, an IPv6 VRRP group is Disable an IPv6 VRRP group. shutdown enabled. Displaying and maintaining IPv6 VRRP Execute display commands in any view and the reset command in user view. Task Command Display the states of IPv6 VRRP display vrrp ipv6 [ interface interface-type interface-number [ vrid...
  • Page 41 Configuration procedure Configure Router A: # Specify an IP address for Router A. <RouterA> system-view [RouterA] interface gigabitethernet 2/0/1 [RouterA-GigabitEthernet2/0/1] ip address 10.1.1.1 255.255.255.0 # Create VRRP group 1 on GigabitEthernet 2/0/1 and set its virtual IP address to 10.1.1.111. [RouterA-GigabitEthernet2/0/1] vrrp vrid 1 virtual-ip 10.1.1.111 # Assign Router A a higher priority than Router B in VRRP group 1, so Router A can become the master.
  • Page 42 Running Mode : Standard Total number of virtual routers : 1 Interface GigabitEthernet2/0/1 VRID Adver Timer : 100 Admin Status : Up State : Backup Config Pri : 100 Running Pri : 100 Preempt Mode : Yes Delay Time Become Master : 412ms left Auth Type : None...

  • Page 43: Multiple Vrrp Groups Configuration Example

    The output shows that after Router A resumes normal operation, it becomes the master to forward packets from Host A to Host B. Multiple VRRP groups configuration example To implement load sharing between the VRRP groups, manually configure the default gateway 10.1.1.1 1 1 for some hosts and 10.1.1.1 12 for the other on the subnet 10.1.1.0/24.
  • Page 44 [RouterB] interface gigabitethernet 2/0/1 [RouterB-GigabitEthernet2/0/1] ip address 10.1.1.2 255.255.255.0 # Create VRRP group 1, and set its virtual IP address to 10.1.1.111. [RouterB-GigabitEthernet2/0/1] vrrp vrid 1 virtual-ip 10.1.1.111 # Create VRRP group 2, and set its virtual IP address to 10.1.1.112. [RouterB-GigabitEthernet2/0/1] vrrp vrid 2 virtual-ip 10.1.1.112 # Assign Router B a higher priority than Router A in VRRP group 2, so Router B can become the master in the group.

  • Page 45: Vrrp Load Balancing Configuration Example

    Master IP : 10.1.1.1 Interface GigabitEthernet2/0/1 VRID Adver Timer : 100 Admin Status : Up State : Master Config Pri : 110 Running Pri : 110 Preempt Mode : Yes Delay Time Auth Type : None Virtual IP : 10.1.1.112 Virtual MAC : 0000-5e00-0102 Master IP...
  • Page 46 Figure 18 Network diagram Configuration procedure Configure Router A: # Configure VRRP to operate in load balancing mode. <RouterA> system-view [RouterA] vrrp mode load-balance # Create VRRP group 1, and set its virtual IP address to 10.1.1.1. [RouterA] interface gigabitethernet 2/0/1 [RouterA-GigabitEthernet2/0/1] ip address 10.1.1.2 24 [RouterA-GigabitEthernet2/0/1] vrrp vrid 1 virtual-ip 10.1.1.1 # Assign Router A the highest priority in VRRP group 1, so Router A can become the master.
  • Page 47 # Configure VRRP to operate in load balancing mode. <RouterB> system-view [RouterB] vrrp mode load-balance # Create VRRP group 1, and set its virtual IP address to 10.1.1.1. [RouterB] interface gigabitethernet 2/0/1 [RouterB-GigabitEthernet2/0/1] ip address 10.1.1.3 24 [RouterB-GigabitEthernet2/0/1] vrrp vrid 1 virtual-ip 10.1.1.1 # Assign Router B a higher priority than Router C in VRRP group 1, so Router B can become the master when Router A fails.
  • Page 48 Interface GigabitEthernet2/0/1 VRID Adver Timer : 100 Admin Status : Up State : Master Config Pri : 120 Running Pri : 120 Preempt Mode : Yes Delay Time Auth Type : None Virtual IP : 10.1.1.1 Member IP List : 10.1.1.2 (Local, Master) 10.1.1.3 (Backup) 10.1.1.4 (Backup) Forwarder Information: 3 Forwarders 1 Active...
  • Page 49 10.1.1.4 (Backup) Forwarder Information: 3 Forwarders 1 Active Config Weight : 255 Running Weight : 255 Forwarder 01 State : Listening Virtual MAC : 000f-e2ff-0011 (Learnt) Owner ID : 0000-5e01-1101 Priority : 127 Active : 10.1.1.2 Forwarder 02 State : Active Virtual MAC : 000f-e2ff-0012 (Owner) Owner ID...
  • Page 50 Active : 10.1.1.2 Forwarder 02 State : Listening Virtual MAC : 000f-e2ff-0012 (Learnt) Owner ID : 0000-5e01-1103 Priority : 127 Active : 10.1.1.3 Forwarder 03 State : Active Virtual MAC : 000f-e2ff-0013 (Owner) Owner ID : 0000-5e01-1105 Priority : 255 Active : local Forwarder Weight Track Information:...
  • Page 51 Forwarder 03 State : Initialize Virtual MAC : 000f-e2ff-0013 (Learnt) Owner ID : 0000-5e01-1105 Priority Active : 10.1.1.4 Forwarder Weight Track Information: Track Object State : Negative Weight Reduced : 250 # Display detailed information about VRRP group 1 on Router C. [RouterC-GigabitEthernet2/0/1] display vrrp verbose IPv4 Virtual Router Information: Running Mode...
  • Page 52 The output shows that when GigabitEthernet 2/0/2 on Router A fails, the weights of the VFs on Router A drop below the lower limit of failure. All VFs on Router A transit to the Initialized state and cannot forward traffic. The VF for MAC address 000f-e2ff-001 1 on Router C becomes the AVF to forward traffic. # When the timeout timer (about 1800 seconds) expires, display detailed information about VRRP group 1 on Router C.

  • Page 53: Ipv6 Vrrp Configuration Examples

    Auth Type : None Virtual IP : 10.1.1.1 Member IP List : 10.1.1.3 (Local, Master) 10.1.1.4 (Backup) Forwarder Information: 2 Forwarders 1 Active Config Weight : 255 Running Weight : 255 Forwarder 02 State : Active Virtual MAC : 000f-e2ff-0012 (Owner) Owner ID : 0000-5e01-1103 Priority...
  • Page 54 Figure 19 Network diagram Configuration procedure Configure Router A: # Specify an IPv6 address for Router A. <RouterA> system-view [RouterA] interface gigabitethernet 2/0/1 [RouterA-GigabitEthernet2/0/1] ipv6 address fe80::1 link-local [RouterA-GigabitEthernet2/0/1] ipv6 address 1::1 64 # Create VRRP group 1, and set its virtual IPv6 addresses to FE80::10 and 1::10. [RouterA-GigabitEthernet2/0/1] vrrp ipv6 vrid 1 virtual-ip fe80::10 link-local [RouterA-GigabitEthernet2/0/1] vrrp ipv6 vrid 1 virtual-ip 1::10 # Assign Router A a higher priority than Router B in VRRP group 1, so Router A can become the...
  • Page 55 [RouterB-GigabitEthernet2/0/1] undo ipv6 nd ra halt Verifying the configuration # Ping Host B from Host A. (Details not shown.) # Display detailed information about VRRP group 1 on Router A. [RouterA-GigabitEthernet2/0/1] display vrrp ipv6 verbose IPv6 Virtual Router Information: Running Mode : Standard Total number of virtual routers : 1 Interface GigabitEthernet2/0/1...

  • Page 56: Multiple Vrrp Groups Configuration Example

    Preempt Mode : Yes Delay Time Auth Type : None Virtual IP : FE80::10 1::10 Virtual MAC : 0000-5e00-0201 Master IP : FE80::2 The output shows that when Router A fails, Router B takes over to forward packets from Host A to Host B. # Recover the link between Host A and Router A, and display detailed information about VRRP group 1 on Router A.
  • Page 57 Figure 20 Network diagram Configuration procedure Configure Router A: # Specify an IPv6 address for Router A. <RouterA> system-view [RouterA] interface gigabitethernet 2/0/1 [RouterA-GigabitEthernet2/0/1] ipv6 address fe80::1 link-local [RouterA-GigabitEthernet2/0/1] ipv6 address 1::1 64 # Create VRRP group 1, and set its virtual IPv6 addresses to FE80::10 to 1::10. [RouterA-GigabitEthernet2/0/1] vrrp ipv6 vrid 1 virtual-ip fe80::10 link-local [RouterA-GigabitEthernet2/0/1] vrrp ipv6 vrid 1 virtual-ip 1::10 # Assign a higher priority to Router A than Router B in VRRP group 1, so Router A can become the...
  • Page 58 # Assign Router B a higher priority than Router A in VRRP group 2, so Router B can become the master in the group. [RouterB-GigabitEthernet2/0/1] vrrp ipv6 vrid 2 priority 110 Verifying the configuration # Display detailed information about the VRRP groups on Router A. [RouterA-GigabitEthernet2/0/1] display vrrp ipv6 verbose IPv6 Virtual Router Information: Running Mode...

  • Page 59: Vrrp Load Balancing Configuration Example

    VRID Adver Timer : 100 Admin Status : Up State : Master Config Pri : 110 Running Pri : 110 Preempt Mode : Yes Delay Time Auth Type : None Virtual IP : FE80::20 1::20 Virtual MAC : 0000-5e00-0202 Master IP : FE80::2 The output shows the following information: Router A is operating as the master in VRRP group 1 to forward Internet traffic for hosts that use the...
  • Page 60 Configuration procedure Configure Router A: # Configure VRRP to operate in load balancing mode. <RouterA> system-view [RouterA] vrrp ipv6 mode load-balance # Create VRRP group 1, and set its virtual IPv6 addresses to FE80::10 and 1::10. [RouterA] interface gigabitethernet 2/0/1 [RouterA-GigabitEthernet2/0/1] ipv6 address fe80::1 link-local [RouterA-GigabitEthernet2/0/1] ipv6 address 1::1 64 [RouterA-GigabitEthernet2/0/1] vrrp ipv6 vrid 1 virtual-ip fe80::10 link-local...
  • Page 61 [RouterB-GigabitEthernet2/0/1] quit # Create track entry 1 to monitor the upstream link status of GigabitEthernet 2/0/2. When the upstream link fails, the track entry transits to Negative. [RouterB] track 1 interface gigabitethernet 2/0/2 # Configure the VFs in VRRP group 1 to monitor track entry 1, and decrease their weights by 250 when the track entry transits to Negative.
  • Page 62 Member IP List : FE80::1 (Local, Master) FE80::2 (Backup) FE80::3 (Backup) Forwarder Information: 3 Forwarders 1 Active Config Weight : 255 Running Weight : 255 Forwarder 01 State : Active Virtual MAC : 000f-e2ff-4011 (Owner) Owner ID : 0000-5e01-1101 Priority : 255 Active : local...
  • Page 63 Virtual MAC : 000f-e2ff-4011 (Learnt) Owner ID : 0000-5e01-1101 Priority : 127 Active : FE80::1 Forwarder 02 State : Active Virtual MAC : 000f-e2ff-4012 (Owner) Owner ID : 0000-5e01-1103 Priority : 255 Active : local Forwarder 03 State : Listening Virtual MAC : 000f-e2ff-4013 (Learnt) Owner ID...
  • Page 64 Priority : 127 Active : FE80::2 Forwarder 03 State : Active Virtual MAC : 000f-e2ff-4013 (Owner) Owner ID : 0000-5e01-1105 Priority : 255 Active : local Forwarder Weight Track Information: Track Object State : Positive Weight Reduced : 250 The output shows that Router A is the master in VRRP group 1, and each of the three routers has one AVF and two LVFs.
  • Page 65 Priority Active : FE80::3 Forwarder Weight Track Information: Track Object State : Negative Weight Reduced : 250 # Display detailed information about VRRP group 1 on Router C. [RouterC-GigabitEthernet2/0/1] display vrrp ipv6 verbose IPv6 Virtual Router Information: Running Mode : Load Balance Total number of virtual routers : 1 Interface GigabitEthernet2/0/1 VRID...
  • Page 66 # When the timeout timer (about 1800 seconds) expires, display detailed information about VRRP group 1 on Router C. [RouterC-GigabitEthernet2/0/1] display vrrp ipv6 verbose IPv6 Virtual Router Information: Running Mode : Load Balance Total number of virtual routers : 1 Interface GigabitEthernet2/0/1 VRID Adver Timer...

  • Page 67: Troubleshooting Vrrp

    Virtual IP : FE80::10 1::10 Member IP List : FE80::2 (Local, Master) FE80::3 (Backup) Forwarder Information: 2 Forwarders 1 Active Config Weight : 255 Running Weight : 255 Forwarder 02 State : Active Virtual MAC : 000f-e2ff-4012 (Owner) Owner ID : 0000-5e01-1103 Priority : 255...

  • Page 68: Multiple Masters Appear In A Vrrp Group

    Take fault location and anti-attack measures to eliminate potential threats. If the problem persists, contact HP Support. Multiple masters appear in a VRRP group Symptom Multiple masters appear in a VRRP group. Analysis It is normal for a VRRP group to have multiple masters for a short time, and this situation requires no manual intervention.

  • Page 69: Configuring Bfd

    Configuring BFD Overview Bidirectional forwarding detection (BFD) provides a general-purpose, standard, medium- and protocol-independent fast failure detection mechanism. It can detect and monitor the connectivity of links in IP to detect communication failures quickly so that measures can be taken to ensure service continuity and enhance network availability.

  • Page 70: Supported Features

    Control packets—Encapsulated into UDP packets with port number 3784 for single-hop detection • or port number 4784 for multihop detection. Echo packet mode The local end of the link sends echo packets to establish BFD sessions and monitor link status. The peer end does not establish BFD sessions and only forwards the packets back to the originating end.

  • Page 71: Protocols And Standards

    MPLS. For more information, see MPLS Configuration Guide. • Track. For more information, see "Configuring Track." • IP fast reroute (FRR). IP FRR is supported by BGP, OSPF, RIP, IS-IS and static routing. For more • information, see Layer 3—IP Routing Configuration Guide. FRR.

  • Page 72: Configuring Control Packet Mode

    Step Command Remarks By default, no source IP address is configured for echo packets. The source IP address cannot be on • Configure the source IP address the same network segment as any of echo packets: local interface's IP address. bfd echo-source-ip ip-address Configure the source IP Otherwise, a large number of ICMP...
  • Page 73 Step Command Remarks By default, the BFD session is in Asynchronous mode. Enable the Demand BFD BFD version 0 does not support this bfd demand enable session mode. command. Configuring this command for BFD version 0 does not take effect. By default, the echo packet mode is disabled.

  • Page 74: Configuring A Bfd Template

    Step Command Remarks Set the minimum interval for bfd multi-hop min-receive-interval The default setting is 1000 receiving multihop BFD control value milliseconds. packets. Set the minimum interval for bfd multi-hop min-transmit-interval The default setting is 1000 transmitting multihop BFD value milliseconds.

  • Page 75: Displaying And Maintaining Bfd

    Displaying and maintaining BFD Execute the display command in any view and the reset command in user view. Task Command Display BFD session information. display bfd session [ discriminator value | verbose ] Clear BFD session statistics. reset bfd session statistics...

  • Page 76: Configuring Track

    Configuring Track Overview The Track module works between application modules and detection modules, as shown in Figure 22. It shields the differences between various detection modules from application modules. Collaboration is enabled when you associate the Track module with a detection module and an application module, and it operates as follows: The detection module probes specific objects such as interface status, link status, network reachability, and network performance, and informs the Track module of detection results.

  • Page 77: Collaboration Application Example

    If the detection result is not valid, the state of the track entry is NotReady. For example, the track • entry state is NotReady if its associated NQA operation does not exist. The following detection modules can be associated with the Track module: NQA.

  • Page 78: Associating The Track Module With A Detection Module

    Tasks at a glance (Required.) Associating the Track module with a detection module: • Associating Track with NQA • Associating Track with BFD • Associating Track with interface management (Required.) Associating the Track module with an application module: • Associating Track with VRRP •...

  • Page 79: Associating Track With Interface Management

    If the BFD detects that the link fails, it informs the Track module of the link failure. The Track module • sets the track entry to Negative state. • If the BFD detects that the link is operating correctly, the Track module sets the track entry to Positive state.

  • Page 80: Associating The Track Module With An Application Module

    Associating the Track module with an application module Associating Track with VRRP When VRRP is operating in standard mode or load balancing mode, associate the Track module with the VRRP group to implement the following actions: • Change the priority of a router according to the status of the uplink. If a fault occurs on the uplink of the router, the VRRP group is not aware of the uplink failure.

  • Page 81: Associating Track With Static Routing

    Step Command Remarks vrrp [ ipv6 ] vrid virtual-router-id By default, no track entry is track track-entry-number specified for a VRRP group. Associate a track entry with a { forwarder-switchover member-ip This command is supported when VRRP group. ip-address | priority reduced VRRP is operating in both standard [ priority-reduced ] | switchover | mode and load balancing mode.

  • Page 82: Associating Track With Pbr

    The static route is valid. When you associate Track with static routing, follow these restrictions and guidelines: You can associate a nonexistent track entry with a static route. The association takes effect only after • you create the track entry. In static routing-Track-NQA collaboration, you must configure the same VPN instance name for the •...
  • Page 83 After you associate a track entry with an apply clause, the detection module associated with the track entry sends Track the detection result of the availability of the tracked object. • The Positive state of the track entry indicates that the object is available, and the apply clause is valid.
  • Page 84 Step Command Remarks • Set the output interface, and associate it with a track entry: apply output-interface { interface-type interface-number [ track track-entry-number ] }&<1-n> • Set the next hop, and associate it with a track entry: apply next-hop [ vpn-instance vpn-instance-name | inbound-vpn ] { ip-address [ direct ] [ track track-entry-number ] [ weight...

  • Page 85: Displaying And Maintaining Track Entries

    Step Command Remarks • Set the output interface, and associate it with a track entry: apply output-interface { interface-type interface-number [ track track-entry-number ] }&<1-n> • Set the next hop, and associate it with a track entry: apply next-hop [ vpn-instance vpn-instance-name | inbound-vpn ] { ipv6-address [ direct ] [ track track-entry-number ] [ weight...
  • Page 86 Figure 23 Network diagram Virtual IP address: 10.1.1.10/24 GE2/0/1 GE2/0/2 10.1.1.1/24 10.1.2.1/24 GE2/0/1 10.1.2.2/24 Router A Router C 20.1.1.1/24 10.1.1.3/24 Internet Host B Host A GE2/0/2 GE2/0/1 10.1.3.1/24 10.1.1.2/24 GE2/0/1 10.1.3.2/24 Router B Router D Configuration procedure Configure the IP address of each interface, as shown in Figure 23.
  • Page 87 [RouterA-GigabitEthernet2/0/1] vrrp vrid 1 authentication-mode simple plain hello # Configure the master to send VRRP packets at an interval of 500 centiseconds. [RouterA-GigabitEthernet2/0/1] vrrp vrid 1 timer advertise 500 # Configure Router A to operate in preemptive mode and set the preemption delay to 5 seconds. [RouterA-GigabitEthernet2/0/1] vrrp vrid 1 preempt-mode delay 5 # Associate VRRP group 1 with track entry 1 and decrease the router priority by 30 when the state of track entry 1 changes to negative.
  • Page 88 VRID Adver Timer : 500 Admin Status : Up State : Backup Config Pri : 100 Running Pri : 100 Preempt Mode : Yes Delay Time Become Master : 2200ms left Auth Type : Simple : ****** Virtual IP : 10.1.1.10 Master IP : 10.1.1.1 The output shows that in VRRP group 1, Router A is the master and Router B is a backup.

  • Page 89: Configuring Bfd For A Vrrp Backup To Monitor The Master

    Configuring BFD for a VRRP backup to monitor the master Network requirements As shown in Figure Router A and Router B belong to VRRP group 1. The virtual IP address of VRRP group 1 is • 192.168.0.10. The default gateway of the hosts in the LAN is 192.168.0.10. •...
  • Page 90 # Specify 10.10.10.10 as the source address of BFD echo packets. <RouterB> system-view [RouterB] bfd echo-source-ip 10.10.10.10 # Create track entry 1, and associate it with the BFD session to verify the reachability of Router A. [RouterB] track 1 bfd echo interface gigabitethernet 2/0/1 remote ip 192.168.0.101 local ip 192.168.0.102 # Create VRRP group 1, and configure the virtual IP address 192.168.0.10 for the group.

  • Page 91: Configuring Bfd For The Vrrp Master To Monitor The Uplink

    State: Positive Duration: 0 days 0 hours 0 minutes 32 seconds Notification delay: Positive 0, Negative 0 (in seconds) Tracked object: BFD session mode: Echo Outgoing Interface: GigabitEthernet2/0/1 VPN instance name: - Remote IP: 192.168.0.101 Local IP: 192.168.0.102 The output shows that when the status of the track entry becomes Positive, Router A is the master, and Router B the backup.
  • Page 92 Router A and Router B belong to VRRP group 1. The virtual IP address of VRRP group 1 is • 192.168.0.10. The default gateway of the hosts in the LAN is 192.168.0.10. • Configure VRRP-Track-BFD collaboration to monitor the uplink on the master and meet the following requirements: When Router A operates correctly, hosts in the LAN access the Internet through Router A.
  • Page 93 # Associate VRRP group 1 with track entry 1 and decrease the router priority by 20 when the state of track entry 1 changes to negative. [RouterA-GigabitEthernet2/0/2] vrrp vrid 1 track 1 priority reduced 20 [RouterA-GigabitEthernet2/0/2] return On Router B, create VRRP group 1, and specify 192.168.0.10 as the virtual IP address of the group.
  • Page 94 Config Pri : 100 Running Pri : 100 Preempt Mode : Yes Delay Time Become Master : 2200ms left Auth Type : None Virtual IP : 192.168.0.10 Master IP : 192.168.0.101 The output shows that when the status of track entry 1 becomes Positive, Router A is the master and Router B the backup.

  • Page 95: Static Routing-Track-Nqa Collaboration Configuration Example

    Virtual IP : 192.168.0.10 Virtual MAC : 0000-5e00-0101 Master IP : 192.168.0.102 The output shows that when Router A detects that the uplink fails through BFD, it decreases its priority by 20. Router B then preempts as the master. Static routing-Track-NQA collaboration configuration example Network requirements As shown in Figure...
  • Page 96 [RouterA] ip route-static 30.1.1.0 24 10.1.1.2 track 1 # Configure a static route to 30.1.1.0/24 with the next hop 10.3.1.3 and the priority 80. [RouterA] ip route-static 30.1.1.0 24 10.3.1.3 preference 80 # Configure a static route to 10.2.1.4 with the next hop 10.1.1.2. [RouterA] ip route-static 10.2.1.4 24 10.1.1.2 # Create an NQA operation with the administrator admin and the operation tag test.
  • Page 97 [RouterD] ip route-static 10.1.1.1 24 10.2.1.2 # Create an NQA operation with the administrator admin and the operation tag test. [RouterD] nqa entry admin test # Configure the operation type as ICMP echo. [RouterD-nqa-admin-test] type icmp-echo # Specify 10.1.1.1 as the destination address of the operation. [RouterD-nqa-admin-test-icmp-echo] destination ip 10.1.1.1 # Specify 10.2.1.2 as the next hop of the operation.
  • Page 98 30.1.1.0/24 Static 60 10.1.1.2 GE2/0/1 127.0.0.0/8 Direct 0 127.0.0.1 InLoop0 127.0.0.1/32 Direct 0 127.0.0.1 InLoop0 The output shows that Router A forwards packets to 30.1.1.0/24 through Router B. # Remove the IP address of GigabitEthernet 2/0/1 on Router B. <RouterB> system-view [RouterB] interface gigabitethernet 2/0/1 [RouterB-GigabitEthernet2/0/1] undo ip address # Display information about the track entry on Router A.

  • Page 99: Static Routing-Track-Bfd Collaboration Configuration Example

    --- Ping statistics for 30.1.1.1 --- 5 packet(s) transmitted, 5 packet(s) received, 0.00% packet loss round-trip min/avg/max/std-dev = 1/1/2/1 ms # Verify that the hosts in 30.1.1.0/24 can communicate with the hosts in 20.1.1.0/24 when the master route fails. [RouterD] ping -a 30.1.1.1 20.1.1.1 Ping 20.1.1.1: 56 data bytes, press CTRL_C to break Reply from 20.1.1.1: bytes=56 Sequence=1 ttl=254 time=2 ms...
  • Page 100 Configuration procedure Configure the IP address of each interface, as shown in Figure 27. (Details not shown.) Configure Router A: # Configure a static route to 30.1.1.0/24 with the next hop 10.2.1.2 and the default priority 60. Associate this static route with track entry 1. <RouterA>...
  • Page 101 Remote IP: 10.2.1.2 Local IP: 10.2.1.1 The output shows that the status of the track entry is Positive, indicating that the next hop 10.2.1.2 is reachable. # Display the routing table of Router A. [RouterA] display ip routing-table Destinations : 9 Routes : 9 Destination/Mask Proto...

  • Page 102: Vrrp-Track-Interface Management Collaboration Configuration Example

    10.2.1.1/32 Direct 0 127.0.0.1 InLoop0 10.3.1.0/24 Direct 0 10.3.1.1 GE2/0/2 10.3.1.1/32 Direct 0 127.0.0.1 InLoop0 20.1.1.0/24 Direct 0 20.1.1.1 GE2/0/3 20.1.1.1/32 Direct 0 127.0.0.1 InLoop0 30.1.1.0/24 Static 80 10.3.1.3 GE2/0/2 127.0.0.0/8 Direct 0 127.0.0.1 InLoop0 127.0.0.1/32 Direct 0 127.0.0.1 InLoop0 The output shows that Router A forwards packets to 30.1.1.0/24 through Router C.
  • Page 103 Configure VRRP-Track-interface management collaboration to monitor the uplink interface on the master and meet the following requirements: When Router A operates correctly, Router A forwards packets from Host A to Host B. • When VRRP detects a fault on the uplink interface of Router A through the interface management •...
  • Page 104 Total number of virtual routers : 1 Interface GigabitEthernet2/0/1 VRID Adver Timer : 100 Admin Status : Up State : Master Config Pri : 110 Running Pri : 110 Preempt Mode : Yes Delay Time Auth Type : None Virtual IP : 10.1.1.10 Virtual MAC : 0000-5e00-0101...
  • Page 105 Track Object State : Negative Pri Reduced : 30 # Display detailed information about VRRP group 1 on Router B. [RouterB-GigabitEthernet2/0/1] display vrrp verbose IPv4 Virtual Router Information: Running Mode : Standard Total number of virtual routers : 1 Interface GigabitEthernet2/0/1 VRID Adver Timer : 100...

  • Page 106: Configuring Process Placement

    Configuring process placement Overview Process placement enables placing processes to specific CPUs (also called nodes) on the main processing units (MPUs) in your system for optimal distribution of CPU and memory resources. Process A process contains a set of codes and provides specific functionality. For example, an AAA process provides AAA functions.
  • Page 107 An active process running only on the global active MPU does not support placement optimization. If you perform placement optimization for the process, the system displays a configuration failure prompt. When such an active process fails, the system automatically restarts the process. The standby processes are used for active/standby switchover and ISSU.

  • Page 108: Command And Hardware Compatibility

    The system by default automatically determines the location for each active process, and there is no need to optimize process placement. If optimization is needed, work with HP engineers to avoid service interruption. Process placement applies only to MPUs. The configuration does not take effect on an interface •...

  • Page 109: Configuring Process Placement Policy

    Configuring process placement policy Configuring a location affinity Step Command Remarks Enter system view. system-view Settings in default • Enter default placement process view: placement process view placement program default take effect for all processes. Enter placement process view. • Settings in placement Enter placement process view: process view take effect...

  • Page 110: Configuring A Process Affinity

    Step Command Remarks affinity location-type { current | By default, no location type affinity Set the location type affinity. paired | primary } { attract strength is set. | repulse strength | default | none } Configuring a process affinity Step Command Remarks...

  • Page 111: Optimizing Process Placement

    Optimizing process placement Step Command Remarks Enter system view. system-view To keep the system stable, HP recommends not performing any Optimize process placement. placement reoptimize tasks that require process restart when you execute this command. Displaying process placement Execute display commands in any view.

  • Page 112: Support And Other Resources

    Related information Documents To find related documents, browse to the Manuals page of the HP Business Support Center website: http://www.hp.com/support/manuals For related documentation, navigate to the Networking section, and select a networking category. •...

  • Page 113: Conventions

    Conventions This section describes the conventions used in this documentation set. Command conventions Convention Description Boldface Bold text represents commands and keywords that you enter literally as shown. Italic Italic text represents arguments that you replace with actual values. Square brackets enclose syntax choices (keywords or arguments) that are optional. Braces enclose a set of required syntax choices separated by vertical bars, from which { x | y | ...
  • Page 114 Network topology icons Represents a generic network device, such as a router, switch, or firewall. Represents a routing-capable device, such as a router or Layer 3 switch. Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supports Layer 2 forwarding and other Layer 2 features.

  • Page 115: Index

    Index Numerics Track+BFD, Track+detection modules, Track+interface management, N process redundancy, Track+NQA, Track+policy-based routing, active virtual forwarder. Use Track+static routing, advertising Track+VRRP, VRRP advertisement interval, Track+VRRP group, affinity Track+VRRP VF, process placement location affinity, attribute process placement location-set, IPv4 VRRP packet attribute, process placement location-type, 102, IPv6 VRRP packet attribute, process placement negative (repulse)
  • Page 116 supported features, IPv6 VRRP, 29, template configuration, IPv6 VRRP load-balancing mode, Track BFD+VRRP backup master monitor, IPv6 VRRP multiple groups, Track BFD+VRRP master uplink monitor, IPv6 VRRP packet attribute, Track+BFD association, IPv6 VRRP router preemptive mode, VRRP tracking, IPv6 VRRP router priority, IPv6 VRRP router tracking function, high availability BFD supported, IPv6 VRRP single group,...
  • Page 117 interface backup configuration fast failure detection (BFD), (active/standby+Track module), fault detection interface backup configuration (load high availability BFD basic configuration, sharing), 6, high availability BFD configuration, IPv4 VRRP configuration, forwarding IPv4 VRRP load-balancing mode, bidirectional detection. Use IPv4 VRRP multiple groups configuration, VRRP virtual forwarder, IPv4 VRRP router preemptive mode, VRRP virtual forwarder tracking, 27,...
  • Page 118 IPv4 VRRP packet attribute, Track+application module association, IPv4 VRRP router preemptive mode, Track+BFD association, IPv4 VRRP router priority, Track+detection module association, IPv4 VRRP router tracking, Track+interface management association, IPv4 VRRP single group configuration, Track+NQA association, IPv4 VRRP version specification, Track+policy-based routing, IPv4 VRRP virtual IP address assignment, Track+static routing association, IPv6 VRRP configuration, 29,...
  • Page 119 configuration (load sharing), 6, IPv6 PIM configuration restrictions, high availability BFD supported, load sharing mode, 1, IPv6 VRRP Track association, configuration, 29, w/o traffic thresholds, control VLAN specification, interface management display, VRRP+Track+interface management group creation, collaboration, group disable, IP addressing load-balancing mode configuration, IPv4 VRRP virtual IP address assignment, maintain,...
  • Page 120 IPv6 VRRP control VLAN specification, high availability BFD control packet passive operating mode, IPv6 VRRP group creation, high availability BFD echo packet mode, 64, IPv6 VRRP group disable, high availability BFD multihop detection, IPv6 VRRP operating mode specification, high availability BFD single-hop detection, IPv6 VRRP router preemptive mode, interface backup active/standby, IPv6 VRRP router priority,...
  • Page 121 interface backup configuration Track BFD+VRRP backup master monitor, (active/standby), 4, Track BFD+VRRP master uplink monitor, interface backup configuration Track+application module association, (active/standby+Track module), Track+BFD association, interface backup configuration (load Track+detection module association, sharing), 6, Track+interface management association, interface backup w/o traffic thresholds, Track+NQA association, interface backup-Track association, Track+policy-based routing association,...
  • Page 122 packet configuring high availability BFD basic functions, high availability BFD control packet mode, configuring high availability BFD control packet high availability BFD echo packet mode, mode (multihop detection), IPv4 VRRP packet attribute, configuring high availability BFD control packet IPv6 VRRP packet attribute, mode (single-hop detection), configuring high availability BFD echo packet Track+application module collaboration,...
  • Page 123 configuring Track BFD+VRRP backup master policy configuration, monitor, policy location affinity configuration, configuring Track BFD+VRRP master uplink policy location-type affinity, monitor, policy process affinity, configuring VRRP virtual forwarder policy self affinity, tracking, 27, protocols and standards configuring VRRP+Track+interface high availability BFD, management collaboration, VRRP, configuring VRRP+Track+NQA...
  • Page 124 high availability BFD control packet VRRP configuration, asynchronous operating mode, high availability BFD control packet demand terminating operating mode, IPv4 VRRP control VLAN-ambiguous high availability BFD control packet mode, termination, high availability BFD control packet passive IPv4 VRRP control VLAN-unambiguous operating mode, termination, high availability BFD echo packet mode,...
  • Page 125 BFD+VRRP backup master monitor router redundancy protocol. Use VRRP configuration, VRRP virtual forwarder, BFD+VRRP master uplink monitor VRRP virtual forwarder tracking, configuration, VRRP virtual MAC address assignment, configuration, 72, VLAN detection module association, IPv4 VRRP control VLAN-ambiguous interface backup association, termination, IPv4 VRRP router tracking, IPv4 VRRP control VLAN-unambiguous...
  • Page 126 virtual forwarder creation, virtual forwarder weight/priority, virtual MAC address assignment, VRRP+Track+interface management collaboration, VRRP+Track+NQA collaboration, weight VRRP virtual forwarder,...

Table of Contents