background image

Operation Manual – Reliability 
H3C S9500 Series Routing Switches 

Chapter 1  VRRP Configuration

 

1-2

 

Ethernet

Master

Host 1

Host 2

Host 3

10.100.10.7

10.100.10.8

10.100.10.9

Virtual IP address10.100.10.1

Network

Backup

Virtual IP address10.100.10.1

Actual IP address10.100.10.2

Actual IP address10.100.10.3

 

Figure 1-2 

Network diagram for virtual router 

This virtual router has its own IP address: 10.100.10.1 (which can be the interface 

address of a switch within the virtual router). The switches within the virtual router have 

their own IP addresses (such as 10.100.10.2 for the Master switch and 10.100.10.3 for 

the Backup switch). The host on the LAN only knows the IP address of this virtual router 

10.100.10.1 (usually called as virtual IP address of virtual router), but not the specific IP 

addresses 10.100.10.2 of the Master switch and 10.100.10.3 of the Backup switch. 

They configure their own default routes as the IP address of this virtual router: 

10.100.10.1. Therefore, hosts within the network will communicate with the external 

network through this virtual router. If a Master switch in the virtual group breaks down, 

another Backup switch will function as the new Master switch to continue serving the 

host with routing to avoid interrupting the communication between the host and the 

external networks. 

1.2  Configuring VRRP 

The following sections describe the VRRP configuration tasks: 

z

 

Enabling/Disabling the Function to Ping the Virtual IP Address 

z

 

Enabling/Disabling the Check of TTL Value of VRRP Packet 

z

 

Setting Correspondence between Virtual IP Address and MAC Address 

z

 

Adding/Deleting a Virtual IP Address 

z

 

Configuring the Priority of Switches in the Virtual Router 

z

 

Configuring Preemption and Delay for a Switch within a Virtual Router 

z

 

Configuring Authentication Type and Authentication Key 

z

 

Configuring Virtual Router Timer 

z

 

Configuring Switch to Track a Specified Interface 

Summary of Contents for H3C S9500 Series

Page 1: ...ntication Type and Authentication Key 1 6 1 2 8 Configuring Virtual Router Timer 1 7 1 2 9 Configuring Switch to Track a Specified Interface 1 8 1 3 Displaying and debugging VRRP 1 9 1 4 VRRP Configuration Example 1 9 1 4 1 VRRP Single Virtual Router Example 1 9 1 4 2 VRRP Tracking Interface Example 1 11 1 4 3 Multiple Virtual Routers Example 1 12 1 5 Troubleshooting VRRP 1 13 Chapter 2 HA Configu...

Page 2: ...t route to the Layer 3 Switch implementing communication between the host and the external network If Switch is down all the hosts on this segment taking Switch as the next hop on the default route will be disconnected from the external network Ethernet Switch Host 1 Host 2 Host 3 10 100 10 7 10 100 10 8 10 100 10 9 10 100 10 1 Network Figure 1 1 Network diagram for LAN VRRP designed for LANs with...

Page 3: ... the Backup switch They configure their own default routes as the IP address of this virtual router 10 100 10 1 Therefore hosts within the network will communicate with the external network through this virtual router If a Master switch in the virtual group breaks down another Backup switch will function as the new Master switch to continue serving the host with routing to avoid interrupting the c...

Page 4: ...ng enable By default the function to ping the virtual IP address is disabled You should set the ping function before configuring the virtual router If a virtual router is already established on the switch it is not allowed to use the vrrp ping enable command and the undo vrrp ping enable command to modify the configuration any more 1 2 2 Enabling Disabling the Check of TTL Value of VRRP Packet Thi...

Page 5: ...pondence to the default value undo vrrp method By default the virtual IP address of the virtual router corresponds to the virtual MAC address You should set correspondence between the virtual IP address of the virtual router and the MAC address before configuring the virtual router Otherwise you cannot configure the correspondence If you set correspondence between the IP address of the virtual rou...

Page 6: ...etermined by its priority in VRRP The switch with the highest priority will become the Master Perform the following configuration in VLAN interface view Table 1 5 Configure the priority of switches in the virtual router Operation Command Configure the priority of switches in the virtual router vrrp vrid virtual router ID priority priority Clear the priority of switches in the virtual router undo v...

Page 7: ...virtual router ID preempt mode timer delay delay value Disable the preemption mode undo vrrp vrid virtual router ID preempt mode The delay ranges from 0 to 255 measured in seconds By default the preemption mode is preemption with a delay of 0 second Note If preemption mode is cancelled the delay time will automatically become 0 second 1 2 7 Configuring Authentication Type and Authentication Key VR...

Page 8: ...ong to the virtual router 1 2 8 Configuring Virtual Router Timer The Master switch advertises its normal operation state to the switches within the VRRP virtual router by sending them VRRP packets regularly at adver interval And the backup switch only receives VRRP packets If the Backup has not received any VRRP packet from the Master after a period of time specified by master down interval it wil...

Page 9: ...h including the interface will reduce automatically by the value specified by value reduced thus resulting in comparatively higher priorities of other switches within the virtual router one of which will turn to Master switch so as to track this interface Perform the following configuration in VLAN interface view Table 1 9 Configure switch to track a specified interface Operation Command Configure...

Page 10: ...ary Clear the statistics information about VRRP reset vrrp statistics vlan interface interface number virtual router ID Enable VRRP debugging debugging vrrp state packet error Disable VRRP debugging undo debugging vrrp state packet error You can enable VRRP debugging to check its running You may choose to enable VRRP packet debugging option as packet VRRP state debugging option as state and or VRR...

Page 11: ...tion III Configuration Procedure Configure switch A Configure VLAN 2 LSW A vlan 2 LSW A vlan2 interface vlan 2 LSW A vlan interface2 ip address 202 38 160 1 255 255 255 0 LSW A vlan interface2 quit Configure VRRP LSW A vrrp ping enable LSW A interface vlan 2 LSW_A vlan interface2 vrrp vrid 1 virtual ip 202 38 160 111 LSW_A vlan interface2 vrrp vrid 1 priority 110 LSW A vlan interface2 vrrp vrid 1 ...

Page 12: ...Interface Example I Networking requirements Even when switch A is still functioning it may want switch B to function as gateway when the Internet interface connected with it does not function properly This can be implemented by configuration of tracking interface In simple language the virtual router ID is set as 1 with additional configurations of authorization key and timer II Networking diagram...

Page 13: ... vrrp authentication mode md5 switch Set Master to send VRRP packets every 5 seconds LSW_B vlan interface2 vrrp vrid 1 timer advertise 5 Under normal conditions switch A functions as the gateway but when the interface vlan interface 3 of switch A is down its priority will be reduced by 30 lower than that of switch B so that switch B will preempt the Master for gateway services instead When vlan in...

Page 14: ...38 160 112 Configure switch B Configure VLAN2 LSW B vlan 2 LSW B vlan2 interface vlan 2 LSW B vlan interface2 ip address 202 38 160 2 255 255 255 0 Create virtual router 1 LSW_B vlan interface2 vrrp vrid 1 virtual ip 202 38 160 111 Create virtual router 2 LSW_B vlan interface2 vrrp vrid 2 virtual ip 202 38 160 112 Set the priority for the virtual router LSW_B vlan interface2 vrrp vrid 2 priority 1...

Page 15: ...ort time coexistence of many Master switches which is normal and needs no manual intervention Another is the long time coexistence of many Master switches which may be because switches in the virtual router cannot receive VRRP packets from each other or receive some illegal packets To solve such problems an attempt should be made to ping among the many Master switches and if such an attempt fails ...

Page 16: ...ve board can also take its role to ensure the normal operation and the system can recover as soon as possible S9500 series support hot swap of master and slave boards The hot swap of master boards will cause master slave switchover S9500 series support manual master slave switchover You can change the current board state manually by executing command The configuration file of slave is copied from ...

Page 17: ...ich the slave board is available and master in real time backup state the user can inform the slave board of a master slave switchover by using a command if he expects the slave board to operate in place of the master board After the switchover the slave board will control the system and the original master board will be forced to reset Perform the following configuration in user view Table 2 2 St...

Page 18: ...do it manually to backup the configuration file saved in the master board Perform the following configuration in user view Table 2 4 Synchronize the configuration file manually Operation Command Synchronize the configuration file manually slave update configuration This operation can backup the configuration file to the slave board only if a slave system is available The configuration file will be...

Page 19: ...tus of the master and slave boards any view display switchover state slot id Display the load mode of the master and slave boards system view display xbar Enable the debugging information output of the HA module user view debugging ha all event message state Disable the debugging information output of the HA module user view undo debugging ha all event message state 2 4 HA Configuration Example I ...

Reviews: