background image

Operation Manual – Reliability 
H3C S9500 Series Routing Switches 

Chapter 1  VRRP Configuration

 

1-7

 

to authenticate the VRRP packets. In this case an authentication key not exceeding 8 

characters should be configured. 

Those packets failing to pass the authentication will be discarded and a trap packet will 

be sent to the network management system. 

Perform the following configuration in VLAN interface view. 

Table 1-7 

Configure authentication type and authentication key 

Operation 

Command 

Configure authentication type and 
authentication key

 

vrrp authentication-mode 
authentication

-

type

 

authentication

-

key

 

Remove authentication type and 
authentication key 

undo vrrp authentication-mode 

 

The authentication key is case sensitive. 

 

 

  Note: 

The same authentication type and authentication key should be configured for all VLAN 

interfaces that belong to the virtual router. 

 

1.2.8  Configuring Virtual Router Timer 

The Master switch advertises its normal operation state to the switches within the 

VRRP virtual router by sending them VRRP packets regularly (at 

adver

-

interval).

 And 

the backup switch only receives VRRP packets. If the Backup has not received any 

VRRP packet from the Master after a period of time (specified by 

master

-

down

-

interval

), 

it will consider the Master as down, and then take its place and become the Master. 

You can use the following command to set a timer and adjust the interval, 

adver

-

interval

between Master transmits VRRP packets. The 

master

-

down

-

interval

 of the Backup 

switch is three times that of the 

adver

-

interval

. The excessive network traffic or the 

differences between different switch timers will result in 

master

-

down

-

interval

 timing out 

and state changing abnormally. Such problems can be solved through prolonging the 

adver

-

interval

 and setting delay time. 

adver

-

interval

 is measured in seconds. 

Perform the following configuration in VLAN interface view. 

Summary of Contents for H3C S9500 Series

Page 1: ...ntication Type and Authentication Key 1 6 1 2 8 Configuring Virtual Router Timer 1 7 1 2 9 Configuring Switch to Track a Specified Interface 1 8 1 3 Displaying and debugging VRRP 1 9 1 4 VRRP Configuration Example 1 9 1 4 1 VRRP Single Virtual Router Example 1 9 1 4 2 VRRP Tracking Interface Example 1 11 1 4 3 Multiple Virtual Routers Example 1 12 1 5 Troubleshooting VRRP 1 13 Chapter 2 HA Configu...

Page 2: ...t route to the Layer 3 Switch implementing communication between the host and the external network If Switch is down all the hosts on this segment taking Switch as the next hop on the default route will be disconnected from the external network Ethernet Switch Host 1 Host 2 Host 3 10 100 10 7 10 100 10 8 10 100 10 9 10 100 10 1 Network Figure 1 1 Network diagram for LAN VRRP designed for LANs with...

Page 3: ... the Backup switch They configure their own default routes as the IP address of this virtual router 10 100 10 1 Therefore hosts within the network will communicate with the external network through this virtual router If a Master switch in the virtual group breaks down another Backup switch will function as the new Master switch to continue serving the host with routing to avoid interrupting the c...

Page 4: ...ng enable By default the function to ping the virtual IP address is disabled You should set the ping function before configuring the virtual router If a virtual router is already established on the switch it is not allowed to use the vrrp ping enable command and the undo vrrp ping enable command to modify the configuration any more 1 2 2 Enabling Disabling the Check of TTL Value of VRRP Packet Thi...

Page 5: ...pondence to the default value undo vrrp method By default the virtual IP address of the virtual router corresponds to the virtual MAC address You should set correspondence between the virtual IP address of the virtual router and the MAC address before configuring the virtual router Otherwise you cannot configure the correspondence If you set correspondence between the IP address of the virtual rou...

Page 6: ...etermined by its priority in VRRP The switch with the highest priority will become the Master Perform the following configuration in VLAN interface view Table 1 5 Configure the priority of switches in the virtual router Operation Command Configure the priority of switches in the virtual router vrrp vrid virtual router ID priority priority Clear the priority of switches in the virtual router undo v...

Page 7: ...virtual router ID preempt mode timer delay delay value Disable the preemption mode undo vrrp vrid virtual router ID preempt mode The delay ranges from 0 to 255 measured in seconds By default the preemption mode is preemption with a delay of 0 second Note If preemption mode is cancelled the delay time will automatically become 0 second 1 2 7 Configuring Authentication Type and Authentication Key VR...

Page 8: ...ong to the virtual router 1 2 8 Configuring Virtual Router Timer The Master switch advertises its normal operation state to the switches within the VRRP virtual router by sending them VRRP packets regularly at adver interval And the backup switch only receives VRRP packets If the Backup has not received any VRRP packet from the Master after a period of time specified by master down interval it wil...

Page 9: ...h including the interface will reduce automatically by the value specified by value reduced thus resulting in comparatively higher priorities of other switches within the virtual router one of which will turn to Master switch so as to track this interface Perform the following configuration in VLAN interface view Table 1 9 Configure switch to track a specified interface Operation Command Configure...

Page 10: ...ary Clear the statistics information about VRRP reset vrrp statistics vlan interface interface number virtual router ID Enable VRRP debugging debugging vrrp state packet error Disable VRRP debugging undo debugging vrrp state packet error You can enable VRRP debugging to check its running You may choose to enable VRRP packet debugging option as packet VRRP state debugging option as state and or VRR...

Page 11: ...tion III Configuration Procedure Configure switch A Configure VLAN 2 LSW A vlan 2 LSW A vlan2 interface vlan 2 LSW A vlan interface2 ip address 202 38 160 1 255 255 255 0 LSW A vlan interface2 quit Configure VRRP LSW A vrrp ping enable LSW A interface vlan 2 LSW_A vlan interface2 vrrp vrid 1 virtual ip 202 38 160 111 LSW_A vlan interface2 vrrp vrid 1 priority 110 LSW A vlan interface2 vrrp vrid 1 ...

Page 12: ...Interface Example I Networking requirements Even when switch A is still functioning it may want switch B to function as gateway when the Internet interface connected with it does not function properly This can be implemented by configuration of tracking interface In simple language the virtual router ID is set as 1 with additional configurations of authorization key and timer II Networking diagram...

Page 13: ... vrrp authentication mode md5 switch Set Master to send VRRP packets every 5 seconds LSW_B vlan interface2 vrrp vrid 1 timer advertise 5 Under normal conditions switch A functions as the gateway but when the interface vlan interface 3 of switch A is down its priority will be reduced by 30 lower than that of switch B so that switch B will preempt the Master for gateway services instead When vlan in...

Page 14: ...38 160 112 Configure switch B Configure VLAN2 LSW B vlan 2 LSW B vlan2 interface vlan 2 LSW B vlan interface2 ip address 202 38 160 2 255 255 255 0 Create virtual router 1 LSW_B vlan interface2 vrrp vrid 1 virtual ip 202 38 160 111 Create virtual router 2 LSW_B vlan interface2 vrrp vrid 2 virtual ip 202 38 160 112 Set the priority for the virtual router LSW_B vlan interface2 vrrp vrid 2 priority 1...

Page 15: ...ort time coexistence of many Master switches which is normal and needs no manual intervention Another is the long time coexistence of many Master switches which may be because switches in the virtual router cannot receive VRRP packets from each other or receive some illegal packets To solve such problems an attempt should be made to ping among the many Master switches and if such an attempt fails ...

Page 16: ...ve board can also take its role to ensure the normal operation and the system can recover as soon as possible S9500 series support hot swap of master and slave boards The hot swap of master boards will cause master slave switchover S9500 series support manual master slave switchover You can change the current board state manually by executing command The configuration file of slave is copied from ...

Page 17: ...ich the slave board is available and master in real time backup state the user can inform the slave board of a master slave switchover by using a command if he expects the slave board to operate in place of the master board After the switchover the slave board will control the system and the original master board will be forced to reset Perform the following configuration in user view Table 2 2 St...

Page 18: ...do it manually to backup the configuration file saved in the master board Perform the following configuration in user view Table 2 4 Synchronize the configuration file manually Operation Command Synchronize the configuration file manually slave update configuration This operation can backup the configuration file to the slave board only if a slave system is available The configuration file will be...

Page 19: ...tus of the master and slave boards any view display switchover state slot id Display the load mode of the master and slave boards system view display xbar Enable the debugging information output of the HA module user view debugging ha all event message state Disable the debugging information output of the HA module user view undo debugging ha all event message state 2 4 HA Configuration Example I ...

Reviews: