
Load Balancing Mode
In load balancing mode, two or more backup groups are created. Multiple backup groups
undertake services at the same time.
In load balancing mode, the VRRP backup groups have the following features:
l
On the AR2200-S, the router can join several VRRP backup groups and has different
priorities in different backup groups. Multiple virtual routers carry out load balancing.
l
Each backup group consists of a master router and several backup routers.
l
The master router of each backup group can be different.
Tracking the Interface Status
In the AR2200-S, the interfaces can be tracked. When the interface status changes, the priority
of the router is automatically adjusted. The priorities of routers in the backup group change and
a new master router is elected.
Enable/Disable the Ping Function to the Virtual IP Address
To ping through virtual IP addresses that are used in the VRRP backup group, you can monitor
the operating status of the virtual routers but the VRRP backup group may suffer the ICMP
attack. In the AR2200-S, you can run a command to enable the function to ping the virtual IP
address.
VRRP Security Functions
For different security levels of networks, you can set different authentication modes and
authentication keys in the header of VRRP packets.
In a secure network, you can adopt the default configuration. That is, the router does not
authenticate the VRRP packets to be sent and received. The router considers all the received
packets as real and valid VRRP packets. In this case, no authentication key is required.
VRRP provides simple text authentication and MD5 authentication for networks that are
vulnerable to attacks. In simple text authentication mode, a string of 1 to 8 characters can be
configured as the authentication key. In MD5 authentication mode, a string of 1 to 8 characters
in plain text or a string of 24 characters in encrypted text can be configured as the authentication
key.
2.3 Configuring a VRRP Backup Group
By configuring a VRRP backup group in master/backup mode or load balancing mode, you can
implement communication between hosts inside a LAN and on external networks.
2.3.1 Establishing the Configuration Task
Before configuring a VRRP backup group, familiarize yourself with the applicable environment,
complete the pre-configuration tasks, and obtain the data required for the configuration. This
will help you complete the configuration task quickly and accurately.
Huawei AR2200-S Series Enterprise Routers
Configuration Guide - Reliability
2 VRRP Configuration
Issue 01 (2012-01-06)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
69