HP 5500 Ei 5500 Si Switch Series Configuration Guide
Have a look at the manual HP 5500 Ei 5500 Si Switch Series Configuration Guide online for free. It’s possible to download the document as PDF or print. UserManuals.tech offer 1114 HP manuals and user’s guides for free. Share the user manual or guide on Facebook, Twitter or Google+.
![Page 2206
143
Step Command Remarks
1. Enter system view.
system-view N/A
2. Enable the trap function for
VRRP. snmp-agent trap enable vrrp
[ authfailure | newmaster ] Optional.
Enabled by default.
For more information about the
snmp-agent trap enable vrrp command, see the snmp-agent trap enable
command in Network Management and Monitoring Command Reference .
Displaying and maintaining VRRP for IPv4
Task Command Remarks
Display VRRP group status. display
vrrp [ verbose ] [ interface...](http://img.usermanuals.tech/thumb/36/58909/w64_hp-5500-ei-5500-si-switch-series-configuration-guide-2205.png "Page 2206
143
Step Command Remarks
1. Enter system view.
system-view N/A
2. Enable the trap function for
VRRP. snmp-agent trap enable vrrp
[ authfailure | newmaster ] Optional.
Enabled by default.
For more information about the
snmp-agent trap enable vrrp command, see the snmp-agent trap enable
command in Network Management and Monitoring Command Reference .
Displaying and maintaining VRRP for IPv4
Task Command Remarks
Display VRRP group status. display
vrrp [ verbose ] [ interface...")
138
from hosts so that the hosts in the internal network can learn the mapping between the IP address and the
MAC address.
The following types of MAC addresses are available to be mapped to the virtual IP address of a VRRP
group:
• Virtual MAC to virtual IP mapping —By default, a virtual MAC address is automatically created for
a VRRP group when the VRRP group is created, and the virtual IP address of the VRRP group is
mapped to the virtual MAC address. When such a mapping is adopted, the hosts in the internal
network do not need to update the mapping between the IP address and MAC address when the
master changes.
• Real MAC to virtual IP mapping —In case that an IP address owner exists in a VRRP group, if the
virtual IP address is mapped to the virtual MAC address, two MAC addresses are mapped to one
IP address. To avoid such as problem, map the virtual IP address of the VRRP group to the real MAC
address of an interface to forward the packets from a host to the IP address owner.
Configuration guidelines
• When VRRP is operating in load balancing mode, a virtual IP address is always mapped to a virtual
MAC address regardless of which type of MAC addresses are specified to be mapped to virtual IP
addresses.
• Specify the type of the MAC addresses mapped to the virtual IP addresses before creating a VRRP
group. Otherwise, you cannot change the type of the MAC addresses mapped to virtual IP
addresses.
• If VRRP groups with the same ID are created on multiple interfaces of a device, and the VRRP
advertisements of these VRRP groups are to be sent through QinQ networks, HP recommends you
to map the real MAC addresses of the interfaces to the virtual IP addresses of these VRRP groups.
Otherwise, the VRRP advertisements of these VRRP groups cannot be sent successfully.
Configuration procedure
To specify the type of MAC addresses mapped to virtual IP addresses:
Step Command Remarks
1. Enter system view.
system-view N/A
2. Specify the type of MAC
addresses mapped to virtual
IP addresses. vrrp method
{ real-mac |
virtual-mac } Optional.
Virtual MAC address by default.
Creating a VRRP group and configuring virtual IP address
When creating a VRRP group on an interface, configure a virtual IP address for the VRRP group. If the
interface connects to mult
iple sub-networks, you can configure multiple virtual IP addresses for the VRRP
group to realize router backup on different sub-networks.
A VRRP group is automatically created when you specify the first virtual IP address for the VRRP group.
If you specify another virtual IP address for the VRRP group later, the virtual IP address is added to the
virtual IP address list of the VRRP group.
Do not create VRRP groups on the VLAN interface of a super VLAN. Otherwise, network performance
might be affected.
139 Configuration guidelines • When VRRP is operating in standard protocol mode, the virtual IP address of a VRRP group can be either an unused IP address on the segment where the VRRP group resides or the IP address of an interface on a router in the VRRP group. In the latt er case, the router is called the IP address owner. • When a router is the IP address owner in a VRRP group, HP recommends you not to use the IP address of the interface (virtual IP address of the VRRP group) to establish a neighbor relationship with the adjacent router, that is, not to use the network command to enable OSPF on the inter face. For more information about network command, see Layer 3—IP Routing Command Reference. • When VRRP is operating in load balancing mode, the virtual IP address of a VRRP group cannot be the same as the IP address of any interface in the VRRP group. In other words, in load balancing mode, the VRRP group does not have an IP address owner. • A VRRP group is removed after you remove all the virtual IP addresses configured for it. In addition, configurations on that VRRP group do not take effect any longer. • Removal of the VRRP group on the IP address ow ner causes IP address collision. To solve the collision, modify the IP address of the interface on the IP address owner first and then remove the VRRP group from the interface. • The virtual IP address of a VRRP group cannot be 0.0.0.0, 255.255.255.255, loopback addresses, non class A/B/C addresses or other illegal IP addresses such as 0.0.0.1. • A VRRP group operates properly only when the configured virtual IP address and the interface IP address belong to the same segment and are legal host addresses. If the configured virtual IP address and the interface IP address do not belong to the same network segment, or the configured IP address is the network address or network broadcast address of the network segment to which the interface IP address belongs, the state of the VRRP group is always initialize though you can perform the configuration successfully. In this case, VRRP does not take effect. Configuration prerequisites Before creating a VRRP group and configuring a virtual IP address on an interface, configure an IP address for the interface and make sure that it is in the same network segment as the virtual IP address to be configured. Configuration procedure To create a VRRP group and configure a virtual IP address: Step Command Remarks 1. Enter system view. system-view N/A 2. Enter the specified interface view. interface interface-type interface-number N/A 3. Create a VRRP group and configure a virtual IP address for the VRRP group. vrrp vrid virtual-router-id virtual-ip virtual-address VRRP group is not created by default.
140 Configuring router priority, preemptive mode and tracking function Configuration guidelines • The running priority of an IP address owner is always 255 and you do not need to configure it. An IP address owner always operates in preemptive mode. • If you configure an interface to be tracked or a trac k entry to be monitored on a router that is the IP address owner in a VRRP group, the configuration does not take effect. If the router is not the IP address owner in the VRRP group later, the configuration takes effect. • If the state of a tracked interface changes from down or removed to up, the priority of the router where the interface resides is automatically restored. • If the state of a track entry changes from negative or invalid to positive, the priority of the router where the track entry is configured is automatically restored. Configuration prerequisites Before you configure router priority, preemptive mode and tracking function, create a VRRP group on an interface and configure a virtual IP address for it. Configuration procedure By configuring router priority, preemptive mode, inte rface tracking, or a track entry, you can determine which router in the VRRP group serves as the master. To configure router priority, preemptive mode and the tracking function: Step Command Remarks 1. Enter system view. system-view N/A 2. Enter interface view. interface interface-type interface-number N/A 3. Configure router priority in the VRRP group. vrrp vrid virtual-router-id priority priority-value Optional. 100 by default. 4. Configure the router in the VRRP group to operate in preemptive mode and configure preemption delay. vrrp vrid virtual-router-id preempt-mode [ timer delay delay-value ] Optional. The router in the VRRP group operates in preemptive mode and the preemption delay is 0 seconds by default. 5. Configure the interface to be tracked. vrrp vrid virtual-router-id track interface interface-type interface-number [ reduced priority-reduced ] Optional. No interface is being tracked by default. 6. Configure VRRP to track a specified track entry. vrrp vrid virtual-router-id track track-entry-number [ reduced priority-reduced | switchover ] Optional. Not configured by default.
141 Configuring VF tracking Configuration guidelines • You can configure the VF tracking function when VRRP is operating in either standard protocol mode or load balancing mode. However, the VF trac king function is effective only when VRRP is operating in load balancing mode. • By default, the weight of a VF is 255, and its lower limit of failure is 10. • I f the weig ht of a VF owner i s hig her than or e qu al to the l ower l i mi t of fai l u re, the p riori t y of the V F owner is always 255 and does not change with the weight value. Therefore, in case of an uplink failure, another VF takes over the VF owners work and becomes the AVF only when the weight of the VF owner decreases by a properly specified value and becomes lower than the lower limit of failure. In other words, the weight of the VF owner decreases by more than 245. Configuration prerequisites Before you configure the VF tracking function, create a VRRP group and configure a virtual IP address for it. Configuration procedure VRRP operates in load balancing mode. Assume that you have configured the VF tracking function to monitor the track entry and specified the value by which the weight decreases. When the status of the track entry becomes negative, the weight values of all VFs on the router decrease by the specified value. When the status of the track entry becomes positive or invalid, the weight values of all VFs on the router restore their original values. If you configure the VF tracking function on an LVF to monitor its corresponding AVF on a specified router, the LVF can take over the AVF immediately when the status of the track entry becomes negative, to ensure uninterrupted network communications. To configure VF tracking: Step Command Remarks 1. Enter system view. system-view N/A 2. Enter the specified interface view. interface interface-type interface-number N/A 3. Configure VF tracking. Configure the VF tracking function to monitor a specified track entry and specify the value by which the weight decreases: vrrp vrid virtual-router-id weight track track-entry-number [ reduced weight-reduced ] Configure the VF tracking function to monitor an AVF on a specified router: vrrp vrid virtual-router-id track track-entry-number forwarder-switchover member-ip ip-address Use either approach. The VF tracking function is not configured by default.
142
Configuring VRRP packet attributes
Configuration guidelines
• You might configure different authentication modes and authentication keys for the VRRP groups on
an interface. However, the members of the same VRRP group must use the same authentication
mode and authentication key.
• Excessive traffic might cause a backup to trigger a ch ange of its status because the backup does not
receive any VRRP advertisements for a specified period of time. To solve this problem, prolong the
time interval to send VRRP advertisements.
• Configuring different intervals for sending VRRP advertisements on the routers in a VRRP group
might cause a backup to trigger a change of its status because the backup does not receive any
VRRP advertisements for a specified period of time. To solve this problem, configure the same
interval for sending VRRP advertisements on each router in the VRRP group.
Configuration prerequisites
Before you configure the relevant attributes of VRRP packets, create a VRRP group and configure a virtual
IP address for it.
Configuration procedure
To configure VRRP packet attributes:
Step Command Remarks
1. Enter system view.
system-view N/A
2. Set the Differentiated Services
Code Point (DSCP) value for
VRRP packets. vrrp dscp
dscp-value Optional.
48 by default.
3.
Enter the specified interface
view. interface
interface-type
interface-number N/A
4.
Configure the authentication
mode and authentication key
when the VRRP groups send
and receive VRRP packets. vrrp vrid
virtual-router-id
authentication-mode { md5 |
simple } [ cipher ] key Optional.
Authentication is not performed by
default.
5.
Configure the time interval for
the master in the VRRP group
to send VRRP advertisements. vrrp vrid
virtual-router-id timer
advertise adver-interval Optional.
1 second by default.
6.
Disable TTL check on VRRP
packets. vrrp un-check ttl
Optional.
Enabled by default.
You do not need to create a VRRP
group before executing this
command.
Enabling the trap function for VRRP
When the trap function is enabled for VRRP, VRRP generates traps with severity level
errors to report its
key events. The traps are sent to the information center of the device, where you can configure whether
to output the trap information and the output destinat ion. For how to configure the information center, see
Network Management and Monitoring Configuration Guide .
To enable the trap function for VRRP:
143
Step Command Remarks
1. Enter system view.
system-view N/A
2. Enable the trap function for
VRRP. snmp-agent trap enable vrrp
[ authfailure | newmaster ] Optional.
Enabled by default.
For more information about the
snmp-agent trap enable vrrp command, see the snmp-agent trap enable
command in Network Management and Monitoring Command Reference .
Displaying and maintaining VRRP for IPv4
Task Command Remarks
Display VRRP group status. display
vrrp [ verbose ] [ interface
interface-type interface-number
[ vrid virtual-router-id ] ] [ | { begin
| exclude | include }
regular-expression ] Available in any view
Display VRRP group statistics. display vrrp
statistics [ interface
interface-type interface-number
[ vrid virtual-router-id ] ] [ | { begin
| exclude | include }
regular-expression ] Available in any view
Clear VRRP group statistics.
reset vrrp statistics
[ interface
interface-type interface-number
[ vrid virtual-router-id ] ] Available in user view
Configuring VRRP for IPv6
VRRP for IPv6 configuration task list
Task Remarks
Configuring a VRRP operation mode
Optional
Specifying the type of MAC addresses mapped to virtual
IPv6 addresses Optional
When VRRP is operating in load balancing
mode, this configuration is not effective.
Creating a VRRP group and configuring a virtual IPv6
address
Required
Configuring router priority,
preemptive mode and tracking
function Optional
Configuring VF tracking Optional
The VF tracking function is effective only when
VRRP is operating in load balancing mode.
Configuring VRRP packet attributes
Optional
144
Specifying the type of MAC addresses mapped to virtual IPv6
addresses
After you specify the type of MAC addresses mapped to the virtual IPv6 address of VRRP groups and
create a VRRP group, the master in the VRRP group uses the specified type of MAC address as the source
MAC address for sending packets and uses the specified type of MAC address to answer ND requests
from hosts so that the hosts in the internal network can learn the mapping between the IPv6 address and
the MAC address.
The following types of MAC addresses are available to be mapped to the virtual IPv6 address of a VRRP
group:
• Virtual MAC to virtual IP mapping —By default, a virtual MAC address is automatically created for
a VRRP group when the VRRP group is created, and the virtual IPv6 address of the VRRP group is
mapped to the virtual MAC address. When such a mapping is adopted, the hosts in the internal
network do not need to update the mapping be tween the IPv6 address and the MAC address when
the master changes.
• Real MAC to virtual IP mapping —In case that an IP address owner exists in a VRRP group, if the
virtual IPv6 address is mapped to the virtual MAC address, two MAC addresses are mapped to one
IPv6 address. To avoid such as problem, map the virtual IPv6 address of the VRRP group to the real
MAC address of an interface to forward the packets from a host to the IP address owner.
When VRRP is operating in load balancing mode, a virtual IPv6 address is always mapped to a virtual
MAC address regardless of which type of MAC addresses are specified to be mapped to virtual IPv6
addresses.
Specify the type of the MAC addresses mapped to the virtual IPv6 addresses before creating a VRRP
group. Otherwise, you cannot change the type of the MAC addresses mapped to virtual IPv6 addresses.
To specify the type of MAC addresses mapped to virtual IPv6 addresses:
Step Command Remarks
1. Enter system view. system-view N/A
2. Specify the type of MAC
addresses mapped to virtual
IPv6 addresses. vrrp ipv6 method
{ real-mac |
virtual-mac } Optional.
Virtual MAC address by default.
Creating a VRRP group and configuring a virtual IPv6 address
When creating a VRRP group, configure a virtual IPv6 address for the VRRP group. You can configure
multiple virtual IPv6 addresses for a VRRP group.
A VRRP group is automatically created when you specify the first virtual IPv6 address for the VRRP group.
If you specify another virtual IPv6 address for the VRRP group later, the virtual IPv6 address is added to
the virtual IPv6 address list of the VRRP group.
Do not create VRRP groups on the VLAN interface of a super VLAN. Otherwise, network performance
might be affected.
Configuration guidelines
•
When a router is the IP address owner in a VRRP group, HP recommends you not to use the IPv6
address of the interface (virtual IPv6 address of the VRRP group) to establish an OSPFv3 neighbor
relationship with the adjacent router, that is, not to use the ospfv3 area command to enable
145 OSPFv3 on the interface. For more information about ospfv3 area command, see Layer 3—IP Routing Command Reference. • When VRRP is operating in load balancing mode, the virtual IPv6 address of a VRRP group cannot be the same as the IPv6 address of any interface in the VRRP group. In other words, a VRRP group does not have an IP address owner in load balancing mode. • A VRRP group is removed after you remove all the virtual IPv6 addresses in it. In addition, configurations on that VRRP group do not take effect any longer. • Removal of the VRRP group on the IP address owner causes IP address collision. To resolve the collision, change the IPv6 address of the interface on the IP address owner first and then remove the VRRP group from the interface. Configuration prerequisites Before creating a VRRP group and configuring a virtual IPv6 address on an interface, configure an IPv6 address for the interface and make sure that it is in the same network segment as the virtual IPv6 address to be configured. Configuration procedure To create a VRRP group and configure its virtual IPv6 address: Step Command Remarks 1. Enter system view. system-view N/A 2. Enter the specified interface view. interface interface-type interface-number N/A 3. Create a VRRP group and configure its virtual IPv6 address, which is a link local address. vrrp ipv6 vrid virtual-router-id virtual-ip virtual-address link-local No VRRP group is created by default. The first virtual IPv6 address of the VRRP group must be a link local address. Only one link local address is allowed in a VRRP group, and must be removed the last. 4. Configure the VRRP group with a virtual IPv6 address, which is a global unicast address. vrrp ipv6 vrid virtual-router-id virtual-ip virtual-address Optional. By default, no global unicast address is configured as the virtual IPv6 address of a VRRP group. Configuring router priority, preemptive mode and tracking function Configuration guidelines • The running priority of an IP address owner is always 255 and you do not need to configure it. An IP address owner always operates in preemptive mode. • Interface tracking is not configurable on an IP address owner. • If you configure an interface to be tracked or a trac k entry to be monitored on a router that is the IP address owner in a VRRP group, the configuration does not take effect. If the router is not the IP address owner in the VRRP group later, the configuration takes effect.
146 • If the state of a tracked interface changes from down or removed to up, the priority of the router that owns the interface is automatically restored. • If the state of a track entry changes from negative or invalid to positive, the priority of the router where the track entry is configured is automatically restored. Configuration prerequisites Before you configure router priority, preemptive mode and tracking function, create a VRRP group and configure its virtual IPv6 address. Configuration procedure By configuring router priority, preemptive mode, in terface tracking, or a track entry, determine which router in the VRRP group serves as the master. To configure router priority, preemptive mode and interface tracking: Step Command Remarks 1. Enter system view. system-view N/A 2. Enter the specified interface view. interface interface-type interface-number N/A 3. Configure the priority of the router in the VRRP group. vrrp ipv6 vrid virtual-router-id priority priority-value Optional. 100 by default. 4. Configure the router in the VRRP group to operate in preemptive mode and configure preemption delay of the VRRP group. vrrp ipv6 vrid virtual-router-id preempt-mode [ timer delay delay-value ] Optional. The router in the VRRP group operates in preemptive mode and the preemption delay is zero seconds by default. 5. Configure the interface to be tracked. vrrp ipv6 vrid virtual-router-id track interface interface-type interface-number [ reduced priority-reduced ] Optional. No interface is being tracked by default. 6. Configure VRRP to track a specified track entry. vrrp ipv6 vrid virtual-router-id track track-entry-number [ reduced priority-reduced | switchover ] Optional. Not configured by default. Configuring VF tracking Configuration guidelines • You can configure the VF tracking function when VRRP is operating in either standard protocol mode or load balancing mode. However, the VF trac king function is effective only when VRRP is operating in load balancing mode. • By default, the weight of a VF is 255, and its lower limit of failure is 10. • I f the weig ht of a VF owner i s hig her than or e qu al to the l ower l i mi t of fai l u re, the p riori t y of the V F owner is always 255 and does not change with the weight value. Therefore, if an uplink fails, another VF takes over the VF owners work and becomes the AVF only when the weight of the VF owner decreases by a properly specified value and becomes lower than the lower limit of failure. In other words, the weight of the VF owner decreases by more than 245.
147 Configuration prerequisites Before you configure the VF tracking function, create a VRRP group and configure a virtual IPv6 address for it. Configuration procedure VRRP operates in load balancing mode. Assume that you have configured the VF tracking function to monitor a track entry and specified the value by which the weight decreases. When the status of the track entry becomes negative, the weight values of all VFs on the router decrease by the specified value. When the status of the track entry becomes positive or invalid, the weight values of all VFs on the router restore their original values. If you configure the VF tracking function on an LVF to monitor its corresponding AVF on a specified router, the LVF can take over the AVF immediately when the status of the track entry becomes negative, to ensure uninterrupted network communications. To configure VF tracking: Step Command Remarks 1. Enter system view. system-view N/A 2. Enter the specified interface view. interface interface-type interface-number N/A 3. Configure VF tracking. Configure the VF tracking function to monitor a specified track entry an d specify the value by which the weight decreases: vrrp ipv6 vrid virtual-router-id weight track track-entry-number [ reduced weight-reduced ] Configure the VF tracking function to monitor an AVF on a specified router: vrrp ipv6 vrid virtual-router-id track track-entry-number forwarder-switchover member-ip ipv6-address Use either approach. The VF tracking function is not configured by default. Configuring VRRP packet attributes Configuration guidelines • You might configure different authentication modes and authentication keys for the VRRP groups on an interface. However, the members of the same VRRP group must use the same authentication mode and authentication key. • Excessive traffic might cause a backup to trigger a ch ange of its status because the backup does not receive any VRRP advertisements for a specified period of time. To solve this problem, prolong the time interval to send VRRP advertisements. • Configuring different intervals for sending VRRP advertisements on the routers in a VRRP group might cause a backup to trigger a change of its status because the backup does not receive any VRRP advertisements for a specified period of time. To solve this problem, configure the same interval for sending VRRP advertisements on each router in the VRRP group. Configuration prerequisites Before you configure the relevant attributes of VRRP packets, create a VRRP group and configure a virtual IPv6 address.