HP 5500 Ei 5500 Si Switch Series Configuration Guide
Have a look at the manual HP 5500 Ei 5500 Si Switch Series Configuration Guide online for free. It’s possible to download the document as PDF or print. UserManuals.tech offer 1114 HP manuals and user’s guides for free. Share the user manual or guide on Facebook, Twitter or Google+.
148 Configuration procedure To configure VRRP packet attributes: Step Command Remarks 1. Enter system view. system-view N/A 2. Set the DSCP value for VRRP packets. vrrp ipv6 dscp dscp-value Optional. 56 by default. 3. Enter the specified interface view. interface interface-type interface-number N/A 4. Configure the authentication mode and authentication key when the VRRP groups send or receive VRRP packets. vrrp ipv6 vrid virtual-router-id authentication-mode simple [ cipher ] key Optional. Authentication is not performed by default. 5. Configure the time interval for the master in the VRRP group to send VRRP advertisement. vrrp ipv6 vrid virtual-router-id timer advertise adver-interval Optional. 100 centiseconds by default. Displaying and maintaining VRRP for IPv6 Task Command Remarks Display VRRP group status. display vrrp ipv6 [ verbose ] [ interface interface-type interface-number [ vrid virtual-router-id ] ] [ | { begin | exclude | include } regular-expression ] Available in any view Display VRRP group statistics. display vrrp ipv6 statistics [ interface interface-type interface-number [ vrid virtual-router-id ] ] [ | { begin | exclude | include } regular-expression ] Available in any view Clear VRRP group statistics. reset vrrp ipv6 statistics [ interface interface-type interface-number [ vrid virtual-router-id ] ] Available in user view IPv4-based VRRP configuration examples Single VRRP group configuration example Network requirements • Host A wants to access Host B on the Internet, using 202.38.160.1 11/24 as its default gateway. • Switch A and Switch B belong to VRRP group 1 with the virtual IP address of 202.38.160.1 11/24. • When Switch A operates normally, packets sent from Host A to Host B are forwarded by Switch A; when Switch A fails, packets sent from Host A to Host B are forwarded by Switch B.
149 Figure 40 Network diagram Configuration procedure 1. Configure Switch A: # Configure VLAN 2. system-view [SwitchA] vlan 2 [SwitchA-vlan2] port gigabitethernet 1/0/5 [SwitchA-vlan2] quit [SwitchA] interface vlan-interface 2 [SwitchA-Vlan-interface2] ip address 202.38.160.1 255.255.255.0 # Create VRRP group 1 and set its virtual IP address to 202.38.160.111. [SwitchA-Vlan-interface2] vrrp vrid 1 virtual-ip 202.38.160.111 # Set the priority of Switch A in VRRP group 1 to 110, which is higher than that of Switch B (100), so that Switch A can become the master. [SwitchA-Vlan-interface2] vrrp vrid 1 priority 110 # Configure Switch A to operate in preemptive mode so that it can become the master whenever it works normally, and configure the preemption de lay as five seconds to avoid frequent status switchover. [SwitchA-Vlan-interface2] vrrp vrid 1 preempt-mode timer delay 5 2. Configure Switch B: # Configure VLAN 2. system-view [SwitchB] vlan 2 [SwitchB-Vlan2] port gigabitethernet 1/0/5 [SwitchB-vlan2] quit [SwitchB] interface vlan-interface 2 [SwitchB-Vlan-interface2] ip address 202.38.160.2 255.255.255.0 # Create VRRP group 1 and set its virtual IP address to 202.38.160.111. [SwitchB-Vlan-interface2] vrrp vrid 1 virtual-ip 202.38.160.111 # Set Switch B to operate in preemptive mode. The preemption delay is five seconds. [SwitchB-Vlan-interface2] vrrp vrid 1 preempt-mode timer delay 5
150 3. Verify the configuration: A f t e r t h e c o nf i g u r a t i o n , H o s t B c a n be p i ng e d s u c c e s s f u l l y o n H o s t A . T o v e r i f y yo u r c o n f i g u r a t i o n , use the display vrrp verbose command. # Display the detailed information about VRRP group 1 on Switch A. [SwitchA-Vlan-interface2] display vrrp verbose IPv4 Standby Information: Run Mode : Standard Run Method : Virtual MAC Total number of virtual routers : 1 Interface Vlan-interface2 VRID : 1 Adver Timer : 1 Admin Status : Up State : Master Config Pri : 110 Running Pri : 110 Preempt Mode : Yes Delay Time : 5 Auth Type : None Virtual IP : 202.38.160.111 Virtual MAC : 0000-5e00-0101 Master IP : 202.38.160.1 # Display the detailed information about VRRP group 1 on Switch B. [SwitchB-Vlan-interface2] display vrrp verbose IPv4 Standby Information: Run Mode : Standard Run Method : Virtual MAC Total number of virtual routers : 1 Interface Vlan-interface2 VRID : 1 Adver Timer : 1 Admin Status : Up State : Backup Config Pri : 100 Running Pri : 100 Preempt Mode : Yes Delay Time : 5 Become Master : 4200ms left Auth Type : None Virtual IP : 202.38.160.111 Master IP : 202.38.160.1 The output shows that in VRRP group 1 Switch A is the master, Switch B is the backup and packets sent from Host A to Host B are forwarded by Switch A. When Switch A fails, you can still ping through Host B on Host A. Use the display vrrp verbose command to view the detailed information about the VRRP group on Switch B. # When Switch A fails, the detailed information about VRRP group 1 on Switch B is displayed. [SwitchB-Vlan-interface2] display vrrp verbose IPv4 Standby Information: Run Mode : Standard Run Method : Virtual MAC Total number of virtual routers : 1 Interface Vlan-interface2 VRID : 1 Adver Timer : 1 Admin Status : Up State : Master Config Pri : 100 Running Pri : 100
151 Preempt Mode : Yes Delay Time : 5 Auth Type : None Virtual IP : 202.38.160.111 Virtual MAC : 0000-5e00-0101 Master IP : 202.38.160.2 The output shows that when Switch A fails, Switch B becomes the master, and packets sent from Host A to Host B are forwarded by Switch B. # After Switch A resumes normal operation, use the display vrrp verbose command to display the detailed information about VRRP group 1 on Switch A. [SwitchA-Vlan-interface2] display vrrp verbose IPv4 Standby Information: Run Mode : Standard Run Method : Virtual MAC Total number of virtual routers : 1 Interface Vlan-interface2 VRID : 1 Adver Timer : 1 Admin Status : Up State : Master Config Pri : 110 Running Pri : 110 Preempt Mode : Yes Delay Time : 5 Auth Type : None Virtual IP : 202.38.160.111 Virtual MAC : 0000-5e00-0101 Master IP : 202.38.160.1 The output shows that after Switch A resumes normal operation, it becomes the master, and packets sent from host A to host B are forwarded by Switch A. VRRP interface tracking configuration example Network requirements • Host A wants to access Host B on the Internet, using 202.38.160.1 11/24 as its default gateway. • Switch A and Switch B belong to VRRP group 1 with the virtual IP address of 202.38.160.1 11/24. • If Switch A operates normally, packets sent from Host A to Host B are forwarded by Switch A. If VLAN-interface 3 through which Switch A connects to the Internet is not available, packets sent from Host A to Host B are forwarded by Switch B. • To prevent attacks to the VRRP group from illegal users by using spoofed packets, configure the authentication mode as plain text to authenticate the VRRP packets in VRRP group 1, and specify the authentication key as hello.
152 Figure 41 Network diagram Configuration procedure 1. Configure Switch A: # Configure VLAN 2. system-view [SwitchA] vlan 2 [SwitchA-vlan2] port gigabitethernet 1/0/5 [SwitchA-vlan2] quit [SwitchA] interface vlan-interface 2 [SwitchA-Vlan-interface2] ip address 202.38.160.1 255.255.255.0 # Create a VRRP group 1 and set its virtual IP address to 202.38.160.111. [SwitchA-Vlan-interface2] vrrp vrid 1 virtual-ip 202.38.160.111 # Configure the priority of Switch A in the VRRP group to 110, which is higher than that of Switch B (100), so that Switch A can become the master. [SwitchA-Vlan-interface2] vrrp vrid 1 priority 110 # Configure the authen tication mode of the VRRP group as simple and authentication key as hello. [SwitchA-Vlan-interface2] vrrp vrid 1 authentication-mode simple hello # Set the interval for Master to send VRRP advertisement to four seconds. [SwitchA-Vlan-interface2] vrrp vrid 1 timer advertise 4 # Configure Switch A to operate in preemptive mode , so that it can become the master whenever it works normally; configure the preemption delay as five seconds to avoid frequent status switchover. [SwitchA-Vlan-interface2] vrrp vrid 1 preempt-mode timer delay 5 # Set VLAN interface 3 on Switch A to be tracked, and configure the amount by which the priority value decreases to be more than 10 (30 in this ex ample), so that when VLAN-interface 3 fails, the priority of Switch A in VRRP group 1 decreases to a value lower than 100 and thus Switch B can become the master. [SwitchA-Vlan-interface2] vrrp vrid 1 track interface vlan-interface 3 r\ educed 30 2. Configure Switch B: # Configure VLAN 2. system-view [SwitchB] vlan 2
153 [SwitchB-vlan2] port gigabitethernet 1/0/5 [SwitchB-vlan2] quit [SwitchB] interface vlan-interface 2 [SwitchB-Vlan-interface2] ip address 202.38.160.2 255.255.255.0 # Create a VRRP group 1 and set its virtual IP address to 202.38.160.111. [SwitchB-Vlan-interface2] vrrp vrid 1 virtual-ip 202.38.160.111 # Configure the authentication mode of the VRRP group as simple and authentication key as hello. [SwitchB-Vlan-interface2] vrrp vrid 1 authentication-mode simple hello # Set the interval for master to send VRRP advertisement to four seconds. [SwitchB-Vlan-interface2] vrrp vrid 1 timer advertise 4 # Configure Switch B to operate in preemptive mode, so that Switch B can become the master after the priority of Switch A decreases to a value lo wer than 100. Configure the preemption delay as five seconds to avoid freq uent status switchover. [SwitchB-Vlan-interface2] vrrp vrid 1 preempt-mode timer delay 5 3. Verify the configuration: A f t e r t h e c o nf i g u r a t i o n , H o s t B c a n be p i ng e d s u c c e s s f u l l y o n H o s t A . T o v e r i f y yo u r c o n f i g u r a t i o n , use the display vrrp verbose command. # Display the detailed information about VRRP group 1 on Switch A. [SwitchA-Vlan-interface2] display vrrp verbose IPv4 Standby Information: Run Mode : Standard Run Method : Virtual MAC Total number of virtual routers : 1 Interface Vlan-interface2 VRID : 1 Adver Timer : 4 Admin Status : Up State : Master Config Pri : 110 Running Pri : 110 Preempt Mode : Yes Delay Time : 5 Auth Type : Simple Key : ****** Virtual IP : 202.38.160.111 Virtual MAC : 0000-5e00-0101 Master IP : 202.38.160.1 VRRP Track Information: Track Interface: Vlan3 State : Up Pri Reduc\ ed : 30 # Display the detailed information about VRRP group 1 on Switch B. [SwitchB-Vlan-interface2] display vrrp verbose IPv4 Standby Information: Run Mode : Standard Run Method : Virtual MAC Total number of virtual routers : 1 Interface Vlan-interface2 VRID : 1 Adver Timer : 4 Admin Status : Up State : Backup Config Pri : 100 Running Pri : 100 Preempt Mode : Yes Delay Time : 5 Become Master : 2200ms left Auth Type : Simple Key : ******
154 Virtual IP : 202.38.160.111 Master IP : 202.38.160.1 The output shows that in VRRP group 1 Switch A is the master, Switch B is the backup and packets sent from Host A to Host B are forwarded by Switch A. If interface VLAN-interface 3 through which Switch A connects to the Internet is not available, you c a n s t i l l p i n g H o s t B s u c c e s s f u l l y o n H o s t A . T o v i e w t h e d e t a i l e d i n f o r m a t i o n a b o u t t h e V R R P g r o u p , use the display vrrp verbose command. # If VLAN-interface 3 on Switch A is not avail able, the detailed information about VRRP group 1 on Switch A is displayed. [SwitchA-Vlan-interface2] display vrrp verbose IPv4 Standby Information: Run Mode : Standard Run Method : Virtual MAC Total number of virtual routers : 1 Interface Vlan-interface2 VRID : 1 Adver Timer : 4 Admin Status : Up State : Backup Config Pri : 110 Running Pri : 80 Preempt Mode : Yes Delay Time : 5 Become Master : 2200ms left Auth Type : Simple Key : ****** Virtual IP : 202.38.160.111 Master IP : 202.38.160.2 VRRP Track Information: Track Interface: Vlan3 State : Down Pri Reduc\ ed : 30 # When VLAN-interface 3 on Switch A is not available, the detailed information about VRRP group 1 on Switch B is displayed. [SwitchB-Vlan-interface2] display vrrp verbose IPv4 Standby Information: Run Mode : Standard Run Method : Virtual MAC Total number of virtual routers : 1 Interface Vlan-interface2 VRID : 1 Adver Timer : 4 Admin Status : Up State : Master Config Pri : 100 Running Pri : 100 Preempt Mode : Yes Delay Time : 5 Auth Type : Simple Key : ****** Virtual IP : 202.38.160.111 Virtual MAC : 0000-5e00-0101 Master IP : 202.38.160.2 The output shows that when VLAN-interface 3 on Sw itch A is not available, the priority of Switch A is reduced to 80 and it becomes the backup. Switch B becomes the master and packets sent from Host A to Host B are forwarded by Switch B.
155 VRRP with multiple VLANs configuration example Network requirements • Hosts in VLAN 2 use 202.38.160.100/25 as their default gateway and hosts in VLAN 3 use 202.38.160.200/25 as their default gateway. • Switch A and Switch B belong to both VRRP group 1 and VRRP group 2. The virtual IP address of VRRP group 1 is 202.38.160.100/25, and that of VRRP group 2 is 202.38.160.200/25. • In VRRP group 1, Switch A has a higher priority than Switch B. In VRRP group 2, Switch B has a higher priority than Switch A. In this case, hosts in VLAN 2 and VLAN 3 can communicate with external networks through Switch A and Switch B, respectively, and when Switch A or Switch B fails, the hosts can use the other switch to communicate with external networks to avoid communication interruption. Figure 42 Network diagram Configuration procedure 1. Configure Switch A: # Configure VLAN 2. system-view [SwitchA] vlan 2 [SwitchA-vlan2] port gigabitethernet 1/0/5 [SwitchA-vlan2] quit [SwitchA] interface vlan-interface 2 [SwitchA-Vlan-interface2] ip address 202.38.160.1 255.255.255.128 # Create a VRRP group 1 and set its virtual IP address to 202.38.160.100. [SwitchA-Vlan-interface2] vrrp vrid 1 virtual-ip 202.38.160.100 # Configure the priority of Switch A in VRRP group 1 as 110, which is higher than that of Switch B (100), so that Switch A can become the master in VRRP group 1. [SwitchA-Vlan-interface2] vrrp vrid 1 priority 110 [SwitchA-Vlan-interface2] quit # Configure VLAN 3. [SwitchA] vlan 3 [SwitchA-vlan3] port gigabitethernet 1/0/6
156 [SwitchA-vlan3] quit [SwitchA] interface vlan-interface 3 [SwitchA-Vlan-interface3] ip address 202.38.160.130 255.255.255.128 # Create a VRRP group 2 and set its virtual IP address to 202.38.160.200. [SwitchA-Vlan-interface3] vrrp vrid 2 virtual-ip 202.38.160.200 2. Configure Switch B: # Configure VLAN 2. system-view [SwitchB] vlan 2 [SwitchB-vlan2] port gigabitethernet 1/0/5 [SwitchB-vlan2] quit [SwitchB] interface vlan-interface 2 [SwitchB-Vlan-interface2] ip address 202.38.160.2 255.255.255.128 # Create a VRRP group 1 and set its virtual IP address to 202.38.160.100. [SwitchB-Vlan-interface2] vrrp vrid 1 virtual-ip 202.38.160.100 [SwitchB-Vlan-interface2] quit # Configure VLAN 3. [SwitchB] vlan 3 [SwitchB-vlan3] port gigabitethernet 1/0/6 [SwitchB-vlan3] quit [SwitchB] interface vlan-interface 3 [SwitchB-Vlan-interface3] ip address 202.38.160.131 255.255.255.128 # Create a VRRP group 2 and set its virtual IP address to 202.38.160.200. [SwitchB-Vlan-interface3] vrrp vrid 2 virtual-ip 202.38.160.200 # Configure the priority of Switch B in VRRP group 2 to 110, which is higher than that of Switch A (100), so that Switch B can become the master in VRRP group 2. [SwitchB-Vlan-interface3] vrrp vrid 2 priority 110 3. Verify the configuration: To verify your configuration, use the display vrrp verbose command. # Display the detailed information about the VRRP group on Switch A. [SwitchA-Vlan-interface3] display vrrp verbose IPv4 Standby Information: Run Mode : Standard Run Method : Virtual MAC Total number of virtual routers : 2 Interface Vlan-interface2 VRID : 1 Adver Timer : 1 Admin Status : Up State : Master Config Pri : 110 Running Pri : 110 Preempt Mode : Yes Delay Time : 0 Auth Type : None Virtual IP : 202.38.160.100 Virtual MAC : 0000-5e00-0101 Master IP : 202.38.160.1 Interface Vlan-interface3 VRID : 2 Adver Timer : 1
157 Admin Status : Up State : Backup Config Pri : 100 Running Pri : 100 Preempt Mode : Yes Delay Time : 0 Become Master : 2200ms left Auth Type : None Virtual IP : 202.38.160.200 Master IP : 202.38.160.131 # Display the detailed information about the VRRP group on Switch B. [SwitchB-Vlan-interface3] display vrrp verbose IPv4 Standby Information: Run Mode : Standard Run Method : Virtual MAC Total number of virtual routers : 2 Interface Vlan-interface2 VRID : 1 Adver Timer : 1 Admin Status : Up State : Backup Config Pri : 100 Running Pri : 100 Preempt Mode : Yes Delay Time : 0 Become Master : 2200ms left Auth Type : None Virtual IP : 202.38.160.100 Master IP : 202.38.160.1 Interface Vlan-interface3 VRID : 2 Adver Timer : 1 Admin Status : Up State : Master Config Pri : 110 Running Pri : 110 Preempt Mode : Yes Delay Time : 0 Auth Type : None Virtual IP : 202.38.160.200 Virtual MAC : 0000-5e00-0102 Master IP : 202.38.160.131 The output shows that in VRRP group 1 Switch A is the master, Switch B is the backup and hosts with the default gateway of 202.38.160.100/25 access es the Internet through Switch A; in VRRP group 2 Switch A is the backup, Switch B is the master and hosts with the default gateway of 202.38.160.200/25 accesses the Internet through Switch B. VRRP load balancing mode configuration example Network requirements • Switch A, Switch B, and Switch C belong to VRRP group 1 with the virtual IP address of 10.1.1.1/24. • H o s t s o n n e t w o r k s e g m e n t 1 0 .1.1. 0 / 2 4 u s e 1 0 .1.1.1 / 2 4 a s t h e i r d e f a u l t g a t e w a y . U s e t h e V R R P group to make sure that when a gateway (Switch A, Switch B, or Switch C) fails, the hosts on the LAN can access external networks through another gateway. • VRRP group 1 is operating in load balancing mo de to make good use of network resources. • Configure a track entry on Switch A, Switch B, and Switch C to monitor their own VLAN-interface 3. When the interface on Switch A, Switch B, or Switch C fails, the weight of the corresponding switch decreases so that another switch with a higher weight can take over.