HP 5500 Ei 5500 Si Switch Series Configuration Guide
Have a look at the manual HP 5500 Ei 5500 Si Switch Series Configuration Guide online for free. It’s possible to download the document as PDF or print. UserManuals.tech offer 1114 HP manuals and user’s guides for free. Share the user manual or guide on Facebook, Twitter or Google+.
168 Figure 44 Network diagram Configuration procedure 1. Configure Switch A: # Configure VLAN 2. system-view [SwitchA] ipv6 [SwitchA] vlan 2 [SwitchA-vlan2] port gigabitethernet 1/0/5 [SwitchA-vlan2] quit [SwitchA] interface vlan-interface 2 [SwitchA-Vlan-interface2] ipv6 address fe80::1 link-local [SwitchA-Vlan-interface2] ipv6 address 1::1 64 # Create a VRRP group 1 and set its virt ual IPv6 addresses to FE80::10 and 1::10. [SwitchA-Vlan-interface2] vrrp ipv6 vrid 1 virtual-ip fe80::10 link-loca\ l [SwitchA-Vlan-interface2] vrrp ipv6 vrid 1 virtual-ip 1::10 # Set the priority of Switch A in VRRP group 1 to 110, which is higher than that of Switch B (100), so that Switch A can become the master. [SwitchA-Vlan-interface2] vrrp ipv6 vrid 1 priority 110 # Configure Switch A to operate in preemptive mode so that it can become the master whenever it works normally, and configure the preemption de lay as five seconds to avoid frequent status switchover. [SwitchA-Vlan-interface2] vrrp ipv6 vrid 1 preempt-mode timer delay 5 # Enable Switch A to send RA messages, so that Host A can learn the default gateway address. [SwitchA-Vlan-interface2] undo ipv6 nd ra halt 2. Configure Switch B: # Configure VLAN 2. system-view [SwitchB] ipv6 [SwitchB] vlan 2 [SwitchB-vlan2] port gigabitethernet 1/0/5 [SwitchB-vlan2] quit
169 [SwitchB] interface vlan-interface 2 [SwitchB-Vlan-interface2] ipv6 address fe80::2 link-local [SwitchB-Vlan-interface2] ipv6 address 1::2 64 # Create a VRRP group 1 and set its virtual IPv6 addresses to FE80::10 and 1::10. [SwitchB-Vlan-interface2] vrrp ipv6 vrid 1 virtual-ip fe80::10 link-loca\ l [SwitchB-Vlan-interface2] vrrp ipv6 vrid 1 virtual-ip 1::10 # Configure Switch B to operate in preemptive mo de, with the preemption delay set to 5 seconds. [SwitchB-Vlan-interface2] vrrp ipv6 vrid 1 preempt-mode timer delay 5 # Enable Switch B to send RA messages, so that Host A can learn the default gateway address. [SwitchB-Vlan-interface2] vrrp ipv6 vrid 1 preempt-mode timer delay 5 3. Verify the configuration: A f t e r t h e c o nf i g u r a t i o n , H o s t B c a n be p i ng e d s u c c e s s f u l l y o n H o s t A . T o v e r i f y yo u r c o n f i g u r a t i o n , use the display vrrp ipv6 verbose command. # Display the detailed information about VRRP group 1 on Switch A. [SwitchA-Vlan-interface2] display vrrp ipv6 verbose IPv6 Standby Information: Run Mode : Standard Run Method : Virtual MAC Total number of virtual routers : 1 Interface Vlan-interface2 VRID : 1 Adver Timer : 100 Admin Status : Up State : Master Config Pri : 110 Running Pri : 110 Preempt Mode : Yes Delay Time : 5 Auth Type : None Virtual IP : FE80::10 1::10 Virtual MAC : 0000-5e00-0201 Master IP : FE80::1 # Display the detailed information about VRRP group 1 on Switch B. [SwitchB-Vlan-interface2] display vrrp ipv6 verbose IPv6 Standby Information: Run Mode : Standard Run Method : Virtual MAC Total number of virtual routers : 1 Interface Vlan-interface2 VRID : 1 Adver Timer : 100 Admin Status : Up State : Backup Config Pri : 100 Running Pri : 100 Preempt Mode : Yes Delay Time : 5 Become Master : 4200ms left Auth Type : None Virtual IP : FE80::10 1::10 Master IP : FE80::1 The output shows that in VRRP group 1 Switch A is the master, Switch B is the backup and packets sent from Host A to Host B are forwarded by Switch A.
170 When Switch A fails, you can still successfully ping Host B on Host A. To view the detailed information about the VRRP group on Switch B, use the display vrrp ipv6 verbose command. # When Switch A fails, the detailed information about VRRP group 1 on Switch B is displayed. [SwitchB-Vlan-interface2] display vrrp ipv6 verbose IPv6 Standby Information: Run Mode : Standard Run Method : Virtual MAC Total number of virtual routers : 1 Interface Vlan-interface2 VRID : 1 Adver Timer : 100 Admin Status : Up State : Master Config Pri : 100 Running Pri : 100 Preempt Mode : Yes Delay Time : 5 Auth Type : None Virtual IP : FE80::10 1::10 Virtual MAC : 0000-5e00-0201 Master IP : FE80::2 The output shows that when Switch A fails, Switch B becomes the master, and packets sent from Host A to Host B are forwarded by Switch B. # After Switch A resumes normal operation, use the display vrrp ipv6 verbose command to display the detailed information about VRRP group 1 on Switch A. [SwitchA-Vlan-interface2] display vrrp ipv6 verbose IPv6 Standby Information: Run Mode : Standard Run Method : Virtual MAC Total number of virtual routers : 1 Interface Vlan-interface2 VRID : 1 Adver Timer : 100 Admin Status : Up State : Master Config Pri : 110 Running Pri : 110 Preempt Mode : Yes Delay Time : 5 Auth Type : None Virtual IP : FE80::10 1::10 Virtual MAC : 0000-5e00-0201 Master IP : FE80::1 The output shows that after Switch A resumes normal operation, it becomes the master, and packets sent from host A to host B are forwarded by Switch A. VRRP interface tracking configuration example Network requirements • Switch A and Switch B belong to VRRP group 1 with the virtual IP addresses of 1::10/64 and FE80::10. • Host A wants to access Host B on the Internet, and learns 1::10/64 as its default gateway through RA messages sent by the switches.
171 • When Switch A operates normally, packets sent from Host A to Host B are forwarded by Switch A. If VLAN-interface 3 through which Switch A connects to the Internet is not available, packets sent from Host A to Host B are forwarded by Switch B. • To prevent attacks to the VRRP group from illegal users by using spoofed packets, configure the authentication mode as plain text to authenticate the VRRP packets in VRRP group 1, and specify the authentication key as hello. Figure 45 Network diagram Configuration procedure 1. Configure Switch A: # Configure VLAN 2. system-view [SwitchA] ipv6 [SwitchA] vlan 2 [SwitchA-vlan2] port gigabitethernet 1/0/5 [SwitchA-vlan2] quit [SwitchA] interface vlan-interface 2 [SwitchA-Vlan-interface2] ipv6 address fe80::1 link-local [SwitchA-Vlan-interface2] ipv6 address 1::1 64 # Create a VRRP group 1 and set its virt ual IPv6 addresses to FE80::10 and 1::10. [SwitchA-Vlan-interface2] vrrp ipv6 vrid 1 virtual-ip fe80::10 link-loca\ l [SwitchA-Vlan-interface2] vrrp ipv6 vrid 1 virtual-ip 1::10 # Set the priority of Switch A in VRRP group 1 to 110, which is higher than that of Switch B (100), so that Switch A can become the master. [SwitchA-Vlan-interface2] vrrp ipv6 vrid 1 priority 110 # Set the authentication mode for VRRP group 1 to simple and authentication key to hello. [SwitchA-Vlan-interface2] vrrp ipv6 vrid 1 authentication-mode simple he\ llo # Set the VRRP advertisement interval to 400 centiseconds. [SwitchA-Vlan-interface2] vrrp ipv6 vrid 1 timer advertise 400 # Configure Switch A to operate in preemptive mode , so that it can become the master whenever it works normally; configure the preemption delay as five seconds to avoid frequent status switchover.
172 [SwitchA-Vlan-interface2] vrrp ipv6 vrid 1 preempt-mode timer delay 5 # Set VLAN-interface 3 on Switch A to be tracked, and configure the amount by which the priority value decreases to be more than 10 (30 in this example), so that when VLAN interface 3 fails, the priority of Switch A in VRRP group 1 decreases to a value lower than 100 and thus Switch B can become the master. [SwitchA-Vlan-interface2] vrrp ipv6 vrid 1 track interface vlan-interface 3 reduced 30 # Enable Switch A to send RA messages, so that Host A can learn the default gateway address. [SwitchA-Vlan-interface2] undo ipv6 nd ra halt 2. Configure Switch B: # Configure VLAN 2. system-view [SwitchB] ipv6 [SwitchB] vlan 2 [SwitchB-vlan2] port gigabitethernet 1/0/5 [SwitchB-vlan2] quit [SwitchB] interface vlan-interface 2 [SwitchB-Vlan-interface2] ipv6 address fe80::2 link-local [SwitchB-Vlan-interface2] ipv6 address 1::2 64 # Create a VRRP group 1 and set its virt ual IPv6 addresses to FE80::10 and 1::10. [SwitchB-Vlan-interface2] vrrp ipv6 vrid 1 virtual-ip fe80::10 link-loca\ l [SwitchB-Vlan-interface2] vrrp ipv6 vrid 1 virtual-ip 1::10 # Set the authentication mode for VRRP group 1 to simple and authentication key to hello. [SwitchB-Vlan-interface2] vrrp ipv6 vrid 1 authentication-mode simple he\ llo # Set the VRRP advertisement interval to 400 centiseconds. [SwitchB-Vlan-interface2] vrrp ipv6 vrid 1 timer advertise 400 # Configure Switch B to operate in preemptive mode, so that Switch B can become the master after the priority of Switch A decreases to a value lo wer than 100. Configure the preemption delay as five seconds to avoid freq uent status switchover. [SwitchB-Vlan-interface2] vrrp ipv6 vrid 1 preempt-mode timer delay 5 # Enable Switch B to send RA messages, so that Host A can learn the default gateway address. [SwitchB-Vlan-interface2] undo ipv6 nd ra halt 3. Verify the configuration: After the configuration, Host B can be pinged successfully on Host A. To verify the configuration, use the display vrrp ipv6 verbose command. # Display the detailed information about VRRP group 1 on Switch A. [SwitchA-Vlan-interface2] display vrrp ipv6 verbose IPv6 Standby Information: Run Mode : Standard Run Method : Virtual MAC Total number of virtual routers : 1 Interface Vlan-interface2 VRID : 1 Adver Timer : 400 Admin Status : Up State : Master Config Pri : 110 Running Pri : 110 Preempt Mode : Yes Delay Time : 5
173 Auth Type : Simple Key : ****** Virtual IP : FE80::10 1::10 Virtual MAC : 0000-5e00-0201 Master IP : FE80::1 VRRP Track Information: Track Interface: Vlan3 State : Up Pri Reduc\ ed : 30 # Display the detailed information about VRRP group 1 on Switch B. [SwitchB-Vlan-interface2] display vrrp ipv6 verbose IPv6 Standby Information: Run Mode : Standard Run Method : Virtual MAC Total number of virtual routers : 1 Interface Vlan-interface2 VRID : 1 Adver Timer : 400 Admin Status : Up State : Backup Config Pri : 100 Running Pri : 100 Preempt Mode : Yes Delay Time : 5 Become Master : 4200ms left Auth Type : Simple Key : ****** Virtual IP : FE80::10 1::10 Master IP : FE80::1 The output shows that in VRRP group 1 Switch A is the master, Switch B is the backup and packets sent from Host A to Host B are forwarded by Switch A. When interface VLAN-interface 3 on Switch A is not available, you can still ping Host B successfully on Host A. To view the detailed information about the VRRP group, use the display vrrp ipv6 verbose command. # When interface VLAN-interface 3 on Switch A is not available, the detailed information about VRRP group 1 on Switch A is displayed. [SwitchA-Vlan-interface2] display vrrp ipv6 verbose IPv6 Standby Information: Run Mode : Standard Run Method : Virtual MAC Total number of virtual routers : 1 Interface Vlan-interface2 VRID : 1 Adver Timer : 400 Admin Status : Up State : Backup Config Pri : 110 Running Pri : 80 Preempt Mode : Yes Delay Time : 5 Become Master : 4200ms left Auth Type : Simple Key : ****** Virtual IP : FE80::10 1::10 Master IP : FE80::2 VRRP Track Information: Track Interface: Vlan3 State : Down Pri Reduced\ : 30
174 # When interface VLAN-interface 3 on Switch A is not available, the detailed information about VRRP group 1 on Switch B is displayed. [SwitchB-Vlan-interface2] display vrrp ipv6 verbose IPv6 Standby Information: Run Mode : Standard Run Method : Virtual MAC Total number of virtual routers : 1 Interface Vlan-interface2 VRID : 1 Adver Timer : 400 Admin Status : Up State : Master Config Pri : 100 Running Pri : 100 Preempt Mode : Yes Delay Time : 5 Auth Type : Simple Key : ****** Virtual IP : FE80::10 1::10 Virtual MAC : 0000-5e00-0201 Master IP : FE80::2 The output shows that when VLAN-interface 3 on Sw itch A is not available, the priority of Switch A is reduced to 80 and Switch A becomes the backup. Switch B becomes the master and packets sent from Host A to Host B are forwarded by Switch B. VRRP with multiple VLANs configuration example Network requirements • Switch A and Switch B belong to both VRRP group 1 and VRRP group 2. The virtual IPv6 addresses of VRRP group 1 are 1::10/64 and FE80::10, and those of VRRP group 2 are 2::10/64 and FE90::10. • Hosts in VLAN 2 learn 1::10/64 as their default gateway and hosts in VLAN 3 learn 2::10/64 as their default gateway through RA messages sent by the switches. • In VRRP group 1, Switch A has a higher priority than Switch B. In VRRP group 2, Switch B has a higher priority than Switch A. In this case, hosts in VLAN 2 and VLAN 3 can communicate with external networks through Switch A and Switch B, respectively, and when Switch A or Switch B fails, the hosts can use the other switch to communicate with external networks to avoid communication interruption.
175 Figure 46 Network diagram Configuration procedure 1. Configure Switch A: # Configure VLAN 2. system-view [SwitchA] ipv6 [SwitchA] vlan 2 [SwitchA-vlan2] port gigabitethernet 1/0/5 [SwitchA-vlan2] quit [SwitchA] interface vlan-interface 2 [SwitchA-Vlan-interface2] ipv6 address fe80::1 link-local [SwitchA-Vlan-interface2] ipv6 address 1::1 64 # Create VRRP group 1 and set its virtual IPv6 addresses to FE80::10 to 1::10. [SwitchA-Vlan-interface2] vrrp ipv6 vrid 1 virtual-ip fe80::10 link-loca\ l [SwitchA-Vlan-interface2] vrrp ipv6 vrid 1 virtual-ip 1::10 # Set the priority of Switch A in VRRP group 1 to 110, which is higher than that of Switch B (100), so that Switch A can become the master in VRRP group 1. [SwitchA-Vlan-interface2] vrrp ipv6 vrid 1 priority 110 [SwitchA-Vlan-interface2] quit # Enable Switch A to send RA messages, so that hosts in VLAN 2 can learn the default gateway address. [SwitchA-Vlan-interface2] undo ipv6 nd ra halt [SwitchA-Vlan-interface2] quit # Configure VLAN 3. [SwitchA] vlan 3 [SwitchA-vlan3] port gigabitethernet 1/0/6 [SwitchA-vlan3] quit [SwitchA] interface vlan-interface 3 [SwitchA-Vlan-interface3] ipv6 address fe90::1 link-local [SwitchA-Vlan-interface3] ipv6 address 2::1 64 Switch A Switch B Virtual IPv6 address 1: FE80::101::10/64 Virtual IPv6 address 2: FE90::102::10/64 Vlan-int2 FE80::1 1::1/64 Vlan-int2 FE80::21::2/64 Internet VLAN 2 Gateway: 1::10/64 VLAN 3 Gateway: 2::10/64 Vlan-int3 FE90::1 2::1/64 Vlan-int3FE90::2 2::2/64
176 # Create VRRP group 2 and set its virtual IPv6 addresses to FE90::10 and 2::10. [SwitchA-Vlan-interface3] vrrp ipv6 vrid 2 virtual-ip fe90::10 link-loca\ l [SwitchA-Vlan-interface3] vrrp ipv6 vrid 2 virtual-ip 2::10 # Enable Switch A to send RA messages, so that hosts in VLAN 3 can learn the default gateway address. [SwitchA-Vlan-interface2] undo ipv6 nd ra halt 2. Configure Switch B: # Configure VLAN 2. system-view [SwitchB] ipv6 [SwitchB-vlan2] port gigabitethernet 1/0/5 [SwitchB-vlan2] quit [SwitchB] interface vlan-interface 2 [SwitchB-Vlan-interface2] ipv6 address fe80::2 link-local [SwitchB-Vlan-interface2] ipv6 address 1::2 64 # Create VRRP group 1 and set its virtual IPv6 addresses to FE80::10 and 1::10. [SwitchB-Vlan-interface2] vrrp ipv6 vrid 1 virtual-ip fe80::10 link-loca\ l [SwitchB-Vlan-interface2] vrrp ipv6 vrid 1 virtual-ip 1::10 [SwitchB-Vlan-interface2] quit # Enable Switch B to send RA messages, so that hosts in VLAN 2 can learn the default gateway address. [SwitchB-Vlan-interface2] undo ipv6 nd ra halt [SwitchB-Vlan-interface2] quit # Configure VLAN 3. [SwitchB] vlan 3 [SwitchB-vlan3] port gigabitethernet 1/0/6 [SwitchB-vlan3] quit [SwitchB] interface vlan-interface 3 [SwitchB-Vlan-interface3] ipv6 address fe90::2 link-local [SwitchB-Vlan-interface3] ipv6 address 2::2 64 # Create VRRP group 2 and set its virtual IPv6 addresses to FE90::10 and 2::10. [SwitchB-Vlan-interface3] vrrp ipv6 vrid 2 virtual-ip fe90::10 link-loca\ l [SwitchB-Vlan-interface3] vrrp ipv6 vrid 2 virtual-ip 2::10 # Set the priority of Switch B in VRRP group 2 to 110, which is higher than that of Switch A (100), so that Switch B can become the master in VRRP group 2. [SwitchB-Vlan-interface3] vrrp ipv6 vrid 2 priority 110 # Enable Switch B to send RA messages, so that hosts in VLAN 3 can learn the default gateway address. [SwitchB-Vlan-interface3] undo ipv6 nd ra halt 3. Verify the configuration: To verify the configuration, use the display vrrp ipv6 verbose command. # Display the detailed information about the VRRP group on Switch A. [SwitchA-Vlan-interface3] display vrrp ipv6 verbose IPv6 Standby Information: Run Mode : Standard Run Method : Virtual MAC
177 Total number of virtual routers : 2 Interface Vlan-interface2 VRID : 1 Adver Timer : 100 Admin Status : Up State : Master Config Pri : 110 Running Pri : 110 Preempt Mode : Yes Delay Time : 0 Auth Type : None Virtual IP : FE80::10 1::10 Virtual MAC : 0000-5e00-0201 Master IP : FE80::1 Interface Vlan-interface3 VRID : 2 Adver Timer : 100 Admin Status : Up State : Backup Config Pri : 100 Running Pri : 100 Preempt Mode : Yes Delay Time : 0 Become Master : 2200ms left Auth Type : None Virtual IP : FE90::10 2::10 Master IP : FE90::2 # Display the detailed information about the VRRP group on Switch B. [SwitchB-Vlan-interface3] display vrrp ipv6 verbose IPv6 Standby Information: Run Mode : Standard Run Method : Virtual MAC Total number of virtual routers : 2 Interface Vlan-interface2 VRID : 1 Adver Timer : 100 Admin Status : Up State : Backup Config Pri : 100 Running Pri : 100 Preempt Mode : Yes Delay Time : 0 Become Master : 2200ms left Auth Type : None Virtual IP : FE80::10 1::10 Master IP : FE80::1 Interface Vlan-interface3 VRID : 2 Adver Timer : 100 Admin Status : Up State : Master Config Pri : 110 Running Pri : 110 Preempt Mode : Yes Delay Time : 0 Auth Type : None Virtual IP : FE90::10 2::10 Virtual MAC : 0000-5e00-0202 Master IP : FE90::2