HP 5500 Ei 5500 Si Switch Series Configuration Guide
Have a look at the manual HP 5500 Ei 5500 Si Switch Series Configuration Guide online for free. It’s possible to download the document as PDF or print. UserManuals.tech offer 1114 HP manuals and user’s guides for free. Share the user manual or guide on Facebook, Twitter or Google+.
208 Step Command Remarks 4. Associate track with PBR. Set the next hop and associate it with a track entry: apply ip-address next-hop ip-address [ direct ] [ track track-entry-number ] [ ip-address [ direct ] [ track track-entry-number ] ] Set the default next hop, and associate it with a track entry: apply ip-address default next-hop ip-address [ track track-entry-number] [ ip-address [ track track-entry-number] ] Configure at least one of the commands. NOTE: You can associate a nonexistent track entry with PBR. The association takes effect only after you use the track command to create the track entry. Displaying and maintaining track entries Task Command Remarks Display information about the specified or all track entries. display track { track-entry-number | all } [ | { begin | exclude | include } regular-expression ] Available in any view Track configuration examples VRRP-track-NQA collaboration configuration example (the master monitors the uplink) (available only on the HP 5500 EI) Network requirements • As shown in Figure 56 , Host A needs to access Host B on the Internet. The default gateway of Host A i s 1 0 .1.1.1 0 / 2 4 . • Switch A and Switch B belong to VRRP group 1, whose virtual IP address is 10.1.1.10. • When Switch A works properly, packets from Host A to Host B are forwarded through Switch A. When VRRP finds that a fault is on the uplink of Switch A through NQA, packets from Host A to Host B are forwarded through Switch B.
209 Figure 56 Network diagram Configuration procedure 1. Create VLANs, and assign corres ponding ports to the VLANs. Configure the IP address of each VLAN interface as shown in Figure 56. (D etails not shown.) 2. Configure an NQA test group on Switch A: system-view # Create an NQA test group with the administrator name admin and the operation tag test. [SwitchA] nqa entry admin test # Configure the test type as ICMP-echo. [SwitchA-nqa-admin-test] type icmp-echo # Configure the destinat ion address as 10.1.2.2. [SwitchA-nqa-admin-test-icmp-echo] destination ip 10.1.2.2 # Set the test frequency to 100 ms. [SwitchA-nqa-admin-test-icmp-echo] frequency 100 # Configure reaction entry 1, specifying that fi ve consecutive probe failures trigger the track module. [SwitchA-nqa-admin-test-icmp-echo] reaction 1 checked-element probe-fail\ threshold-type consecutive 5 action-type trigger-only [SwitchA-nqa-admin-test-icmp-echo] quit # Start the NQA test. [SwitchA] nqa schedule admin test start-time now lifetime forever 3. Configure a track entry on Switch A: # Configure track entry 1, and associate it with reaction entry 1 of the NQA test group (with the administrator admin, and the operation tag test). [SwitchA] track 1 nqa entry admin test reaction 1 4. Configure VRRP on Switch A: # Create VRRP group 1, and configure the virtual IP address 10.1.1.10 for the group. [SwitchA] interface vlan-interface 2 [SwitchA-Vlan-interface2] vrrp vrid 1 virtual-ip 10.1.1.10 # Set the priority of Switch A in VRRP group 1 to 110. [SwitchA-Vlan-interface2] vrrp vrid 1 priority 110
210 # Set the authentication mode of VRRP group 1 to simple, and the authentication key to hello. [SwitchA-Vlan-interface2] vrrp vrid 1 authentication-mode simple hello # Configure the master to send VRRP packe ts at an interval of five seconds. [SwitchA-Vlan-interface2] vrrp vrid 1 timer advertise 5 # Configure Switch A to operate in preemptiv e mode, and set the preemption delay to five seconds. [SwitchA-Vlan-interface2] vrrp vrid 1 preempt-mode timer delay 5 # Configure to monitor track entry 1, an d specify the priority decrement to 30. [SwitchA-Vlan-interface2] vrrp vrid 1 track 1 reduced 30 5. Configure VRRP on Switch B: system-view [SwitchB] interface vlan-interface 2 # Create VRRP group 1, and configure the virtual IP address 10.1.1.10 for the group. [SwitchB-Vlan-interface2] vrrp vrid 1 virtual-ip 10.1.1.10 # Set the authentication mode of VRRP group 1 to simple, and the authentication key to hello. [SwitchB-Vlan-interface2] vrrp vrid 1 authentication-mode simple hello # Configure the master to send VRRP packe ts at an interval of five seconds. [SwitchB-Vlan-interface2] vrrp vrid 1 timer advertise 5 # Configure Switch B to operate in preemptiv e mode, and set the preemption delay to five seconds. [SwitchB-Vlan-interface2] vrrp vrid 1 preempt-mode timer delay 5 6. Verify the configuration: After configuration, ping Host B on Host A, and you can see that Host B is reachable. Use the display vrrp command to view the configuration result. # Display detailed information about VRRP group 1 on Switch A. [SwitchA-Vlan-interface2] display vrrp verbose IPv4 Standby Information: Run Mode : Standard Run Method : Virtual MAC Total number of virtual routers : 1 Interface Vlan-interface2 VRID : 1 Adver Timer : 5 Admin Status : Up State : Master Config Pri : 110 Running Pri : 110 Preempt Mode : Yes Delay Time : 5 Auth Type : Simple Key : hello Virtual IP : 10.1.1.10 Virtual MAC : 0000-5e00-0101 Master IP : 10.1.1.1 VRRP Track Information: Track Object : 1 State : Positive Pri Reduc\ ed : 30 # Display detailed information about VRRP group 1 on Switch B. [SwitchB-Vlan-interface2] display vrrp verbose IPv4 Standby Information: Run Mode : Standard Run Method : Virtual MAC
211 Total number of virtual routers : 1 Interface Vlan-interface2 VRID : 1 Adver Timer : 5 Admin Status : Up State : Backup Config Pri : 100 Running Pri : 100 Preempt Mode : Yes Delay Time : 5 Become Master : 2200ms left Auth Type : Simple Key : hello Virtual IP : 10.1.1.10 Master IP : 10.1.1.1 The output shows that in VRRP group 1, Switch A is the master, and Switch B is a backup. Packets from Host A to Host B are forwarded through Switch A. When a fault is on the link between Switch A and Switch C, you can still successfully ping Host B on Host A. Use the display vrrp command to view information about VRRP group 1. # Display detailed information about VRRP group 1 on S w i t c h A w h e n a f a u l t i s o n t h e l i n k b e t w e e n Switch A and Switch C. IPv4 Standby Information: Run Mode : Standard Run Method : Virtual MAC Total number of virtual routers : 1 Interface Vlan-interface2 VRID : 1 Adver Timer : 5 Admin Status : Up State : Backup Config Pri : 110 Running Pri : 80 Preempt Mode : Yes Delay Time : 5 Become Master : 2200ms left Auth Type : Simple Key : hello Virtual IP : 10.1.1.10 Master IP : 10.1.1.2 VRRP Track Information: Track Object : 1 State : Negative Pri Reduc\ ed : 30 # Display detailed information about VRRP group 1 on Switch B when a fault is on the link between Switch A and Switch C. [SwitchB-Vlan-interface2] display vrrp verbose IPv4 Standby Information: Run Mode : Standard Run Method : Virtual MAC Total number of virtual routers : 1 Interface Vlan-interface2 VRID : 1 Adver Timer : 5 Admin Status : Up State : Master Config Pri : 100 Running Pri : 100 Preempt Mode : Yes Delay Time : 5 Auth Type : Simple Key : hello Virtual IP : 10.1.1.10 Virtual MAC : 0000-5e00-0101 Master IP : 10.1.1.2
212 The output shows that when a fault is on the link between Switch A and Switch C, the priority of Switch A decreases to 80. Switch A becomes the backup, and Switch B becomes the master. Packets from Host A to Host B are forwarded through Switch B. Configuring BFD for a VRRP backup to monitor the master (available only on the HP 5500 EI) Network requirements • As shown in Figure 57, Switch A and Switch B belong to VRRP group 1, whose virtual IP address is 192.168.0.10. • The default gateway of the hosts in the LAN is 192.168.0.10. When Switch A works properly, the hosts in the LAN access the external network through Switch A. When Switch A fails, the hosts in the LAN access the external network through Switch B. • If BFD is not configured, when the master in a VRRP group fails, the backup cannot become the master until the configured timeout timer expires. The timeout is generally three to four seconds, which makes the switchover slow. To solve this problem, VRRP uses BFD to probe the state of the master. Once the master fails, the backup can become the new master in milliseconds. Figure 57 Network diagram Configuration procedure 1. Create VLANs, and assign corres ponding ports to the VLANs. Configure the IP address of each VLAN interface as shown in Figure 57. (D etails not shown.) 2. Configure VRRP on Switch A: system-view [SwitchA] interface vlan-interface 2
213 # Create VRRP group 1, and configure the virtual IP address 192.168.0.10 for the group. Set the priority of Switch A in VRRP group 1 to 110. [SwitchA-Vlan-interface2] vrrp vrid 1 virtual-ip 192.168.0.10 [SwitchA-Vlan-interface2] vrrp vrid 1 priority 110 [SwitchA-Vlan-interface2] return 3. Configure BFD on Switch B: # Configure the source address of BFD echo packets as 10.10.10.10. system-view [SwitchB] bfd echo-source-ip 10.10.10.10 4. Create the track entry to be associated with the BFD session on Switch B: # Create track entry 1 to be associated with the BFD session to check whether Switch A is reachable. [SwitchB] track 1 bfd echo interface vlan-interface 2 remote ip 192.168.0.101 local ip 192.168.0.102 5. Configure VRRP on Switch B: # Create VRRP group 1, and configure the virt ual IP address 192.168.0.10 for the group. VRRP group 1 monitors the status of track entry 1. When the status of the track entry becomes Negative, Switch B quickly becomes the master. [SwitchB] interface vlan-interface 2 [SwitchB-Vlan-interface2] vrrp vrid 1 virtual-ip 192.168.0.10 [SwitchB-Vlan-interface2] vrrp vrid 1 track 1 switchover [SwitchB-Vlan-interface2] return 6. Verify the configuration: # Display the detailed information about VRRP group 1 on Switch A. display vrrp verbose IPv4 Standby Information: Run Mode : Standard Run Method : Virtual MAC Total number of virtual routers : 1 Interface Vlan-interface2 VRID : 1 Adver Timer : 1 Admin Status : Up State : Master Config Pri : 110 Running Pri : 110 Preempt Mode : Yes Delay Time : 0 Auth Type : None Virtual IP : 192.168.0.10 Virtual MAC : 0000-5e00-0101 Master IP : 192.168.0.101 # Display the detailed information about VRRP group 1 on Switch B. display vrrp verbose IPv4 Standby Information: Run Mode : Standard Run Method : Virtual MAC Total number of virtual routers : 1 Interface Vlan-interface2 VRID : 1 Adver Timer : 1 Admin Status : Up State : Backup
214 Config Pri : 100 Running Pri : 100 Preempt Mode : Yes Delay Time : 0 Become Master : 2200ms left Auth Type : None Virtual IP : 192.168.0.10 Master IP : 192.168.0.101 VRRP Track Information: Track Object : 1 State : Positive Switchove\ r # Display information about track entry 1 on Switch B. display track 1 Track ID: 1 Status: Positive Duration: 0 days 0 hours 0 minutes 32 seconds Notification delay: Positive 0, Negative 0 (in seconds) Reference object: BFD session: Packet type: Echo Interface : Vlan-interface2 Remote IP : 192.168.0.101 Local IP : 192.168.0.102 The output shows that when the status of the track entry becomes Positive, Switch A is the master, and Switch B the backup. # Enable VRRP state debugging and BFD event debugging on Switch B. terminal debugging terminal monitor debugging vrrp state debugging bfd event # When Switch A fails, the following output is displayed on Switch B. *Dec 17 14:44:34:142 2008 SwitchB BFD/7/EVENT:Send sess-down Msg, [Src:192.168.0.102,Dst:192.168.0.101,Vlan-interface2,Echo], instance:0, \ protocol:Track *Dec 17 14:44:34:144 2008 SwitchB VRRP/7/DebugState: IPv4 Vlan-interface2 | Virtual Router 1 : Backup --> Master reason: The status of the tracked object \ changed # Display the detailed information about the VRRP group on Switch B. display vrrp verbose IPv4 Standby Information: Run Mode : Standard Run Method : Virtual MAC Total number of virtual routers : 1 Interface Vlan-interface2 VRID : 1 Adver Timer : 1 Admin Status : Up State : Master Config Pri : 100 Running Pri : 100 Preempt Mode : Yes Delay Time : 0 Auth Type : None Virtual IP : 192.168.0.10 Virtual MAC : 0000-5e00-0101 Master IP : 192.168.0.102
215 VRRP Track Information: Track Object : 1 State : Negative Switchove\ r The output shows that when BFD detects that Switch A fails, it notifies VRRP through the track module to change the status of Switch B to master without waiting for a period three times the advertisement interval, so that a backup can quickly preempt as the master. Configuring BFD for the VRRP master to monitor the uplinks (available only on the HP 5500 EI) Network requirements • As shown in Figure 58 , Switch A and Switch B belong to VRRP group 1, whose virtual IP address is 192.168.0.10. • The default gateway of the hosts in the LAN is 192.168.0.10. • When Switch A works properly, the hosts in the LAN access the external network through Switch A. When Switch A detects that the uplink is down through BFD, it decreases its priority so that Switch B can preempt as the master, ensuring that the hosts in the LAN can access the external network through Switch B. Figure 58 Network diagram Configuration procedure 1. Create VLANs, and assign corres ponding ports to the VLANs. Configure the IP address of each VLAN interface as shown in Figure 58. (D etails not shown.) 2. Configure BFD on Switch A: # Configure the source address of BFD echo packets as 10.10.10.10. system-view Internet Master uplink device Backup uplink device Uplink Virtual router Virtual IP address: 192.168.0.10 Vlan-int2 192.168.0.101/24 Vlan-int2 192.168.0.102/24 Switch A Master Switch B Backup Vlan-int3 1.1.1.1/24 Vlan-int3 1.1.1.2/24 L2 switch Uplink VRRP packets BFD probe packets
216 [SwitchA] bfd echo-source-ip 10.10.10.10 3. Create a track entry to be associated with the BFD session on Switch A: # Create track entry 1 to be associated with th e BFD session to check whether the uplink device with the IP address 1.1.1.2 is reachable. [SwitchA] track 1 bfd echo interface vlan-interface 3 remote ip 1.1.1.2 \ local ip 1.1.1.1 4. Configure VRRP on Switch A: # Create VRRP group 1, and configure the vi rtual IP address of the group as 192.168.0.10. Configure the priority of Switch A in VRRP grou p 1 as 110. Configure VRRP group 1 to monitor the status of track entry 1. When the status of the tr ack entry becomes Negative, the priority of Switch A decreases by 20. [SwitchA] interface vlan-interface 2 [SwitchA-Vlan-interface2] vrrp vrid 1 virtual-ip 192.168.0.10 [SwitchA-Vlan-interface2] vrrp vrid 1 priority 110 [SwitchA-Vlan-interface2] vrrp vrid 1 track 1 reduced 20 [SwitchA-Vlan-interface2] return 5. Configure VRRP on Switch B: # Create VRRP group 1, and configure the vi rtual IP address of the group as 192.168.0.10. system-view [SwitchB] interface vlan-interface 2 [SwitchB-Vlan-interface2] vrrp vrid 1 virtual-ip 192.168.0.10 [SwitchB-Vlan-interface2] return 6. Verify the configuration: # Display the detailed information about the VRRP group on Switch A. display vrrp verbose IPv4 Standby Information: Run Mode : Standard Run Method : Virtual MAC Total number of virtual routers : 1 Interface Vlan-interface2 VRID : 1 Adver Timer : 1 Admin Status : Up State : Master Config Pri : 110 Running Pri : 110 Preempt Mode : Yes Delay Time : 0 Auth Type : None Virtual IP : 192.168.0.10 Virtual MAC : 0000-5e00-0101 Master IP : 192.168.0.101 VRRP Track Information: Track Object : 1 State : Positive Pri Reduced : 2\ 0 # Display the information about track entry 1 on Switch A. display track 1 Track ID: 1 Status: Positive Duration: 0 days 0 hours 0 minutes 32 seconds Notification delay: Positive 0, Negative 0 (in seconds) Reference object:
217 BFD session: Packet type: Echo Interface : Vlan-interface2 Remote IP : 1.1.1.2 Local IP : 1.1.1.1 # Display the detailed information about the VRRP group on Switch B. display vrrp verbose IPv4 Standby Information: Run Mode : Standard Run Method : Virtual MAC Total number of virtual routers : 1 Interface Vlan-interface2 VRID : 1 Adver Timer : 1 Admin Status : Up State : Backup Config Pri : 100 Running Pri : 100 Preempt Mode : Yes Delay Time : 0 Become Master : 2200ms left Auth Type : None Virtual IP : 192.168.0.10 Master IP : 192.168.0.101 The output shows that when the status of track entry 1 becomes Positive, Switch A is the master, and Switch B the backup. # When the uplink of Switch A goes down, the status of track entry 1 becomes Negative. display track 1 Track ID: 1 Status: Negative Duration: 0 days 0 hours 0 minutes 32 seconds Notification delay: Positive 0, Negative 0 (in seconds) Reference object: BFD session: Packet type: Echo Interface : Vlan-interface2 Remote IP : 1.1.1.2 Local IP : 1.1.1.1 # Display the detailed information about VRRP group 1 on Switch A. display vrrp verbose IPv4 Standby Information: Run Mode : Standard Run Method : Virtual MAC Total number of virtual routers : 1 Interface Vlan-interface2 VRID : 1 Adver Timer : 1 Admin Status : Up State : Backup Config Pri : 110 Running Pri : 90 Preempt Mode : Yes Delay Time : 0 Become Master : 2200ms left Auth Type : None Virtual IP : 192.168.0.10