ME60 V6R2版本双机热备VRRP主备无法建立问题解决

发布时间:  2010-09-30 浏览次数:  169 下载次数:  3
问题描述
现象描述:
网络拓扑:
RouterA        RouterB
   |              |
ME60-3---------ME60-4
     \          /
      \        /
       \      /
         S9306
版本情况: ME60 V600R002C02
网络拓扑如上图,两台ME60中间通过直连链路建立保护隧道,通过下挂的S9306交换机进行BFD检测。测试时两台ME60与9306的直连接口均能ping通,但VRRP主备无法建立。


处理过程
在以太网主接口上配置mode user-termination命令,起用用户终结模式后,ME60双机热备VRRP主备无法建立时,并没有告警信息显示,采集VRRP信息显示如下:
[YC_CON-B_YC_HW-ME60-3]dis vrrp
GigabitEthernet1/0/1.1 | Virtual Router 1                                     
    State : Initialize                                                          
    Virtual IP : 60.219.27.73                                                   
    PriorityRun : 110                                                           
    PriorityConfig : 150                                                        
    MasterPriority : 0                                                          
    Preempt : YES   Delay Time : 300                                            
    TimerRun : 1                                                                
    TimerConfig : 1                                                             
    Auth Type : NONE                                                            
    Virtual Mac :  0000-5e00-0101                                               
    Check TTL : YES                                                             
    Config type : admin-vrrp                                                    
    Track IF : GigabitEthernet1/0/0   priority reduced : 40                     
    IF State : UP                                                               
    Track IF : GigabitEthernet2/0/0   priority reduced : 40                     
    IF State : DOWN                                                             
    Config track link-bfd down-number : 0                                       
    Track BFD : 10  type: peer                                                  
BFD-session state : UP   
[YC_CON-B_YC_HW-ME60-4]dis vrrp                                                 
  GigabitEthernet1/0/1.1 | Virtual Router 1                                     
    State : Initialize                                                          
    Virtual IP : 60.219.27.73                                                   
    PriorityRun : 100                                                           
    PriorityConfig : 100                                                        
    MasterPriority : 0                                                          
    Preempt : YES   Delay Time : 0                                              
    TimerRun : 1                                                                
    TimerConfig : 1                                                             
    Auth Type : NONE                                                            
    Virtual Mac :  0000-5e00-0101                                               
    Check TTL : YES                                                             
    Config type : admin-vrrp                                                    
    Config track link-bfd down-number : 0                                       
    Track BFD : 20  type: peer                                                  
BFD-session state : UP  
从采集的信息可以看出,用于链路检测的BFD已经建立,说明VRRP无法建立不是BFD检测的原因导致,在太网主接口上采用非用户终结模式后,VRRP主备正常建立。问题定位在以太网主接口上采用用户终结模式以后,配置发生变化,要检查VRRP的配置。
根因

VRRP终结子接口缺少dot1q vrrp termination vid 的配置。

解决方案
VRRP管理子接口配置如下:
interface GigabitEthernet1/0/1.1                                                
 control-vid 2 dot1q-termination rt-protocol                                    
 dot1q termination vid 2 
 ip address 60.219.27.74 255.255.255.248                                        
 vrrp vrid 1 virtual-ip 60.219.27.73                                            
 admin-vrrp vrid 1                                                              
 vrrp vrid 1 priority 150                                                       
 vrrp vrid 1 preempt-mode timer delay 120                                       
 vrrp vrid 1 track interface GigabitEthernet1/0/0 reduced 40                    
 vrrp vrid 1 track interface GigabitEthernet2/0/0 reduced 40                    
 vrrp vrid 1 track bfd-session 10 peer                                          
 arp broadcast enable  
检查子接口配置,发现缺少一条配置dot1q vrrp termination vid 2。dot1q vrrp命令用来配置指定Tag值的Dot1q数据报文来维护VRRP状态。缺省情况,在终结子接口下没有指定任何值的Dot1q数据报文来维护VRRP状态。由于在双机热备的配置中使用VLAN 2作为VRRP的管理VLAN,缺省情况下没有指定维护VRRP状态的Dot1q数据报文的Tag的值,因此VRRP主备无法建立。正确配置如下:
interface GigabitEthernet1/0/1.1                                                
 control-vid 2 dot1q-termination rt-protocol                                    
 dot1q termination vid 2                                                        
 dot1q vrrp vid   2   //指定Tag 2的Dot1q数据报文来维护VRRP状态
 ip address 60.219.27.74 255.255.255.248                                        
 vrrp vrid 1 virtual-ip 60.219.27.73                                            
 admin-vrrp vrid 1                                                              
 vrrp vrid 1 priority 150                                                       
 vrrp vrid 1 preempt-mode timer delay 120                                       
 vrrp vrid 1 track interface GigabitEthernet1/0/0 reduced 40                    
 vrrp vrid 1 track interface GigabitEthernet2/0/0 reduced 40                    
 vrrp vrid 1 track bfd-session 10 peer                                          
 arp broadcast enable
建议与总结
1.在以太网主接口上配置用户终结模式修改为非用户终结模式时,需要删除主接口下所有的子接口,影响业务,建议以后在选择ME60以太网主接口终结模式时要慎重。
2.在以太网主接口上配置用户终结模式后,VLAN的终结方式发生改变,VRRP的配置方式也发生改变,要引起大家注意。

END