No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Command Reference

CloudEngine 8800, 7800, 6800, and 5800 V200R002C50

This document describes all the configuration commands of the device, including the command function, syntax, parameters, views, default level, usage guidelines, examples, and related commands.
Rate and give feedback :
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
VRRP Configuration Commands

VRRP Configuration Commands

NOTE:

The CE6810LI does not support IPv4 or IPv6 Layer 3 forwarding. After the IPv4 or IPv6 function is enabled on an interface of the CE6810LI, the configured IPv4 or IPv6 address can only be used to manage the switch.

vrrp vrid admin

Function

The vrrp vrid admin command specifies an mVRRP group.

The undo vrrp vrid admin command deletes the specified mVRRP group.

By default, no mVRRP group is configured.

Format

vrrp vrid virtual-router-id admin [ ignore-if-down ]

undo vrrp vrid virtual-router-id admin

Parameters

Parameter

Description

Value

vrid virtual-router-id

Specifies the virtual router ID (VRID) of an mVRRP group.

The value is an integer that ranges from 1 to 255.

NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

ignore-if-down

Indicates that an mVRRP group is enabled to ignore the interface Down event.

If an interface where an mVRRP group is configured goes Down, the mVRRP group switches to the Master state but not Initialize.

-

Views

GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, VLANIF interface view, Eth-Trunk interface view, VBDIF interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

An mVRRP group can be bound to VRRP groups, VRRP-enabled interfaces, and PWs. Once bound, the mVRRP group determines the master and backup status of the bound VRRP groups, VRRP-enabled interfaces, and PWs. mVRRP is used when multiple VRRP groups coexist, decreasing the number of VRRP Advertisement packets sent and minimize network bandwidth and system resource consumption.
NOTE:

mVRRP provides the following functions:

  • An mVRRP group used as the gateway can process both VRRP Advertisement packets and service packets.

  • An mVRRP group that is not used as the gateway can only process VRRP Advertisement packets.

Precautions

An mVRRP group cannot be bound to another mVRRP group.

After the undo vrrp vrid admin command is run to delete an mVRRP backup group, the associations between service VRRP backup groups and the mVRRP backup group are automatically deleted.

Example

# Create VRRP group 1 and configure it as an mVRRP group.
<HUAWEI> system-view
[~HUAWEI] interface vlanif 10
[*HUAWEI-Vlanif10] ip address 10.1.1.1 24
[*HUAWEI-Vlanif10] vrrp vrid 1 virtual-ip 10.1.1.111
[*HUAWEI-Vlanif10] vrrp vrid 1 admin
# Create VRRP group 1 on 10GE1/0/1 and configure it as an mVRRP group.
<HUAWEI> system-view
[~HUAWEI] interface 10ge 1/0/1
[~HUAWEI-10GE1/0/1] undo portswitch
[*HUAWEI-10GE1/0/1] ip address 10.1.1.1 24
[*HUAWEI-10GE1/0/1] vrrp vrid 1 virtual-ip 10.1.1.111
[*HUAWEI-10GE1/0/1] vrrp vrid 1 admin

vrrp6 vrid admin

Function

The vrrp6 vrid admin command specifies an mVRRP6 group.

The undo vrrp6 vrid admin command deletes the specified mVRRP6 group.

By default, no mVRRP6 group is configured.

Format

vrrp6 vrid virtual-router-id admin [ ignore-if-down ]

undo vrrp6 vrid virtual-router-id admin

Parameters

Parameter

Description

Value

vrid virtual-router-id

Specifies the virtual router ID (VRID) of an mVRRP6 group.

The value is an integer that ranges from 1 to 255.

NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

ignore-if-down

Indicates that an mVRRP6 group is enabled to ignore the interface Down event.

If an interface where an mVRRP6 group is configured goes Down, the mVRRP6 group switches to the Master state but not Initialize.

-

Views

GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, VLANIF interface view, Eth-Trunk interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

An mVRRP6 group can be bound to common VRRP6 groups. Once bound, the mVRRP6 group determines the status of the bound VRRP6 groups based on the binding. mVRRP6 is used when multiple VRRP6 groups coexist, decreasing the number of VRRP Advertisement packets sent and minimizing network bandwidth consumption.
NOTE:

mVRRP6 provides the following functions:

  • An mVRRP6 group used as the gateway can process both VRRP6 Advertisement packets and service packets.

  • An mVRRP6 group that is not used as the gateway can only process VRRP6 Advertisement packets.

Precautions

An mVRRP6 group cannot be bound to another mVRRP6 group.

Example

# Create VRRP6 group 1 on VLANIF 10 and configure it as an mVRRP6 group.
<HUAWEI> system-view
[~HUAWEI] interface vlanif 10
[*HUAWEI-Vlanif10] ipv6 enable
[*HUAWEI-Vlanif10] ipv6 address FC00::1 64
[*HUAWEI-Vlanif10] vrrp6 vrid 1 virtual-ip FE80::1 link-local
[*HUAWEI-Vlanif10] vrrp6 vrid 1 admin
# Create VRRP6 group 1 10GE1/0/1 and configure it as an mVRRP6 group.
<HUAWEI> system-view
[~HUAWEI] interface 10ge 1/0/1
[~HUAWEI-10GE1/0/1] undo portswitch
[*HUAWEI-10GE1/0/1] ipv6 enable
[*HUAWEI-10GE1/0/1] ipv6 address FC00::1 64
[*HUAWEI-10GE1/0/1] vrrp6 vrid 1 virtual-ip FE80::1 link-local
[*HUAWEI-10GE1/0/1] vrrp6 vrid 1 admin

direct-route track vrrp

Function

The direct-route track vrrp command associates a direct route with the VRRP group status.

The undo direct-route track vrrp command disassociates a direct route from the VRRP group status.

By default, a direct route is not associated with the VRRP group status.

Format

direct-route track vrrp vrid virtual-router-id degrade-cost cost-value

undo direct-route track vrrp

Parameters

Parameter

Description

Value

vrid virtual-router-id

Specifies the VRID of a VRRP group.

The value is an integer that ranges from 1 to 255.

NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

degrade-cost cost-value

Specifies the cost of a direct route when the VRRP group is in Backup or Initialize state. The interface configured with the VRRP group is located on the network segment that this direct route belongs to.

The value is an integer that ranges from 1 to 4294967295.

Views

GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, VLANIF interface view, Eth-Trunk interface view, VBDIF interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

In the scenario where the VRRP group functions as the user gateway, uplink traffic is transmitted along the path of the master in the VRRP group and downlink traffic is transmitted through a route of a dynamic routing protocol. If the VRRP group status changes, the path where uplink traffic is transmitted also changes. In this case, uplink and downlink traffic may be transmitted along different paths. If the firewall is configured for the VRRP group to improve security, the firewall blocks traffic that is sent and received along different paths. In addition, it is difficult to monitor such traffic and collect traffic statistics. To solve this problem, run the direct-route track vrrp command to associate a direct route with the VRRP group status. The cost of a direct route is adjusted based on the VRRP group status. Then configure a dynamic routing protocol to import the direct route so that the route is selected based on the VRRP group status.

Prerequisites

VRRP has been configured on the interface where the direct-route track vrrp command is executed.

Follow-up Procedure

Configure a dynamic routing protocol to import the direct route.

Precautions

The direct-route track vrrp command can be only executed at one time on an interface. Before associating a direct route with a VRRP group specified by vrid virtual-router-id, delete the original configuration command.

After this command is executed, the cost of the direct route on the network segment where the master device's interface belongs is adjusted based on the VRRP group status: When the VRRP group is in Master state, the cost is set to 0. When the VRRP group is in Backup or Initialize state, the cost is specified by cost-value.

Example

# Associate a direct route on the network segment where VLANIF 100 belongs with the VRRP group status.

<HUAWEI> system-view
[~HUAWEI] interface vlanif 100
[*HUAWEI-Vlanif100] direct-route track vrrp vrid 1 degrade-cost 300

# Associate a direct route on the network segment where 10GE1/0/1 belongs with the VRRP group status.

<HUAWEI> system-view
[~HUAWEI] interface 10ge 1/0/1
[~HUAWEI-10GE1/0/1] undo portswitch
[*HUAWEI-10GE1/0/1] direct-route track vrrp vrid 1 degrade-cost 300

direct-route track vrrp interface

Function

The direct-route track vrrp interface command associates direct routes with a VRRP backup group in the loopback interface view.

The undo direct-route track vrrp interface command deletes the association between direct routes and a VRRP backup group in the loopback interface view.

By default, direct routes are not associated with a VRRP backup group.

Format

direct-route track vrrp interface interface-type interface-number vrid virtual-router-id degrade-cost cost-value

undo direct-route track vrrp interface interface-type interface-number vrid virtual-router-id degrade-cost cost-value

Parameters

Parameter Description Value
interface interface-type interface-number Specifies the type and number of the interface on which a VRRP backup group is configured.
  • interface-type specifies the interface type.
  • interface-number specifies the interface number.
vrid virtual-router-id Specifies the ID of a VRRP backup group.

The value is an integer that ranges from 1 to 255.

NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

degrade-cost cost-value Specifies a cost to be applied to IP direct routes when the associated VRRP backup group is in the Backup or Initialize state. The value is an integer ranging from 1 to 4294967295.

Views

Loopback interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

You can run the direct-route track vrrp interface command to associate direct routes with a VRRP backup group in the loopback interface view.

Prerequisites

VRRP has been configured on interfaces.

Follow-up Procedure

Configure a dynamic routing protocol to import the direct routes.

Precautions

After the direct-route track vrrp interface command is run, the cost of IP direct routes is adjusted based on the VRRP backup group status, with details as follows:

  • If the VRRP backup group status is Master, 0 (the highest priority) is used as the cost of the IP direct routes.

  • If the VRRP backup group status is Backup or Initialize, the cost-value specified in the command is used as the cost of the IP direct routes.

You can run only one direct-route track vrrp interface command on a loopback interface. Before associating the direct routes with the VRRP backup group specified by vrid virtual-router-id in another direct-route track vrrp interface command, you must delete the original direct-route track vrrp interface command.

Example

# Associate the direct routes on Loopback1 with a VRRP backup group.

<HUAWEI> system-view
[~HUAWEI] interface loopback 1
[*HUAWEI-Loopback1] direct-route track vrrp interface 10GE 1/0/1 vrid 1 degrade-cost 300

display snmp-agent trap feature-name vrrp all

Function

The display snmp-agent trap feature-name vrrp all command displays all trap messages of the VRRP module.

Format

display snmp-agent trap feature-name vrrp all

Parameters

None

Views

All views

Default Level

3: Management level

Usage Guidelines

Usage Scenario

The Simple Network Management Protocol (SNMP) is a network management protocol widely used on TCP/IP networks. SNMP uses a central computer (a network management station) that runs network management software to manage network elements. The SNMP agent reports trap messages to the network management station so that the network management station can quickly determine the network status, and the network administrator can take measures accordingly.

The display snmp-agent trap feature-name vrrp all command displays the following information:
  • Trap names supported by the VRRP module: The trap names are the same as the trap names specified by the snmp-agent trap enable feature-name vrrp [ trap-name { vrrptrapauthfailure | vrrptrapmasterdown | vrrptrapnewmaster } ] command. Each trap name corresponds to a network element abnormality.

  • Trap status of the VRRP module: You can check whether a trap is reported based on the trap name.

Prerequisites

SNMP agent has been enabled using the snmp-agent command.

Example

# Display all trap messages of the VRRP module.

<HUAWEI> display snmp-agent trap feature-name vrrp all
------------------------------------------------------------------------------  
Feature name: VRRP                                                              
Trap number : 4                                                                 
------------------------------------------------------------------------------  
Trap name                      Default switch status   Current switch status    
hwVrrpExtTrapMasterDown        on                      on                       
hwVrrpExtTrapNonMaster         on                      on                       
vrrpTrapAuthFailure            on                      on                       
vrrpTrapNewMaster              on                      on                       
Table 15-9  Description of the display snmp-agent trap feature-name vrrp all command output

Item

Description

Feature name

Name of the module that a trap message belongs to.

Trap number

Number of trap messages.

Trap name

Name of a trap message of the VRRP module:

  • vrrpTrapAuthFailure: This trap message is generated when the authentication mode and key in the received packet conflicts with those on the device.
  • hwVrrpExtTrapMasterDown: This trap message is generated when the VRRP group status changes from Master to another status.
  • vrrpTrapNewMaster: This trap message is generated when the VRRP group status changes to Master.
  • hwVrrpExtTrapNonMaster: This trap is generated when the VRRP group status changes from Backup to Initialize or from Initialize to Backup.

Default switch status

Whether the trap function is enabled by default:
  • on: The trap function is enabled.
  • off: The trap function is disabled.

Current switch status

Status of the trap function:
  • on: The trap function is enabled.
  • off: That the trap function is disabled.

display vrrp

Function

The display vrrp command displays the status and configuration parameters of VRRP groups.

Format

display vrrp [ admin-vrrp | [ interface interface-type interface-number [ virtual-router-id ] | virtual-router-id ] [ verbose ] ]

Parameters

Parameter

Description

Value

admin-vrrp Displays information about an mVRRP group.

-

interface interface-type interface-number Displays the status of all VRRP groups on the specified interface.
  • interface-type specifies the interface type.
  • interface-number specifies the interface number.

-

virtual-router-id Displays the status of a VRRP group with the specified VRID.

The VRID of the VRRP group must have been created.

verbose Displays detailed information about a VRRP group.

-

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

The display vrrp command displays information about VRRP groups.

Example

# Display information about all VRRP groups on the switch.

<HUAWEI> display vrrp verbose
Vlanif100 | Virtual Router 1              
State             : Master                                                  
Virtual IP        : 10.1.1.100                                              
Master IP         : 10.1.1.2                                                
Send VRRP Packet To Subvlan : all                                           
PriorityRun       : 120                                                     
PriorityConfig    : 120                                                     
MasterPriority    : 120                                                     
Preempt           : YES   Delay Time : 20 s   Remain : --                   
Hold Multiplier   : 3
TimerRun          : 2 s                                                     
TimerConfig       : 2 s                                                     
Auth Type         : MD5   Auth Key : ******    
Virtual MAC       : 0000-5e00-0101                                          
Check TTL         : YES                                                     
Config Type       : Normal                                             
Track BFD         : atob             Priority Reduced :20                   
BFD-session State : UP                                                      
Create Time       : 2011-10-07 15:43:42                                     
Last Change Time  : 2011-10-07 15:44:03 
Table 15-10  Description of the display vrrp verbose command output

Item

Description

Vlanif100 | Virtual Router 1

Interface where the VRRP group is configured and VRID of the VRRP group.

State

VRRP status of the device:
  • Master: The device functions as the master in the VRRP group.

  • Backup: The device functions as the backup in the VRRP group.

  • Initialize: All VRRP groups begin in Initialize state. When the interface where a VRRP group is configured becomes Down or is Administratively Down, the VRRP group status is switched to Initialize.

Virtual IP

Virtual IP address of a VRRP group. To configure a virtual IP address for a VRRP group, run the vrrp vrid virtual-ip command.

Master IP

Primary IP address of the interface configured with the VRRP group on the master.

Send VRRP Packet To Subvlan

After an interface configured with the super-VLAN receives the VRRP Advertisement packets, the interface sends packets to this sub-VLAN.

This field is displayed only when a mode in which VRRP Advertisement packets are sent in a super-VLAN is configured using the vrrp advertise send-mode command.

PriorityRun

Priority of the switch when the VRRP group runs. If the switch is the IP address owner in a VRRP group, the running priority of the switch in the group is displayed as 255.

PriorityConfig

Priority configured for the switch using the vrrp vrid priority command. If the switch is the IP address owner and this value is not configured, the default priority 100 but not 255 is displayed.

MasterPriority

Priority of the master in the VRRP group. If the switch is the IP address owner in a VRRP group, the priority of the switch in the group is displayed as 255.

Preempt

Preemption mode:
  • YES: preemption

  • NO: no preemption

To disable the preemption mode, run the vrrp vrid preempt disable command.

Delay Time

Preemption delay, in seconds. To set the preemption delay, run the vrrp vrid preempt timer delay command.

Hold Multiplier

Number of VRRP heartbeat timeouts.

Remain

Remaining time of the preemption delay.

TimerRun

Interval at which the master in the VRRP group sends VRRP Advertisement packets, in seconds.

TimerConfig

Configured interval at which the master in the VRRP group sends VRRP Advertisement packets, in seconds. To set the interval at which the master in the VRRP group sends VRRP Advertisement packets, run the vrrp vrid timer advertise command.

Auth Type

VRRP Advertisement packet authentication mode:
  • NONE: non-authentication

  • SIMPLE: simple authentication

  • MD5: MD5 authentication

To set an authentication mode, run the vrrp vrid authentication-mode command. VRRPv3 does not support authentication.

Auth Key

Authentication key. If authentication is configured, ****** is displayed. If no authentication is configured, this field is not displayed.

Virtual MAC

Virtual MAC address of the VRRP group.

Check TTL

Whether the TTL value of a VRRP Advertisement packet is checked:
  • YES: The TTL value of a VRRP Advertisement packet is checked.
  • NO: The TTL value of a VRRP Advertisement packet is not checked.
To configure the switch to check the TTL value in a VRRP Advertisement packet, run the vrrp check ttl disable command.

Config Type

Type of a VRRP group:
  • Normal: common VRRP group

  • Administrator: mVRRP group

  • Member: member VRRP group

  • Load-Balance: Load-Balance Redundancy Group (LBRG)

  • Load-Balance-Member: LBRG member group

Track BFD

Local discriminator or name of the BFD session associated with the VRRP group. This field is displayed when only the BFD session is associated with the VRRP group.

Priority Reduced

Value by which the VRRP priority reduces if the interface or BFD session associated with the VRRP group becomes Down.

If the Increase mode is configured, Priority Increased is displayed. Priority Increased indicates the value by which the VRRP priority increases if the interface or BFD session associated with the VRRP group becomes Down.

BFD-Session State

Status of the BFD session associated with the VRRP group:

  • UP: A BFD session is in Up state.

  • DOWN: A BFD session is in Down state.

  • ADMINDOWN: A BFD session is in ADMINDOWN state.

Create Time

Time when the VRRP group was created.

Last change time

Last time the VRRP group status changed.

# Display brief information about all VRRP groups on the switch.

<HUAWEI> display vrrp
Type:                                                                           
  N: Normal                                                               
  A: Administrator                                                        
  M: Member                                                               
  L: Load-Balance                                                         
  LM: Load-Balance-Member 
Total:1     Master:0    Backup:0    Non-active:1      
VRID State       Interface               Type    Virtual IP                     
----------------------------------------------------------------                
   1 Master      Vlanif23                N       10.1.1.100 
Table 15-11  Description of the display vrrp command output

Item

Description

VRID

VRID of the VRRP group.

State

VRRP status of the switch:
  • Master: The switch functions as the master in the VRRP group.

  • Backup: The switch functions as the backup in the VRRP group.

  • Initialize: All VRRP groups begin in Initialize state. When the interface where a VRRP group is configured becomes Down or is Administratively Down, the VRRP group status changes to Initialize.

Interface

Interface configured with the VRRP group.

Type

Type of a VRRP group:
  • Normal: common VRRP group

  • Administrator: mVRRP group

  • Member: member VRRP group

  • Load-Balance: Load-Balance Redundancy Group (LBRG)

  • Load-Balance-Member: LBRG member group

Virtual IP

Virtual IP address of the VRRP group.

Total

Number of VRRP groups.

Master

Number of VRRP groups in Master state.

Backup

Number of VRRP groups in Backup state.

Non-active

Number of VRRP groups in Non-active state.

display vrrp bfd session

Function

The display vrrp bfd session command displays information about VRID-based dynamic BFD sessions.

Format

display vrrp bfd session { interface interface-type interface-number vrid virtual-router-id | all }

Parameters

Parameter

Description

Value

interface interface-type interface-number Displays information about VRID-based dynamic BFD session on a specified interface.
  • interface-type specifies the interface type.
  • interface-number specifies the interface number.

-

vrid virtual-router-id Displays information about dynamic BFD session based on a specified VRID.

The VRID of the VRRP group must have been created.

all Displays information about all VRID-based dynamic BFD sessions.

-

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

After creating VRID-based dynamic BFD sessions, you can run the display vrrp bfd session command to view information about these sessions.

Example

# Display information about all VRID-based dynamic BFD sessions.

<HUAWEI> display vrrp bfd session all
Total BFD session(s) for VRRP: 1
----------------------------------------------------------------
Interface                : Vlanif100
TXInterval(milliseconds) : 100 / 100 (Config / Running)
RXInterval(milliseconds) : 100 / 100 (Config / Running)
DetectMultiplier         : 3 / 3 (Config / Running)
LocalIP                  : 10.1.1.1
PeerIP                   : 10.1.1.2
BFD State                : UP
Table 15-12  Description of the display vrrp bfd session command output

Item

Description

Total BFD session(s) for VRRP

Total number of VRID-based dynamic BFD sessions.

Interface

Interface where the VRRP group is configured.

TXInterval(milliseconds)

Minimum interval at which the local device sends BFD control packets:
  • Config: configured minimum interval at which the local device sends BFD control packets
  • Running: actual minimum interval at which the local device sends BFD control packets

RXInterval(milliseconds)

Expected minimum interval at which the local device receives BFD control packets:
  • Config: configured minimum interval at which the local device receives BFD control packets
  • Running: actual minimum interval at which the local device receives BFD control packets

DetectMultiplier

Local detection multiplier:
  • Config: configured local detection multiplier
  • Running: actual local detection multiplier

LocalIP

Local IP address of the VRID-based dynamic BFD session.

PeerIP

Peer IP address of the VRID-based dynamic BFD session.

BFD State

Status of the VRID-based dynamic BFD session.
  • UP: Status of the VRID-based dynamic BFD session is UP.
  • DOWN: Status of the VRID-based dynamic BFD session is DOWN.

display vrrp binding

Function

The display vrrp binding command displays the binding of an mVRRP group, including member VRRP groups and interfaces where member VRRP groups are configured.

Format

display vrrp binding [ interface admin-interface-type admin-interface-number ] [ vrid admin-virtual-router-id ] [ member-vrrp [ interface member-interface-type member-interface-number ] [ vrid member-virtual-router-id ] ]

Parameters

Parameter

Description

Value

interface admin-interface-type admin-interface-number

Specifies the type and number of an interface where an mVRRP group is configured.

  • admin-interface-type specifies the interface type.

  • admin-interface-number specifies the interface number.

-

vrid admin-virtual-router-id

Specifies the VRID of an mVRRP group.

The VRID of the mVRRP group must have been created.

member-vrrp

Displays information about LBRG member groups.

-

interface member-interface-type member-interface-number

Specifies the type and number of an interface configured with a member VRRP group.

  • member-interface-type specifies the interface type.

  • member-interface-number specifies the interface number.

-

vrid member-virtual-router-id

Specifies the VRID of a member VRRP group.

The VRID of the member VRRP group must have been created.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

You can run the display vrrp binding admin-vrrp command to view the binding of an mVRRP group.

Example

# Display the binding of an mVRRP group.

<HUAWEI> display vrrp binding
Interface: Vlanif10,  admin-vrrp vrid: 1, state:Master
  Member-vrrp number: 3
    Interface: Vlanif11, vrid: 1, state: Master
    Interface: Vlanif12, vrid: 2, state: Master
    Interface: Vlanif13, vrid: 3, state: Master
Table 15-13  Description of the display vrrp binding admin-vrrp command output

Item

Description

Interface

Interface configured with the mVRRP group.

admin-vrrp vrid

VRID of the mVRRP group.

state

Status of the mVRRP group:
  • Master
  • Backup
  • Initialize

Member-vrrp number

Number of member VRRP groups bound to the mVRRP group.

Interface

Type and number of the interface where the member VRRP group bound to the mVRRP group is configured.

vrid

VRID of the member VRRP group bound to the mVRRP group.

state

Status of the member VRRP group bound to the mVRRP group:
  • Master
  • Backup
  • Initialize
Related Topics

display vrrp load-balance

Function

The display vrrp load-balance command displays information about a Load-Balance Redundancy Group (LBRG) and its member groups.

Format

display vrrp load-balance [ interface interface-type interface-number vrid virtual-router-id ] [ member-vrrp [ vrid member-vrrp-virtual-router-id ] ]

Parameters

Parameter

Description

Value

interface interface-type interface-number

Displays information about the LBRG and its member groups on a specified interface.

  • interface-type specifies the interface type.
  • interface-number specifies the interface number.

-

vrid virtual-router-id

Specifies the VRID of an LBRG.

The VRID of the LBRG must have been created.

member-vrrp

Displays information about LBRG member groups.

-

vrid member-vrrp-virtual-router-id

Specifies the VRID of an LBRG member group.

The VRID of the LBRG member group must have been created.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

Usage Scenario

After you add a VRRP group to an LBRG, run the display vrrp load-balance command to check whether the VRRP group is successfully added to the LBRG. If an LBRG member group is abnormal, run the display vrrp load-balance command to view information about the LBRG and its member groups.

The information includes the interface on which the LBRG and its member groups are located and the statuses of the LBRG and its member groups. The command output helps you locate faults.

Precautions

If the IDs of an LBRG and an LBRG member group are not specified, the display vrrp load-balance command displays information about all LBRGs and their member groups.

Example

# Display information about all LBRGs and their member groups.

<HUAWEI> display vrrp load-balance member-vrrp
Interface: Vlanif100, load-balance-vrrp vrid: 1, state: Master
Member-vrrp number: 2
    Member-vrrp vrid: 2, state: Backup
    Member-vrrp vrid: 3, state: Master
Table 15-14  Description of the display vrrp load-balance command output

Item

Description

Interface

Interface on which the LBRG is located.

load-balance-vrrp vrid

VRID of the LBRG.

state

Status of the LBRG:
  • Master
  • Backup
  • Initialize

Member-vrrp number

Number of member groups in the LBRG.

Member-vrrp vrid

VRID of the member group in the LBRG.

state

Status of the member group in the LBRG:
  • Master
  • Backup
  • Initialize

display vrrp protocol-information

Function

The display vrrp protocol-information command displays VRRP information.

Format

display vrrp protocol-information

Parameters

None

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

You can run the display vrrp protocol-information command to view VRRP information.

Example

# Display VRRP information.

<~HUAWEI> display vrrp protocol-information
 VRRP protocol information is shown as below:                                   
    VRRP protocol version : V2                                                  
    Send advertisement packet mode : send v2 only  
Table 15-15  Description of the display vrrp protocol-information command output
Item Description

VRRP protocol version

VRRP version number:
  • V2

  • V3

To configure a VRRP version number, run the vrrp version command.

Send advertisement packet mode

Mode in which VRRP Advertisement packets are sent:
  • send v2 only: Only VRRPv2 Advertisement packets are sent.

  • send v3 only: Only VRRPv3 Advertisement packets are sent. It is displayed only when VRRPv3 is used.

  • send v2v3 both: VRRPv2 and VRRPv3 Advertisement packets are sent. It is displayed only when VRRPv3 is used.

To configure the mode in which VRRP Advertisement packets are sent, run the vrrp vrid compatible-version command in the interface view or run the vrrp compatible-version command in the system view.

display vrrp state-change interface vrid

Function

The display vrrp state-change interface vrid command displays status changes of a specified VRRP group. This command can display a maximum of 10 of the latest status changes of a VRRP group.

Format

display vrrp state-change interface interface-type interface-number vrid virtual-router-id

Parameters

Parameter

Description

Value

interface-type interface-number

Specifies the type and number of an interface where status changes of a VRRP group are displayed.

  • interface-type specifies the interface type.

  • interface-number specifies the interface number.

-

vrid virtual-router-id

Specifies the VRID of a VRRP group.

The VRID of the VRRP group must have been created.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

When the VRRP status becomes abnormal, run the display vrrp state-change interface vrid command to view the last 10 status changes of the VRRP group, including the time at which the VRRP group status changed, the VRRP group status before and after the change, and the cause of the VRRP group status change. The command output helps you locate faults.

Example

# Display status changes of VRRP group 1 on VLANIF 100.

<HUAWEI> display vrrp state-change interface vlanif 100 vrid 1
  Time                      SourceState   DestinationState     Reason
  ----------------------------------------------------------------------
  2011-01-27 15:29:45       Backup        Master               Protocol timer expired 
  2011-01-27 15:29:42       Initialize    Backup               Interface UP 
Table 15-16  Description of the display vrrp state-change interface vrid command output

Item

Description

Time

Time when the VRRP group status changed.

SourceState

VRRP group status before the change:

  • Master

  • Backup

  • Initialize

DestState

VRRP group status after the change:

  • Master

  • Backup

  • Initialize

Reason

Cause of the VRRP status change:
  • Admin-vrrp drove

  • BFD configure deleted

  • CFM session down

  • CFM session up

  • EFM configure deleted

  • EFM session down

  • EFM session up

  • Interface up

  • Interface down

  • Ignore interface down

  • Link BFD session down

  • Link BFD session up

  • Link BFD session deleted

  • Link BFD down-number changed

  • Peer BFD session down

  • Priority calculation

  • Protocol timer expired

  • Track interface

  • Track BFD session

display vrrp statistics

Function

The display vrrp statistics command displays statistics about sent and received packets of VRRP groups.

Format

display vrrp [ interface interface-type interface-number ] [ virtual-router-id ] statistics

Parameters

Parameter

Description

Value

interface interface-type interface-number Displays statistics about sent and received packets of all VRRP groups on a specified interface.
  • interface-type specifies the interface type.
  • interface-number specifies the interface number.
If this parameter is not specified, statistics about sent and received packets of all VRRP groups or a specified VRRP group on the device are displayed.

-

virtual-router-id Displays statistics about sent and received packets of a specified VRRP group. If this parameter is not specified, statistics about sent and received packets of all VRRP groups on the device or a specified interface are displayed.

The VRID of the VRRP group must have been created.

statistics Displays statistics about sent and received packets of a VRRP group.

-

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

The display vrrp statistics command displays information about sent and received packets of VRRP groups.

Example

# Display statistics about sent and received packets of VRRP group 1 on VLANIF100.

<HUAWEI> display vrrp interface vlanif 100 1 statistics
Vlanif 100 | Virtual Router 1
                      Transited to master : 1
                      Sent advertisements : 164
                  Received advertisements : 0
            Advertisement interval errors : 0
           Failed to authentication check : 0
                   Received IP TTL errors : 0
      Received packets with priority zero : 0
          Sent packets with priority zero : 1
            Received invalid type packets : 0
  Received unmatched address list packets : 0
      Unknown authentication type packets : 0
           Mismatched authentication type : 0
                     Packet length errors : 0
   Received packets vrrp master self sent : 0

# Display statistics about all VRRP Advertisement packets on the device.

<HUAWEI> display vrrp statistics
Vlanif100 statistics information :                                              
      IP protocol number errors : 0                                             
  Destination IP address errors : 0                                             
                Checksum errors : 0                                             
                 Version errors : 0                                             
                    Vrid errors : 0                                             
                                                                                
Vlanif100 | Virtual Router 1                                       
                      Transited to master : 0                                   
                      Sent advertisements : 0                                   
                  Received advertisements : 0                                   
            Advertisement interval errors : 0                                   
           Failed to authentication check : 0                                   
                   Received IP TTL errors : 0                                   
      Received packets with priority zero : 0                                   
          Sent packets with priority zero : 0                                   
            Received invalid type packets : 0                                   
  Received unmatched address list packets : 0                                   
      Unknown authentication type packets : 0                                   
           Mismatched authentication type : 0                                   
                     Packet length errors : 0                                   
   Received packets vrrp master self sent : 0                                   
Table 15-17  Description of the display vrrp statistics command output

Item

Description

IP protocol number errors

Number of packets with incorrect IP protocol numbers.

Destination IP address errors

Number of packets with incorrect destination IP addresses.

Checksum errors

Number of packets with checksum errors.

Version errors

Number of packets with version errors.

Vrid errors

Number of packets with VRID errors.

Vlanif100 | Virtual Router 1

Interface where the VRRP group is configured and VRID of the VRRP group.

Transited to master

Number of times the switch becomes the master.

Sent advertisements

Number of sent VRRP Advertisement packets.

Received advertisements

Number of received VRRP Advertisement packets.

Advertisement interval errors

Number of times VRRP Advertisement packets are sent at an incorrect interval.

Failed to authentication check

Number of authentication failures.

Received IP TTL errors

Number of packets with TTL errors.

Received packets with priority zero

Number of received VRRP Advertisement packets with the priority of 0.

Sent packets with priority zero

Number of sent VRRP Advertisement packets with the priority of 0.

Received invalid type packets

Number of received VRRP Advertisement packets of invalid type.

Received unmatched address list packets

Number of packets with incorrect virtual IP address lists.

Unknown authentication type packets

Number of packets with an unknown authentication mode.

Mismatched authentication type

Number of packets with a non-matched authentication mode.

Packet length errors

Number of packets with incorrect length.

Received packets vrrp master self sent

Number of packets sent by the master.

display vrrp6

Function

The display vrrp6 command displays the status and configuration parameters of VRRP6 groups.

Format

display vrrp6 [ admin-vrrp | [ interface interface-type interface-number [ virtual-router-id ] | virtual-router-id ] [ verbose ] ]

Parameters

Parameter Description Description
interface interface-type interface-number Displays the status of all VRRP6 groups on the specified interface.
  • interface-type specifies the interface type.
  • interface-number specifies the interface number.
If this parameter is not specified, information about all VRRP6 groups is displayed.

-

virtual-router-id Displays the status of a VRRP6 group with the specified VRID.

The VRID of the VRRP6 group must have been created.

verbose Displays detailed information about a specified VRRP6 group.

-

admin-vrrp Displays information about an mVRRP group.

-

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

You can view the status and configuration of all VRRP6 groups based on networking, including interfaces where mVRRP6 groups are configured, and VRIDs and statuses of VRRP6 groups.

Example

# Display information about all VRRP6 groups on the switch with VRID 4.

<HUAWEI> display vrrp6 4 verbose
Vlanif100 | Virtual Router 4
State            : Master
Virtual IP       : FE80::1
                   FC00::100
Master IP        : FE80::219:74FF:FE59:3306
PriorityRun      : 200
PriorityConfig   : 200
MasterPriority   : 200
Preempt          : YES   Delay Time : 20s   Remain : --
Hold Multiplier  : 3
TimerRun         : 100cs
TimerConfig      : 100cs
Virtual MAC      : 0000-5e00-0204
Check hop limit  : YES
Config Type      : Normal
Create Time      : 2013-05-22 17:40:56
Last Change Time : 2013-05-22 17:41:03
Table 15-18  Description of the display vrrp6 verbose command output

Item

Description

Vlanif100 | Virtual Router 4

Interface where the VRRP6 group is configured and VRID of the VRRP6 group.

State

VRRP6 status of the device:
  • Master: The device functions as the master in the VRRP6 group.

  • Backup: The device functions as the backup in the VRRP6 group.

  • Initialize: All VRRP6 groups begin in Initialize state. When the status of an interface is Down or administratively Down, the VRRP6 group status changes to Initialize.

Virtual IP

Virtual IP address of the VRRP6 group. To configure a virtual IP address for a VRRP6 group, run the vrrp6 vrid virtual-ip command.

Master IP

Primary IP address of the interface configured with the VRRP6 group on the master.

PriorityRun

Priority of the switch when the VRRP6 group runs. If the switch is the IP address owner in a VRRP6 group, the running priority of the switch in the group is displayed as 255.

PriorityConfig

Priority configured for the switch using the vrrp6 vrid priority command. If the switch is the IP address owner, the default priority 100 but not 255 is displayed.

MasterPriority

Priority of the master in the VRRP6 group. If the switch is the IP address owner in a VRRP6 group, the priority of the switch in the group is displayed as 255.

Preempt

Preemption mode:
  • YES: preemption

  • NO: no preemption

To disable the preemption mode, run the vrrp6 vrid preempt disable command.

Delay Time

Preemption delay, in seconds. To set the preemption delay, run the vrrp6 vrid preempt timer delay command.

Hold Multiplier

Number of VRRP heartbeat timeouts.

Remain

Remaining time of the preemption delay.

TimerRun

Interval at which the master in the VRRP6 group sends VRRP Advertisement packets, in centiseconds.

TimerConfig

Configured interval at which the master in the VRRP6 group sends VRRP6 Advertisement packets, in centiseconds. To set the interval at which the master in the VRRP6 group sends VRRP6 Advertisement packets, run the vrrp6 vrid timer advertise command.

Virtual MAC

Virtual MAC address of the VRRP6 group.

Check hop limit

Whether the TTL value of a VRRP6 Advertisement packet is checked:
  • YES: The TTL value of a VRRP6 Advertisement packet is checked.
  • NO: The TTL value of a VRRP6 Advertisement packet is not checked.
To configure the device to check the TTL value in a VRRP6 Advertisement packet, run the vrrp6 hop-limit-check disable command.

Config Type

Type of a VRRP6 group:
  • Normal: common VRRP6 group

  • Administrator: mVRRP6 group

  • Member: member VRRP6 group

  • Load-Balance: Load-Balance Redundancy Group (LBRG)

  • Load-Balance-Member: LBRG member group

Track BFD

Local discriminator or name of the BFD session associated with the VRRP6 group. This field is displayed when only the BFD session is associated with the VRRP6 group.

Priority reduced

Value by which the VRRP6 priority reduces if the interface or BFD session associated with the VRRP6 group becomes Down.

If the Increase mode is configured, Priority increased is displayed. Priority increased indicates the value by which the VRRP6 priority increases if the interface or BFD session associated with the VRRP6 group becomes Down.

BFD-Session State

Status of the BFD session associated with the VRRP6 group:

  • UP: A BFD session is in Up state.

  • DOWN: A BFD session is in Down state.

  • AdminDown: A BFD session is in AdminDown state.

Create Time

Time when the VRRP6 group was created.

Last Change Time

Last time the VRRP6 group status changed.

# Display brief information about all VRRP6 groups on the device.

<HUAWEI> display vrrp6
Type:
  N: Normal
  A: Administrator
  M: Member
  L: Load-Balance
  LM: Load-Balance-Member
Total:1     Master:1     Backup:0     Non-active:0      
VRID  State        Interface                Type     Virtual IP     
----------------------------------------------------------------
   1  Master       Vlanif66                 N        FE80::1        
                                                     FC00::100
Table 15-19  Description of the display vrrp6 command output

Item

Description

VRID

VRID of the VRRP6 group.

State

VRRP6 status of the switch:
  • Master: The device functions as the master in the VRRP6 group.

  • Backup: The device functions as the backup in the VRRP6 group.

  • Initialize: All VRRP6 groups begin in Initialize state. When the interface where a VRRP group is configured becomes Down or is Administratively Down, the VRRP6 group status is switched to Initialize.

Interface

Interface configured with the VRRP6 group.

Type

Type of a VRRP6 group:
  • Normal: common VRRP6 group

  • Administrator: mVRRP6 group

  • Member: member VRRP6 group

  • Load-Balance: Load-Balance Redundancy Group (LBRG)

  • Load-Balance-Member: LBRG member group

Virtual IP

Virtual IP address of the VRRP6 group.

Total

Number of VRRP6 groups.

Master

Number of VRRP6 groups in Master state.

Backup

Number of VRRP6 groups in Backup state.

Non-active

Number of VRRP6 groups in Non-active state.

display vrrp6 binding

Function

The display vrrp6 binding command displays the status and configuration of all mVRRP6 groups.

Format

display vrrp6 binding [ interface admin-interface-type admin-interface-number ] [ vrid admin-virtual-router-id ] [ member-vrrp [ interface member-interface-type member-interface-number ] [ vrid member-virtual-router-id ] ]

Parameters

Parameter

Description

Value

interface admin-interface-type admin-interface-number

Specifies the type and number of an interface configured with an mVRRP6 group.

  • admin-interface-type specifies the interface type.

  • admin-interface-number specifies the interface number.

-

vrid admin-virtual-router-id

Specifies the VRID of an mVRRP6 group.

The VRID of the mVRRP6 group must have been created.

member-vrrp

Displays information about LBRG member groups.

-

interface member-interface-type member-interface-number

Specifies the type and number of an interface configured with a member VRRP6 group.

  • member-interface-type specifies the interface type.

  • member-interface-number specifies the interface number.

-

vrid member-virtual-router-id

Specifies the VRID of a member VRRP6 group.

The VRID of the member VRRP6 group must have been created.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

You can view the status and configuration of all mVRRP6 groups, including interfaces where mVRRP6 groups are configured, and VRIDs and statuses of the mVRRP6 groups.

Example

# Display the status and configuration of all mVRRP6 groups on the device.

<HUAWEI> display vrrp6 binding
Interface: Vlanif100,  admin-vrrp vrid: 1, state: Master
  Member-vrrp number: 1
    Interface: Vlanif200, vrid: 1, state: Master
Table 15-20  Description of the display vrrp binding admin-vrrp command output

Item

Description

Interface

Interface configured with the mVRRP6 group.

admin-vrrp vrid

VRID of the mVRRP6 group.

state

Status of the mVRRP6 group:
  • Master
  • Backup
  • Initialize

Member-vrrp number

Number of member VRRP6 groups bound to the mVRRP6 group.

Interface

Type and number of the interface where the member VRRP6 group bound to the mVRRP6 group is configured.

vrid

VRID of the member VRRP6 group bound to the mVRRP6 group.

state

Status of the member VRRP6 group bound to the mVRRP group:
  • Master
  • Backup
  • Initialize
Related Topics

display vrrp6 load-balance

Function

The display vrrp6 load-balance command displays information about a VRRP6 Load-Balance Redundancy Group (LBRG) and its member groups.

Format

display vrrp6 load-balance [ interface interface-type interface-number vrid virtual-router-id ] [ member-vrrp [ vrid member-vrrp-virtual-router-id ] ]

Parameters

Parameter Description Value
interface interface-type interface-number Displays information about the LBRG and its member groups on a specified interface.
  • interface-type specifies the interface type.
  • interface-number specifies the interface number.

-

vrid virtual-router-id Specifies the VRID of a VRRP6 LBRG.

The VRID of the VRRP6 LBRG must have been created.

member-vrrp Displays information about VRRP6 LBRG member groups.

-

vrid member-vrrp-virtual-router-id Specifies the VRID of a VRRP6 LBRG member group.

The VRID of the VRRP6 LBRG member group must have been created.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

Usage Scenario

After you add a VRRP6 group to a VRRP6 LBRG, run the display vrrp6 load-balance command to check whether the VRRP6 group is successfully added to the VRRP6 LBRG. If a VRRP6 LBRG member group is abnormal, run the display vrrp6 load-balance command to view information about the VRRP6 LBRG and its member groups.

The information includes the interface on which the VRRP6 LBRG and its member groups are located and the statuses of the VRRP6 LBRG and its member groups. The command output helps you locate faults.

Precautions

If the IDs of a VRRP6 LBRG and a VRRP6 LBRG member group are not specified, the display vrrp6 load-balance command displays information about all VRRP6 LBRGs and their member groups.

Example

# Display information about all VRRP6 LBRGs and their member groups.

<HUAWEI> display vrrp6 load-balance member-vrrp
Interface: Vlanif100, load-balance-vrrp vrid: 1, state: Master
Member-vrrp number: 2
    Member-vrrp vrid: 2, state: Backup
    Member-vrrp vrid: 3, state: Master
Table 15-21  Description of the display vrrp6 load-balance command output

Item

Description

Interface

Interface on which the VRRP6 LBRG is located.

load-balance-vrrp vrid

VRID of the VRRP6 LBRG.

state

Status of the VRRP6 LBRG:
  • Master
  • Backup
  • Initialize

Member-vrrp number

Number of member groups in the VRRP6 LBRG.

Member-vrrp vrid

VRID of the member group in the VRRP6 LBRG.

state

Status of the member group in the VRRP6 LBRG:
  • Master
  • Backup
  • Initialize

display vrrp6 state-change interface vrid

Function

The display vrrp6 state-change interface vrid command displays status changes of a specified VRRP6 group. This command can display a maximum of the latest 10 status changes of a VRRP6 group.

Format

display vrrp6 state-change interface interface-type interface-number vrid virtual-router-id

Parameters

Parameter Description Value
interface-type interface-number Specifies the type and number of an interface where status changes of a VRRP6 group are displayed.

-

virtual-router-id Specifies the VRID of a VRRP6 group.

The VRID of the VRRP6 group must have been created.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

When the VRRP6 status becomes abnormal, run the display vrrp6 state-change interface vrid command to view the latest 10 status changes of the VRRP6 group. The command output includes the time when the VRRP6 group status changed, VRRP6 group status before and after each change, and causes of the status changes. The command output helps you locate faults.

Example

# Display status changes of VRRP6 group 1 on VLANIF 100.

<HUAWEI> display vrrp6 state-change interface vlanif 100 vrid 1
Time                               SourceState  DestinationState   Reason
-----------------------------------------------------------------------------------------
2013-09-12 09:50:42                Backup       Master             Protocol timer expired 
2013-09-12 09:50:38                Initialize   Backup             Interface up
Table 15-22  Description of the display vrrp6 state-change interface vrid command output

Item

Description

Time

Time when the VRRP6 status changed.

SourceState

Status before the change:

  • Master
  • Backup
  • Initialize

DestinationState

Status after the change:
  • Master
  • Backup
  • Initialize

Reason

Reason of the change in the status of the VRRP6 backup group:
  • Admin-vrrp drove

  • BFD configure deleted

  • Interface up

  • Interface down

  • Link BFD session down

  • Link BFD session up

  • Link BFD session deleted

  • Peer BFD session down

  • Priority calculation

  • Protocol timer expired

  • Track interface

  • Track BFD session

  • No available active board

  • Active board restore

display vrrp6 statistics

Function

The display vrrp6 statistics command displays statistics about sent and received packets of VRRP6 groups.

Format

display vrrp6 [ interface interface-type interface-number ] [ virtual-router-id ] statistics

Parameters

Parameter Description Value
interface interface-type interface-number Displays statistics about sent and received packets of all VRRP6 groups on a specified interface.
  • interface-type specifies the interface type.
  • interface-number specifies the interface number.
If this parameter is not specified, statistics about sent and received packets of all VRRP6 groups or a specified VRRP6 group on the switch are displayed.

-

virtual-router-id Displays statistics about sent and received packets of a specified VRRP6 group. If this parameter is not specified, statistics about sent and received packets of all VRRP6 groups on the switch or a specified interface are displayed.

The VRID of the VRRP6 group must have been created.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

The display vrrp6 statistics command displays information about sent and received packets of VRRP6 groups.

Example

# Display statistics about all VRRP6 Advertisement packets on the switch.

<HUAWEI> display vrrp6 statistics
Vlanif100 statistics information :
      IP protocol number errors : 0
  Destination IP address errors : 0
                Checksum errors : 0
                 Version errors : 0
                    Vrid errors : 0

  Vlanif100 | Virtual Router 1
                            Transited to master : 1
                            Sent advertisements : 8
                        Received advertisements : 0
                  Advertisement interval errors : 0
                 Failed to authentication check : 0
                         Received IP TTL errors : 0
            Received packets with priority zero : 0
                Sent packets with priority zero : 0
                  Received invalid type packets : 0
        Received unmatched address list packets : 0
            Unknown authentication type packets : 0
                 Mismatched authentication type : 0
                           Packet length errors : 0
         Received packets vrrp master self sent : 0
Table 15-23  Description of the display vrrp6 statistics command output

Item

Description

Vlanif100 statistics information

Statistics on the interface on which the VRRP6 group is configured.

IP protocol number errors

Number of packets with incorrect IP protocol numbers.

Destination IP address errors

Number of packets with incorrect destination IP addresses.

Checksum errors

Number of packets with checksum errors.

Version errors

Number of packets with version errors.

Vrid errors

Number of packets with VRID errors.

Vlanif100 | Virtual Router 1

Interface where the VRRP6 group is configured and VRID of the VRRP6 group.

Transited to master

Number of times the switch becomes the master.

Sent advertisements

Number of sent VRRP Advertisement packets.

Received advertisements

Number of received VRRP Advertisement packets.

Advertisement interval errors

Number of times VRRP Advertisement packets are sent at an incorrect interval.

Failed to authentication check

Number of authentication failures.

Received IP TTL errors

Number of packets with TTL errors.

Received packets with priority zero

Number of received VRRP Advertisement packets with the priority of 0.

Sent packets with priority zero

Number of sent VRRP Advertisement packets with the priority of 0.

Received invalid type packets

Number of received VRRP6 Advertisement packets of invalid type.

Received unmatched address list packets

Number of packets with incorrect virtual IPv6 address lists.

Unknown authentication type packets

Number of packets with an unknown authentication mode.

Mismatched authentication type

Number of packets with a non-matched authentication mode.

Packet length errors

Number of packets with incorrect length.

Received packets vrrp master self sent

Number of packets sent by the master.

ipv6 direct-route track vrrp6

Function

The ipv6 direct-route track vrrp6 command associates IPv6 direct routes with a Virtual Router Redundancy Protocol for IPv6 (VRRP6) backup group.

The undo ipv6 direct-route track vrrp6 command dissociates IPv6 direct routes from a VRRP6 backup group.

By default, IPv6 direct routes are not associated with any VRRP6 backup group.

Format

ipv6 direct-route track vrrp6 vrid virtual-router-id degrade-cost cost-value

undo ipv6 direct-route track vrrp6 [ vrid virtual-router-id degrade-cost cost-value ]

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the ID of a VRRP6 backup group. The value is an integer ranging from 1 to 255.
degrade-cost cost-value Specifies a cost to be applied to IPv6 direct routes when the associated VRRP6 backup group is in Backup or Initialize status. The value is an integer ranging from 1 to 4294967295.

Views

GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, VLANIF interface view, Eth-Trunk interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When a VRRP6 backup group functions as a gateway, the forwarding path of user-to-network is determined by the state of the VRRP6 backup group, and the forwarding path of network-to-user traffic is selected by a dynamic routing protocol. As a result, user-to-network and network-to-user traffic may be transmitted over different paths. When a firewall needs to be deployed on the VRRP6 backup group to increase security, network-to-user traffic cannot pass through the firewall because of the inconsistent forwarding paths of network-to-user and user-to-network traffic. To address this problem, run the ipv6 direct-route track vrrp6 command to adjust the cost of IPv6 direct routes based on the VRRP6 backup group status, and configure a dynamic routing protocol to import the IPv6 direct routes.

Prerequisites

A VRRP6 group has been created.

Follow-up Procedure

Configure a dynamic routing protocol to import the IPv6 direct routes.

Precautions

The IPv6 direct routes on an interface can be associated with only one VRRP6 backup group. To change the associated VRRP6 backup group, dissociate the IPv6 direct routes from the original VRRP6 backup group first.

After the command is run, the cost of IPv6 direct routes is adjusted based on the VRRP6 backup group status, with details as follows:

  • If the VRRP6 backup group status is Master, the default value 0 (the highest priority) is used as the cost of the IPv6 direct routes.

  • If the VRRP6 backup group status is Backup or Initialize, the cost-value specified in the command is used as the cost of the IPv6 direct routes.

Example

# Associate the IPv6 direct routes on VLANIF 100 with a VRRP6 backup group.

<HUAWEI> system-view
[~HUAWEI] interface vlanif 100
[~HUAWEI-Vlanif100] ipv6 direct-route track vrrp6 vrid 1 degrade-cost 300

# Associate the IPv6 direct routes on 10GE1/0/1 with a VRRP6 backup group.

<HUAWEI> system-view
[~HUAWEI] interface 10ge 1/0/1
[~HUAWEI-10GE1/0/1] undo portswitch
[*HUAWEI-10GE1/0/1] ipv6 direct-route track vrrp6 vrid 1 degrade-cost 300

reset vrrp statistics

Function

The reset vrrp statistics command clears statistics about received and sent packets of VRRP groups.

Format

reset vrrp [ interface interface-type interface-number ] [ vrid virtual-router-id ] statistics

Parameters

Parameter Description Value
interface interface-type interface-number Clears statistics about sent and received packets of all VRRP groups on a specified interface.
  • interface-type specifies the interface type.
  • interface-number specifies the interface number.
If this parameter is not specified, statistics about sent and received packets of all VRRP groups or a specified VRRP group on the device are cleared.

-

vrid virtual-router-id Clears statistics about sent and received packets of a specified VRRP group. If this parameter is not specified, statistics about sent and received packets of all VRRP groups or a specified VRRP group on the device are cleared.

The value is an integer that ranges from 1 to 255.

NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

Views

User view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

Before recollecting statistics about VRRP Advertisement packets, run the reset vrrp statistics command to clear existing statistics.

Precautions

The cleared statistics cannot be restored. Exercise caution when executing the reset vrrp statistics command.

Example

# Clear statistics about sent and received packets of VRRP group 1 on VLANIF100.

<HUAWEI> reset vrrp interface vlanif 100 vrid 1 statistics

# Clear statistics about all the packets of VRRP group 1.

<HUAWEI> reset vrrp vrid 1 statistics

# Clear statistics about packets of all VRRP groups on the switch.

<HUAWEI> reset vrrp statistics

reset vrrp6 statistics

Function

The reset vrrp6 statistics command clears statistics about received and sent packets of VRRP6 groups.

Format

reset vrrp6 [ interface interface-type interface-number ] [ vrid virtual-router-id ] statistics

Parameters

Parameter Description Value
interface interface-type interface-number Clears statistics about sent and received packets of all VRRP6 groups on a specified interface.
  • interface-type specifies the interface type.
  • interface-number specifies the interface number.
If this parameter is not specified, statistics about sent and received packets of all VRRP6 groups or a specified VRRP6 group on the device are cleared.

-

vrid virtual-router-id Clears statistics about sent and received packets of a specified VRRP6 group. If this parameter is not specified, statistics about sent and received packets of all VRRP6 groups or a specified VRRP6 group on the device are cleared.

The value is an integer that ranges from 1 to 255.

NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

Views

User view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

Before recollecting statistics about VRRP6 Advertisement packets, run the reset vrrp6 statistics command to clear existing statistics.

Precautions

The cleared statistics cannot be restored. Exercise caution when executing the reset vrrp6 statistics command.

Example

# Clear statistics about sent and received packets of VRRP6 group 1 on VLANIF100.

<HUAWEI> reset vrrp6 interface vlanif 100 vrid 1 statistics

# Clear statistics about all the packets of VRRP6 group 1.

<HUAWEI> reset vrrp6 vrid 1 statistics

# Clear statistics about packets of all VRRP6 groups on the switch.

<HUAWEI> reset vrrp6 statistics

snmp-agent trap enable feature-name vrrp

Function

The snmp-agent trap enable feature-name vrrp command enables the trap function for the VRRP module.

The undo snmp-agent trap enable feature-name vrrp command disables the trap function for the VRRP module.

By default, the trap function is enabled for the VRRP module.

Format

snmp-agent trap enable feature-name vrrp [ trap-name { hwvrrpexttrapnonmaster | vrrptrapauthfailure | hwvrrpexttrapmasterdown | vrrptrapnewmaster } ]

undo snmp-agent trap enable feature-name vrrp [ trap-name { hwvrrpexttrapnonmaster | vrrptrapauthfailure | hwvrrpexttrapmasterdown | vrrptrapnewmaster } ]

Parameters

Parameter Description Value
trap-name Enables the trap function for the specified event. If no event type is specified using the trap-name parameter, the trap function is enabled for all events. -
hwvrrpexttrapnonmaster This trap is generated when the VRRP group status changes from Backup to Initialize or from Initialize to Backup. -
vrrptrapauthfailure Enables the vrrptrapauthfailure trap. When the authentication mode and key in the received packet conflicts with those on the switch, the switch sends this trap message to the NMS. -
hwvrrpexttrapmasterdown Enables the hwvrrpexttrapmasterdown trap. When the VRRP status changes from the Master state to the Backup or Initialize state, the switch sends this trap message to the NMS. -
vrrptrapnewmaster Enables the vrrptrapnewmaster trap. When the VRRP status change from Backup or Initialize to Master, the switch sends this trap message to the NMS. -

Views

System view

Default Level

3: Management level

Usage Guidelines

You can specify trap-name to enable the trap function for one or more events of the VRRP module.

Example

# Enable the vrrptrapauthfailure trap.

<HUAWEI> system-view
[~HUAWEI] snmp-agent trap enable feature-name vrrp trap-name vrrptrapauthfailure

vrrp advertise vlan

Function

The vrrp advertise vlan command configures a mode in which the master sends VRRP Advertisement packets in a super-VLAN.

The undo vrrp advertise vlan command restores the default mode in which the master sends VRRP Advertisement packets in a super-VLAN.

By default, the master sends VRRP Advertisement packets to a sub-VLAN that is Up and has the smallest VLAN ID in a super-VLAN.

Format

vrrp advertise vlan { sub-vlan-id | all }

undo vrrp advertise vlan

Parameters

Parameter Description Value
sub-vlan-id Specifies the ID of a sub-VLAN where the master sends VRRP Advertisement packets. The value is an integer that ranges from 1 to 4094, except reserved VLAN IDs, which can be configured using the vlan reserved command.
all Indicates that the master sends VRRP Advertisement packets to all sub-VLANs in a super-VLAN. -

Views

VLANIF interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When a VRRP group is configured in a super-VLAN, run the vrrp advertise send-mode command to configure the master to send VRRP Advertisement packets to a specified sub-VLAN or all sub-VLANs in the super-VLAN. If there are a large number of sub-VLANs in a super-VLAN, to save bandwidth, configure the master to send VRRP Advertisement packets to a specified sub-VLAN.

Prerequisites

A VRRP group has been configured on the VLANIF interface corresponding to the super-VLAN.

Precautions

If all is specified, the master broadcasts VRRP Advertisement packets to all sub-VLANs of a super-VLAN, increasing the CPU usage.

Example

# Configure the master to broadcast VRRP Advertisement packets to all sub-VLANs in super-VLAN 100.

<HUAWEI> system-view
[~HUAWEI] vlan 100
[*HUAWEI-vlan100] aggregate-vlan
[*HUAWEI-vlan100] quit
[*HUAWEI] interface vlanif 100
[*HUAWEI-Vlanif100] vrrp vrid 1 virtual-ip 10.10.10.10
[*HUAWEI-Vlanif100] vrrp advertise vlan all

vrrp gratuitous-arp interval

Function

The vrrp gratuitous-arp interval command sets the interval at which the master sends gratuitous ARP packets.

The undo vrrp gratuitous-arp interval command restores the default interval at which the master sends gratuitous ARP packets.

By default, the master sends gratuitous ARP packets every 120s.

Format

vrrp gratuitous-arp interval interval

undo vrrp gratuitous-arp interval

Parameters

Parameter Description Value
interval interval Specifies the interval at which the master sends gratuitous ARP packets. The value is an integer that ranges from 30 to 1200, in seconds.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

After an active/standby switchover is performed, the master in a VRRP group periodically sends gratuitous ARP packets to update MAC address entries on the downstream switch.

Precautions
  • If a short interval is used, bandwidth resources will be consumed. If a long interval is used, MAC address entries on the downstream switch cannot be updated immediately.

  • The interval at which the master sends gratuitous ARP packets must be shorter than the aging time of MAC address entries on user devices.

Set the interval based on actual networking:

  • To restore the default interval at which the master sends gratuitous ARP packets, run the undo vrrp gratuitous-arp interval command in the system view.

  • If gratuitous ARP packets do not need to be sent, run the vrrp gratuitous-arp interval disable command in the system view.

Example

# Set the interval at which the master sends gratuitous ARP packets to 100 seconds.

<HUAWEI> system-view
[~HUAWEI] vrrp gratuitous-arp interval 100

vrrp gratuitous-arp interval disable

Function

The vrrp gratuitous-arp interval disable command disables the master from sending gratuitous ARP packets.

By default, the master sends gratuitous ARP packets every 120s.

Format

vrrp gratuitous-arp interval disable

Parameters

None

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When a VRRP group is running properly, the master periodically sends gratuitous ARP packets so that MAC address entries on the downstream switch can be updated immediately. Sending gratuitous ARP packets may cause ARP attacks. If the system requires high security, run the vrrp gratuitous-arp interval disable command to disable the master from sending gratuitous ARP packets.

Precautions

After the vrrp gratuitous-arp interval disable command is executed, the master does not send gratuitous ARP packets. If a VRRP active/standby switchover occurs, MAC address entries on the downstream switch may be not updated immediately, causing data loss on the downstream switch.

Example

# Disable the master from sending gratuitous ARP packets.

<HUAWEI> system-view
[~HUAWEI] vrrp gratuitous-arp interval disable

vrrp member-lbrg timer hello

Function

The vrrp member-lbrg timer hello command configures an interval at which the master device in a load-balance redundancy group (LBRG) configured using a service VRRP backup group sends VRRP Advertisement packets.

The undo vrrp member-lbrg timer hello command restores the default interval.

The default interval is 120s.

Format

vrrp member-lbrg timer hello hello-time

undo vrrp member-lbrg timer hello [ hello-time ]

Parameters

Parameter Description Value
hello-time

Specifies an interval at which the master device in an LBRG configured using a service VRRP backup group sends VRRP Advertisement packets.

The value is an integer ranging from 10 to 120, in seconds.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

After a service VRRP backup group is configured as an LBRG, it does not periodically send gratuitous ARP packets (for VRRP4) or ND packets (for VRRP6) to update MAC entries on a downstream switch. To prevent a master/backup switchover from occurring on the LBRG and ensure that the downstream switch promptly updates MAC entries, the master device in the LBRG periodically sends VRRP Advertisement packets to update the MAC address of the downstream switch.

To ensure that the MAC entries on the downstream switch can be promptly updated, you can configure an interval at which the master device in the LBRG sends VRRP Advertisement packets to meet requirements for network reliability.

Precautions

This command supports both service VRRP4 and VRRP6 LBRGs.

Example

# Set an interval at which the master device in an LBRG configured using a service VRRP backup group sends VRRP Advertisement packets to 100s.

<HUAWEI> system-view
[~HUAWEI] vrrp member-lbrg timer hello 100

vrrp recover-delay

Function

The vrrp recover-delay command sets the delay before a VRRP group recovers.

The undo vrrp recover-delay command restores the default delay before a VRRP group recovers.

By default, the delay before a VRRP group recovers is 0.

Format

vrrp recover-delay delay-value

undo vrrp recover-delay

Parameters

Parameter Description Value
delay-value Specifies the delay before a VRRP group recovers. The value is an integer that ranges from 0 to 3600, in seconds.

Views

System view, GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, VLANIF interface view, Eth-Trunk interface view, VBDIF interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When an interface or a BFD session associated with a VRRP group alternates between Up and Down states, the VRRP group status may flap, causing user traffic loss. To solve this problem, run the vrrp recover-delay command to set the delay before a VRRP group recovers. A VRRP group then only responds to the interface or BFD session Up event after the delay expires.

Precautions
  • When the device in a VRRP group restarts, the VRRP group status may flap. It is recommended that the delay be set based on actual networking.

  • After an interface or a BFD session associated with a VRRP group alternates between Up and Down states, the system only records logs and alarms at one time during each delay. This prevents the same alarms from being displayed repeatedly.

Example

# Set the delay before a VRRP group recovers to 5 seconds.

<HUAWEI> system-view
[~HUAWEI] vrrp recover-delay 5

vrrp timer advertise learning disable

Function

The vrrp timer advertise learning disable command disables the device from learning the interval for sending VRRP Advertisement packets.

The undo vrrp timer advertise learning enable command enables the device to learn the interval for sending VRRP Advertisement packets.

By default, the device is enabled to learn the interval for sending VRRP Advertisement packets.

Format

vrrp timer advertise learning disable

undo vrrp timer advertise learning disable

Parameters

None

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

The master in a VRRP group periodically sends a VRRP Advertisement packet to non-master devices, notifying that the master itself works properly. After receiving the VRRP Advertisement packet, each non-master device compares the VRRP priority in the packet with the local setting.
  • If the interval carried in the received VRRP Advertisement packet is the same as the local interval, the non-master device will discard the packet, reset the Adver_Timer, and continue monitoring the master.

  • If they are different and the non-master device is unable to learn the interval at which VRRP Advertisement packets are sent, the non-master device discards the VRRP Advertisement packet, but does not reset the Adver_Timer. After the Adver_Timer expires, the non-master device switches to the Master state. As a result, two masters coexist. To prevent this problem, run the undo vrrp timer advertise learning disable command to enable the device to learn the interval at which a VRRP Advertisement packet is sent. The backup learns the interval and synchronizes the Adver_Timers with that on the master, ensuring proper VRRP negotiation.

Precautions

If the vrrp timer advertise learning disable command is run to disable the device from sending VRRP Advertisement packets, run the vrrp vrid timer advertise command to set the same interval on devices in the same VRRP group. If devices in a VRRP group use different intervals, VRRP negotiation fails and two masters coexist.

After the undo vrrp timer advertise learning disable command is run to disable a device from learning the interval at which a VRRP Advertisement packet is sent, GR is disabled.

Example

# Enable the device to learn the interval for sending VRRP Advertisement packets.

<HUAWEI> system-view
[~HUAWEI] undo vrrp timer advertise learning disable

vrrp check ttl disable

Function

The vrrp check ttl disable command disables the device from checking the TTL value in VRRP Advertisement packets.

The undo vrrp check ttl disable command enables the device to check the TTL value in VRRP Advertisement packets.

By default, the system checks the TTL value in VRRP Advertisement packets.

Format

vrrp check ttl disable

undo vrrp check ttl disable

Parameters

None

Views

GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, VLANIF interface view, Eth-Trunk interface view, VBDIF interface view

Default Level

2: Configuration level

Usage Guidelines

As defined by RFC 2338, the device checks the TTL value in received VRRP Advertisement packets. If the TTL value in a VRRP Advertisement packet is not 255, the device discards the VRRP Advertisement packet and generates a log about the VRRP Advertisement packet error.

On certain networks, especially on a network where the device interworks with non-Huawei devices, valid packets may be discarded if TTL check is enabled. You can configure the device not to check the TTL value in VRRP Advertisement packets.

Example

# Disable the switch from checking the TTL value in VRRP Advertisement packets.
<HUAWEI> system-view
[~HUAWEI] interface vlanif 100
[*HUAWEI-Vlanif100] vrrp check ttl disable
Related Topics

vrrp version

Function

The vrrp version command configures a VRRP version number.

The undo vrrp version command restores the default VRRP version number.

By default, VRRPv2 is used.

Format

vrrp version { 2 | 3 }

undo vrrp version

Parameters

Parameter Description Value
2

Indicates that VRRPv2 is used.

-
3

Indicates that VRRPv3 is used.

-

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

If VRRPv2 and VRRPv3 are used on a network and devices running VRRPv2 need to communicate with devices running VRRPv3, run the vrrp version command to specify a VRRP version number.

Precautions

A VRRPv2 group can only send and receive VRRPv2 Advertisement packets. It discards the received VRRPv3 Advertisement packets.

A VRRPv3 group can send and receive both VRRPv2 and VRRPv3 Advertisement packets. You can configure a mode in which VRRPv3 Advertisement packets are sent so that devices running VRRPv2 and VRRPv3 can communicate.

After the undo vrrp version command is run, the VRRPv3 mode configured using the vrrp vrid compatible-version command is deleted and the VRRPv2 mode is globally used.

Follow-up Procedure

After VRRPv3 is used, run the vrrp compatible-version command in the system view or the vrrp vrid compatible-version command in the interface view to configure a mode in which VRRP Advertisement packets are sent.

Example

# Set the VRRP version of the device to VRRPv3.

<HUAWEI> system-view
[~HUAWEI] vrrp version 3

vrrp compatible-version

Function

The vrrp compatible-version command configures a mode in which VRRPv3 Advertisement packets are sent.

The undo vrrp compatible-version command restores the default mode in which VRRPv3 Advertisement packets are sent.

By default, the mode is v3-only.

Format

vrrp compatible-version { 2 | 3 | all }

undo vrrp compatible-version

Parameters

Parameter Description Value
2 Indicates that the device sends only VRRPv2 Advertisement packets. -
3 Indicates that the device sends only VRRPv3 Advertisement packets. -
all Indicates that the device sends both VRRPv2 and VRRPv3 Advertisement packets. -

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

If devices in a VRRP group use different VRRP version numbers, the VRRP group may fail to negotiate the status. This is because a VRRPv2-enabled device can only receive VRRPv2 Advertisement packets and discards the received VRRPv3 Advertisement packets. You can configure a mode in which VRRP Advertisement packets are sent so that devices running VRRPv2 and VRRPv3 in the VRRP group can negotiate the status.

Prerequisites

The VRRP version number of a device has been configured as 3 using the vrrp version 3 command.

Precautions

Example

# Set the mode in which VRRPv3 Advertisement packets are sent to 2.

<HUAWEI> system-view
[~HUAWEI] vrrp compatible-version 2
Related Topics

vrrp virtual-ip ping disable

Function

The vrrp virtual-ip ping disable command disables the master from responding to ping packets sent to a virtual IP address.

The undo vrrp virtual-ip ping disable command enables the master to respond to ping packets sent to a virtual IP address.

By default, the master is enabled to respond to ping packets sent to a virtual IP address.

Format

vrrp virtual-ip ping disable

undo vrrp virtual-ip ping disable

Parameters

None

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario
The switch allows user devices to ping a virtual IP address to serve the following purposes:
  • Monitors the operating status of the master in a VRRP group.

  • Monitors communication between a user device and a network connected by a default gateway using the virtual IP address.

Precautions

If the ping to a virtual IP address is enabled, a device on an external network can ping a virtual IP address. This imposes the switch to ICMP-based attacks.

After the vrrp virtual-ip ping disable command is run to disable the master from responding to ping packets sent to a virtual IP address, the host route for the virtual IP address is deleted. As a result, services transmitted using the host route are interrupted. For example, after the vrrp virtual-ip ping disable command is run, the GRE tunnel with the source IP address of a virtual IP address goes Down.

Example

# Disable the master from responding to ping packets.

<HUAWEI> system-view
[~HUAWEI] vrrp virtual-ip ping disable

vrrp virtual-ip route-advertise disable

Function

The vrrp virtual-ip route-advertise disable command disables a dynamic routing protocol from advertising routes generated by the virtual IP address of a VRRP group.

The undo vrrp virtual-ip route-advertise disable command enables a dynamic routing protocol to advertise routes generated by the virtual IP address of a VRRP group.

By default, a dynamic routing protocol is enabled to advertise routes generated by the virtual IP address of a VRRP group.

Format

vrrp virtual-ip route-advertise disable [ isis | ospf | rip ] *

undo vrrp virtual-ip route-advertise disable

Parameters

Parameter Description Value
isis Disables IS-IS from advertising the routes generated by the virtual IP address of a VRRP group. -
ospf Disables OSPF from advertising the routes generated by the virtual IP address of a VRRP group. -
rip Disables RIP from advertising the routes generated by the virtual IP address of a VRRP group. -

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

Direct routes generated by the virtual IP address of a VRRP group can be imported to a dynamic routing protocol. By default, these routes are advertised by a dynamic routing protocol to neighbors. In practice, a large number of routes may be generated by the virtual IP address of a VRRP group. If a dynamic routing protocol imports theses routes and advertises them to neighbors, there is a heavy burden on network devices and network performance deteriorates. You can run the vrrp virtual-ip route-advertise disable command to disable a dynamic routing protocol from advertising routes generated by the virtual IP address of a VRRP group.

Prerequisites

  • A virtual IP address has been configured for a VRRP group.
  • A dynamic routing protocol has imported routes generated by the virtual IP address of the VRRP group.

Precautions

After the vrrp virtual-ip route-advertise disable command is executed, routes generated by virtual IP addresses of all VRRP groups cannot be advertised by a dynamic routing protocol.

The vrrp virtual-ip route-advertise disable command is only valid for OSPF, IS-IS, and RIP.

If routes generated by the virtual IP address of a VRRP group must be advertised by a dynamic routing protocol, do not run the vrrp virtual-ip route-advertise disable command.

Example

# Disable a dynamic routing protocol from advertising routes generated by the virtual IP address of a VRRP group.

<HUAWEI> system-view
[~HUAWEI] vrrp virtual-ip route-advertise disable

vrrp vrid authentication-mode

Function

The vrrp vrid authentication-mode command configures an authentication mode and an authentication key for a VRRP group.

The undo vrrp vrid authentication-mode command cancels the authentication mode and authentication key for a VRRP group.

By default, a VRRP group uses non-authentication.

Format

vrrp vrid virtual-router-id authentication-mode { simple { key | plain key | cipher cipher-key } | md5 md5-key }

undo vrrp vrid virtual-router-id authentication-mode

Parameters

Parameter

Description

Value

vrid virtual-router-id

Specifies the VRID of a VRRP group.

The value is an integer that ranges from 1 to 255.

NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

simple

Indicates simple authentication.

-

key

Specifies the authentication key in simple authentication mode.

The value is a string of 1 to 8 case-sensitive characters without spaces. When double quotation marks are used around the string, spaces are allowed in the string.

plain key

Specifies the authentication key in plain text authentication mode.

NOTE:

If plain is selected, the password is saved in the configuration file in plain text. This brings security risks. It is recommended that you select cipher to save the password in cipher text.

The value is a string of 1 to 8 case-sensitive characters without spaces. When double quotation marks are used around the string, spaces are allowed in the string.

cipher cipher-key

Specifies the authentication key in cipher text authentication mode.

The value a string of case-sensitive characters, spaces not supported. When quotation marks are used around the string, spaces are allowed in the string. Passwords are saved in ciphertext in the configuration file with the length of 32/48/108. Either of the following passwords can be set:
  • A simple text password is a string of 1 to 8 characters.
  • A ciphertext password is a string of 32/48/108 characters.
NOTE:

Ciphertext passwords with various lengths configured in an earlier version are also supported in the existing version.

md5 md5-key

Specifies the authentication key in MD5 authentication mode.

The value a string of case-sensitive characters, spaces not supported. When quotation marks are used around the string, spaces are allowed in the string. Passwords are saved in ciphertext in the configuration file with the length of 32/48/108. Either of the following passwords can be set:
  • A simple text password is a string of 1 to 8 characters.
  • A ciphertext password is a string of 32/48/108 characters.
NOTE:

Ciphertext passwords with various lengths configured in an earlier version are also supported in the existing version.

NOTE:

For security purposes, you are advised to use MD5 as the authentication algorithm of VRRP.

Views

GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, VLANIF interface view, Eth-Trunk interface view, VBDIF interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

To be compatible with VRRP defined in RFC 2338 and interwork with other devices, VRRP provides simple authentication and MD5 authentication. The vrrp vrid authentication-mode command configures an authentication mode and an authentication key for a VRRP group.

Prerequisites

A VRRP group has been configured on a specified interface.

Precautions

Devices in a VRRP group must be configured with the same authentication mode and authentication key; otherwise, the VRRP group cannot negotiate the Master and Backup states.

If all virtual IP addresses assigned to a VRRP backup group are deleted, the system automatically deletes the VRRP backup group.

Example

# Set the authentication mode of the VRRP group with VRID 2 on VLANIF100 to MD5 authentication and set the authentication key to Huawei-1.
<HUAWEI> system-view
[~HUAWEI] interface vlanif 100
[*HUAWEI-Vlanif100] vrrp vrid 2 virtual-ip 10.1.1.1
[*HUAWEI-Vlanif100] vrrp vrid 2 authentication-mode md5 Huawei-1
# Set the authentication mode of the VRRP group with VRID 2 on 10GE1/0/1 to MD5 authentication and set the authentication key to Huawei-1.
<HUAWEI> system-view
[~HUAWEI] interface 10ge 1/0/1
[*HUAWEI] undo portswitch
[*HUAWEI-10GE1/0/1] vrrp vrid 2 virtual-ip 10.1.1.1
[*HUAWEI-10GE1/0/1] vrrp vrid 2 authentication-mode md5 Huawei-1
Related Topics

vrrp vrid bfd

Function

The vrrp vrid bfd command configures parameters for a VRID-based dynamic BFD session.

The undo vrrp vrid bfd command restores the default parameter values for a VRID-based dynamic BFD session.

By default, the minimum intervals at which the local device receives and sends BFD control packets are 1000 ms, and the local detection multiplier is 3.

Format

vrrp vrid virtual-router-id bfd { min-rx-interval receive-interval | min-tx-interval transmit-interval | detect-multiplier multiplier-value } *

undo vrrp vrid virtual-router-id bfd { min-rx-interval | min-tx-interval | detect-multiplier } *

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the VRID of a VRRP group.

The value is an integer that ranges from 1 to 255.

NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

min-rx-interval receive-interval Specifies the expected minimum interval at which the local device receives BFD control packets. The value is an integer. The value ranges from 3 to 1000 on the CE6880EI and 50 to 1000 on other models. The value is expressed in milliseconds. The default value is 1000 ms.
min-tx-interval transmit-interval Specifies the minimum interval at which the local device sends BFD control packets. The value is an integer. The value ranges from 3 to 1000 on the CE6880EI and 50 to 1000 on other models. The value is expressed in milliseconds. The default value is 1000 ms.
detect-multiplier multiplier-value Specifies the local detection multiplier.

The value is an integer that ranges from 3 to 50.

Views

GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, VLANIF interface view, Eth-Trunk interface view, VBDIF interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

After creating a VRID-based dynamic BFD session, run the vrrp vrid bfd command to configure parameters for the BFD session. You can configure appropriate parameters as required to improve BFD session detection efficiency and network reliability.

Prerequisites

A VRID-based dynamic BFD session has been created using the vrrp vrid virtual-router-id bfd peer-ip peer-ip-address command.

Configuration Impact

The actual minimum interval at which the local device receives BFD control packets is obtained after the negotiation between the value of receive-interval at the local end and the value of transmit-interval at the remote end. If the local device does not receive any BFD control packet from its peer within the actual minimum interval multiplied by the value of multiplier-value, the local device declares that the link fails and notifies the VRRP module of the fault.

Example

# Set both the minimum interval for sending BFD packets and the minimum interval for receiving BFD packets to 500 ms and the local detection multiplier to 4 on VLANIF100.

<HUAWEI> system-view
[~HUAWEI] bfd
[*HUAWEI-bfd] quit
[*HUAWEI] interface vlanif 100
[*HUAWEI-Vlanif100] ip address 10.1.1.1 24
[*HUAWEI-Vlanif100] vrrp vrid 1 virtual-ip 10.1.1.3
[*HUAWEI-Vlanif100] vrrp vrid 1 bfd peer-ip 10.1.1.2
[*HUAWEI-Vlanif100] vrrp vrid 1 bfd min-rx-interval 500 min-tx-interval 500 detect-multiplier 4

vrrp vrid backup-forward

Function

The vrrp vrid backup-forward command enables the backup device in a VRRP backup group to forward traffic.

The undo vrrp vrid backup-forward command disables the backup device in a VRRP backup group from forwarding traffic.

By default, the backup device in a VRRP backup group is disabled from forwarding traffic.

Format

vrrp vrid virtual-router-id backup-forward

undo vrrp vrid virtual-router-id backup-forward

Parameters

Parameter Description Value
virtual-router-id Specifies the ID of a VRRP backup group. The value is an integer ranging from 1 to 255.
NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

Views

VBDIF interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

On large aggregation networks of enterprises, terminal users use active and standby links to access aggregation devices that have a VRRP backup group deployed. The aggregation device connects to the active link is the master device, and that connects to the standby link is the backup device. If the active link or the master device fails, a link switchover occurs. However, the master/backup switchover in the VRRP backup group has not yet completed. Therefore, a traffic interruption occurs and lasts for a short period.

To prevent traffic interruptions in such scenarios, run the vrrp vrid backup-forward command to enable the backup device in a VRRP backup group to forward traffic. This configuration ensures carrier-class reliability.

Prerequisites

A VRRP backup group has been created using the vrrp vrid virtual-ip command in the interface view.

Precautions

The backup device can forward traffic with the destination MAC address being the virtual MAC address. If a downstream switch broadcasts a packet with the destination MAC address being the virtual MAC address, the backup device will also forward this packet. Therefore, two copies of this packet will be sent. To prevent duplicate traffic, do not run the vrrp vrid backup-forward command in scenarios other than the one where high reliability is required on large aggregation networks of enterprises.

Example

# Create VRRP backup group 1 on VBDIF1 and enable the backup device in the VRRP backup group to forward traffic.

<HUAWEI> system-view
[~HUAWEI] interface vbdif 1
[*HUAWEI-Vbdif1] vrrp vrid 1 virtual-ip 10.1.1.100
[*HUAWEI-Vbdif1] vrrp vrid 1 backup-forward
Related Topics

vrrp vrid bfd peer-ip

Function

The vrrp vrid bfd peer-ip command creates a VRID-based dynamic BFD session for a VRRP group and configures a peer IP address for the BFD session.

The undo vrrp vrid bfd command deletes a VRID-based dynamic BFD session and the peer IP address configured for the BFD session.

By default, no VRID-based dynamic BFD session is created for a VRRP group.

Format

vrrp vrid virtual-router-id bfd peer-ip peer-ip-address

undo vrrp vrid virtual-router-id bfd

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the VRID of a VRRP group.

The value is an integer that ranges from 1 to 255.

NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

peer-ip peer-ip-address Specifies the peer IP address of a VRID-based dynamic BFD session.

The value is in dotted decimal notation.

Views

GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, VLANIF interface view, Eth-Trunk interface view, VBDIF interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

If the link between devices in a VRRP group fails, the VRRP group performs an active/standby switchover only after three times the interval at which VRRP Advertisement packets are sent. During this period, user data may be lost. To prevent this issue, run the vrrp vrid bfd command to create a VRID-based dynamic BFD session for the VRRP group. The BFD session then monitors the link status in real time. When the BFD session detects a link fault and goes Down, the BFD module immediately instructs the VRRP module to perform a rapid active/standby.

Prerequisites

The following operations have been performed:

Configuration Impact

After you run the vrrp vrid bfd command to create a VRID-based dynamic BFD session for a VRRP group, you cannot associate the VRRP group with a peer BFD session.

Example

# Create a VRID-based dynamic BFD session for VRRP group 1 on VLANIF100, and set the peer IP address of the session to 10.1.1.2.

<HUAWEI> system-view
[~HUAWEI] bfd
[*HUAWEI-bfd] quit
[*HUAWEI] interface vlanif 100
[*HUAWEI-Vlanif100] ip address 10.1.1.1 24
[*HUAWEI-Vlanif100] vrrp vrid 1 virtual-ip 10.1.1.3
[*HUAWEI-Vlanif100] vrrp vrid 1 bfd peer-ip 10.1.1.2

vrrp vrid fast-resume

Function

The vrrp vrid fast-resume command enables rapid VRRP switchback.

The undo vrrp vrid fast-resume command disables rapid VRRP switchback.

By default, rapid VRRP switchback is disabled.

Format

vrrp vrid virtual-router-id fast-resume

undo vrrp vrid virtual-router-id fast-resume

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the VRID of a VRRP group.

The value is an integer that ranges from 1 to 255.

NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

Views

GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, VLANIF interface view, Eth-Trunk interface view, VBDIF interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When VRRP-enabled devices are connected to the downlink device over the active and standby links, user-side traffic is transmitted to the master over the active link. The master then forwards the user-side traffic to the Internet. If the interface monitored by the master or the active link to the master fails, the master reduces its own VRRP priority and enters the Backup state. User-side traffic then switches to the standby link. The original master can switch back to the Master state only after the original master's VRRP priority recovers and the original master receives VRRP Advertisement packets from the new master. If the active/standby link switchback is finished before the active/standby VRRP switchback, user-side traffic is lost. To resolve this issue, enable rapid VRRP switchback.

When the original master's VRRP priority recovers, rapid VRRP switchback enables the original master to immediately switch to the master without waiting for VRRP Advertisement packets from the new master.

NOTE:

Rapid VRRP switchback takes effect for only the mVRRP group. In addition, the master in the mVRRP group reduces its priority when the associated interface or session goes Down.

Prerequisites

The following operations have been performed:

  1. Run the vrrp vrid admin command in the interface view to create an mVRRP group.

  2. Run the vrrp vrid preempt timer delay command in the interface view to set the preemption delay to 0 seconds if you have set the preemption delay to a non-0 value.

Precautions

If the original master recovers, it immediately switches to the master without waiting for VRRP Advertisement packets from the current master. As a result, two masters coexist during a short period of time.

The vrrp vrid fast-resume command takes precedence over the vrrp recover-delay command. For example, if you enable rapid VRRP switchback for VRRP group 1 and globally set the recovery delay to a non-0 value, the configured recovery delay does not take effect.

After you run the vrrp vrid fast-resume command to enable rapid VRRP switchback, this function is disabled if any of the following conditions is met:

Example

# Create VRRP group 1 on VLANIF 100, configure it as an mVRRP group, and enable rapid VRRP switchback.

<HUAWEI> system-view
[~HUAWEI] interface vlanif 100
[*HUAWEI-Vlanif100] vrrp vrid 1 admin
[*HUAWEI-Vlanif100] vrrp vrid 1 preempt timer delay 0
[*HUAWEI-Vlanif100] vrrp vrid 1 fast-resume

vrrp vrid holding-multiplier

Function

The vrrp vrid holding-multiplier command sets a multiplier of the interval at which VRRP Advertisement packets are sent for the timeout period of a backup device in a VRRP backup group.

The undo vrrp vrid holding-multiplier command restores the default multiplier of the interval at which VRRP Advertisement packets are sent for the timeout period of a backup device in a VRRP backup group.

By default, the timeout period of a backup device in a VRRP backup group is three times the interval at which VRRP Advertisement packets are sent.

Format

vrrp vrid virtual-router-id holding-multiplier holding-multiplier-value

undo vrrp vrid virtual-router-id holding-multiplier [ holding-multiplier-value ]

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the ID of a VRRP backup group. The value is an integer ranging from 1 to 255.
NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

holding-multiplier holding-multiplier-value Specifies a multiplier of the interval at which VRRP Advertisement packets are sent for the timeout period of a backup device in a VRRP backup group. The value is an integer ranging from 3 to 10.

Views

GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, VLANIF interface view, Eth-Trunk interface view, VBDIF interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

The timeout period of a backup device in a VRRP backup group is three times the interval at which VRRP Advertisement packets are sent. To set a multiplier of the interval at which VRRP Advertisement packets are sent for the timeout period of a backup device in a VRRP backup group, run the vrrp vrid holding-multiplier command.

Prerequisites

A VRRP backup group has been configured using the vrrp vrid virtual-ip command.

Precautions

If a VRRP backup group is configured to monitor a service (for example, VRRP association with BFD or NQA), the vrrp vrid holding-multiplier command hardly affects the timeout period of a backup device.

If a VRRP backup group is not configured to monitor a service (for example, VRRP association with link/peer BFD), a larger multiplier results in a longer timeout period for a backup device when the interval at which VRRP Advertisement packets are sent is the same.

Example

# Set a multiplier of the interval at which VRRP Advertisement packets are sent for the timeout period of a backup device in VRRP backup group 1 to 4.

<HUAWEI> system-view
[~HUAWEI] interface vlanif 100
[*HUAWEI-Vlanif100] vrrp vrid 1 virtual-ip 10.10.10.1
[*HUAWEI-Vlanif100] vrrp vrid 1 holding-multiplier 4

vrrp vrid join load-balance-vrrp

Function

The vrrp vrid join load-balance-vrrp command adds a specified VRRP group to a Load-Balance Redundancy Group (LBRG).

The undo vrrp vrid join load-balance-vrrp command deletes a specified VRRP group from an LBRG.

By default, no VRRP group is added to an LBRG.

Format

vrrp vrid virtual-router-id join load-balance-vrrp vrid lb-vrid-value

undo vrrp vrid virtual-router-id join load-balance-vrrp

Parameters

Parameter

Description

Value

vrid virtual-router-id

Specifies the VRID of a VRRP group.

The value is an integer that ranges from 1 to 255.

NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

vrid lb-vrid-value

Specifies the VRID of an LBRG.

The value is an integer that ranges from 1 to 255.

NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

Views

GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, VLANIF interface view, Eth-Trunk interface view, VBDIF interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

To implement single-gateway load balancing, run the vrrp vrid join load-balance-vrrp command to add a specified VRRP group to an LBRG. The LBRG uses the virtual MAC addresses of the VRRP groups to respond to different users' ARP request packets destined for virtual IP addresses so that the master of a specified VRRP group forwards the traffic of a specified user. This implements load balancing.

Prerequisites

The vrrp vrid virtual-router-id [ virtual-ip virtual-address ] command has been executed to create a VRRP group.
  • If you use the VRRP group as an LBRG, you must assign a virtual IP address to the VRRP group.
  • If you use the VRRP group as an LBRG member group, you do not need to assign a virtual IP address to the VRRP group.

The vrrp vrid virtual-router-id load-balance command has been executed to create an LBRG.

Example

# Create an LBRG on VLANIF100 and add a VRRP group to the LBRG.

<HUAWEI> system-view
[~HUAWEI] interface vlanif 100
[*HUAWEI-Vlanif100] vrrp vrid 1 virtual-ip 10.10.10.10
[*HUAWEI-Vlanif100] vrrp vrid 1 load-balance
[*HUAWEI-Vlanif100] vrrp vrid 2
[*HUAWEI-Vlanif100] vrrp vrid 2 join load-balance-vrrp vrid 1

# Create an LBRG on 10GE1/0/1 and add a VRRP group to the LBRG.

<HUAWEI> system-view
[~HUAWEI] interface 10ge 1/0/1
[~HUAWEI-10GE1/0/1] undo portswitch
[*HUAWEI-10GE1/0/1] vrrp vrid 1 virtual-ip 10.10.10.10
[*HUAWEI-10GE1/0/1] vrrp vrid 1 load-balance
[*HUAWEI-10GE1/0/1] vrrp vrid 2
[*HUAWEI-10GE1/0/1] vrrp vrid 2 join load-balance-vrrp vrid 1

vrrp vrid load-balance

Function

The vrrp vrid load-balance command configures a VRRP group as a Load-Balance Redundancy Group (LBRG).

The undo vrrp vrid load-balance command restores an LBRG to a VRRP group.

By default, no LBRG is configured.

Format

vrrp vrid virtual-router-id load-balance

undo vrrp vrid virtual-router-id load-balance

Parameters

Parameter

Description

Value

vrid virtual-router-id

Specifies the VRID of a VRRP group.

The value is an integer that ranges from 1 to 255.

NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

Views

GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, VLANIF interface view, Eth-Trunk interface view, VBDIF interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When VRRP is used for gateway redundancy on the live network, the master has heavy loads, whereas the backups have light loads. In traditional VRRP load balancing mode, multiple VRRP groups with virtual IP addresses are created and specified as gateways for different users to implement load balancing. To simplify user configurations, create an LBRG and specify it as a gateway for all users to implement load balancing.

After you configure an LBRG, the LBRG returns different MAC addresses for ARP request packets from different users so that the master of a VRRP group forwards the traffic of a specified user.

Prerequisites

A VRRP group has been created and assigned a virtual IP address using the vrrp vrid virtual-router-id virtual-ip virtual-address command.

Follow-up Procedure

Run the vrrp vrid virtual-router-id join load-balance-vrrp vrid lb-vrid-value command to add a VRRP group to the LBRG.

Precautions

The VRRP group to be configured as an LBRG must have been assigned a virtual IP address.

Example

# Create a VRRP group on VLANIF100 and configure it as an LBRG.

<HUAWEI> system-view
[~HUAWEI] interface vlanif 100
[*HUAWEI-Vlanif100] vrrp vrid 1 virtual-ip 10.10.10.10
[*HUAWEI-Vlanif100] vrrp vrid 1 load-balance

# Create a VRRP group on 10GE1/0/1 and configure it as an LBRG.

<HUAWEI> system-view
[~HUAWEI] interface 10ge 1/0/1
[~HUAWEI-10GE1/0/1] undo portswitch
[*HUAWEI-10GE1/0/1] vrrp vrid 1 virtual-ip 10.10.10.10
[*HUAWEI-10GE1/0/1] vrrp vrid 1 load-balance

vrrp vrid preempt disable

Function

The vrrp vrid preempt disable command configures the device in a VRRP group in non-preemption mode.

The undo vrrp vrid preempt command restores the default preemption mode.

By default, the device uses the immediate preemption mode.

Format

vrrp vrid virtual-router-id preempt disable

undo vrrp vrid virtual-router-id preempt

Parameters

Parameter

Description

Value

vrid virtual-router-id

Specifies the VRID of a VRRP group.

The value is an integer that ranges from 1 to 255.

NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

Views

GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, VLANIF interface view, Eth-Trunk interface view, VBDIF interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

To enable the device with higher priority in a VRRP group to be the master, set the preemption mode on the device. In non-preemption mode, as long as the master is working properly, the backup with higher priority cannot be the master.

NOTE:

When non-preemption is disabled, the preemption delay is restored to 0 seconds immediately.

Prerequisites

The vrrp vrid virtual-ip command has been executed on an interface to create a VRRP group.

Example

# Configure VRRP group 1 in non-preemption mode.
<HUAWEI> system-view
[~HUAWEI] interface vlanif 100
[*HUAWEI-Vlanif100] vrrp vrid 1 virtual-ip 10.1.1.2
[*HUAWEI-Vlanif100] vrrp vrid 1 preempt disable

vrrp vrid preempt timer delay

Function

The vrrp vrid preempt timer delay command sets the preemption delay for the device in a VRRP group.

The undo vrrp vrid preempt timer delay command restores the default preemption delay for the device in a VRRP group.

The default preemption delay is 5 seconds for a preemption caused by an interface Up event or 0 seconds (indicating immediate preemption) for a preemption caused by other reasons.

Format

vrrp vrid virtual-router-id preempt timer delay delay-value

undo vrrp vrid virtual-router-id preempt timer delay

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the VRID of a VRRP group.

The value is an integer that ranges from 1 to 255.

NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

delay delay-value Specifies the preemption delay.

The value is an integer that ranges from 0 to 3600, in seconds. The default value is 0.

Views

GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, VLANIF interface view, Eth-Trunk interface view, VBDIF interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

If the backup in a VRRP group does not receive VRRP Advertisement packets from the master within a specified period of time, the backup becomes the master. On an unstable network, even if the master is working properly, the backup may not receive packets from the master because of network congestion. In this case, the VRRP group status may flap and traffic is lost. To prevent frequent switching of the VRRP group status, run the vrrp vrid preempt-mode timer delay command to set the preemption delay so that the backup becomes the master only after the delay expires.

Precautions

You are advised to set the preemption delay of the backup in a VRRP group to 0, configure the master in preemption mode, and set the preemption delay to a non-0 value. After the faulty master device in the VRRP backup group recovers, receives protocol packets, and has a lot of service configurations, the master device slowly delivers the VRRP forwarding table. An immediate traffic switchback leads to packet loss on the master device. To prevent packet loss, properly set a delay time in this situation.

  • The preemption delay refers to the delay before the backup switches to the master. Therefore, the IP address owner is irrelevant to the preemption delay. After the IP address owner recovers, it becomes the master immediately, without any delay.
  • On a stable network, a short preemption delay is recommended. When the master is faulty, the backup with the highest priority can rapidly switch to the master. This prevents traffic loss. On an unstable network, a long preemption delay is recommended. This prevents traffic loss caused by frequent switching of the VRRP group status.

To enable rapid VRRP switchback (vrrp vrid fast-resume) in management VRRP scenarios, you must set the preemption delay to 0 seconds. If you do not set the preemption delay to 0 seconds, rapid VRRP switchback is disabled automatically.

Example

# Set the preemption delay of VRRP group 1 to 5 seconds.
<HUAWEI> system-view
[~HUAWEI] interface vlanif 100
[*HUAWEI-Vlanif100] vrrp vrid 1 preempt timer delay 5

vrrp vrid priority

Function

The vrrp vrid priority command sets the priority of the device in a VRRP group.

The undo vrrp vrid priority command restores the default priority of the device in a VRRP group.

By default, the priority of the device in a VRRP group is 100.

Format

vrrp vrid virtual-router-id priority priority-value

undo vrrp vrid virtual-router-id priority

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the VRID of a VRRP group. The value is an integer that ranges from 1 to 255.
NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

priority priority-value Specifies the priority of the device in a VRRP group. The value is an integer that ranges from 1 to 254. A larger value indicates a higher priority.

Views

GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, VLANIF interface view, Eth-Trunk interface view, VBDIF interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

To configure the device in a VRRP group as the default gateway, run the vrrp vrid priority command to specify the highest priority for the device so that the device can become the master.

Prerequisites

The vrrp vrid virtual-ip command has been executed to create a VRRP group.

Precautions
  • Priority 0 is reserved in the system. Priority 255 is reserved for the IP address owner.

  • When devices in a VRRP group have the same priority, the device that first changes to master state becomes the master. If devices attempt to be the master simultaneously, the device where the interface with the largest IP address is located becomes the master.

Example

# Set the priority of the switch in VRRP group 1 to 150.
<HUAWEI> system-view
[~HUAWEI] interface vlanif 100
[*HUAWEI-Vlanif100] vrrp vrid 1 virtual-ip 10.1.1.2
[*HUAWEI-Vlanif100] vrrp vrid 1 priority 150
Related Topics

vrrp vrid timer advertise

Function

The vrrp vrid timer advertise command sets the interval at which the master sends VRRP Advertisement packets.

The undo vrrp vrid timer advertise command restores the default interval at which the master sends VRRP Advertisement packets.

By default, the master sends VRRP Advertisement packets every 1 second.

Format

vrrp vrid virtual-router-id timer advertise advertise-interval

undo vrrp vrid virtual-router-id timer advertise

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the VRID of a VRRP group. The value is an integer that ranges from 1 to 255.
NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

advertise advertise-interval Specifies the interval at which the master sends VRRP Advertisement packets. The value is an integer that ranges from 1 to 255, in seconds.

Views

GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, VLANIF interface view, Eth-Trunk interface view, VBDIF interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

The master in a VRRP group sends VRRP Advertisement packets to backups at intervals to notify that it is working properly. If the backup with the highest priority does not receive any VRRP Advertisement packets from the master at the specified interval, it considers the master faulty and becomes the master. The vrrp vrid timer advertise command sets the interval at which the master sends VRRP Advertisement packets.

Prerequisites

The vrrp vrid virtual-ip command has been executed on an interface to create a VRRP group.

Precautions

If a longer interval is used, backups in the same VRRP group cannot detect the fault on the master in a timely manner, causing packet loss. If a shorter interval is used, system resources are occupied. In addition, when network traffic is heavy or the network is unstable, backups may not receive packets after the Master_Down_Interval timer expires. As a result, the VRRP group status is incorrectly switched. Set the interval based on actual networking.

Example

# Set the interval at which the master in VRRP group 1 sends VRRP Advertisement packets to 5 seconds.
<HUAWEI> system-view
[~HUAWEI] interface vlanif 100
[*HUAWEI-Vlanif100] vrrp vrid 1 virtual-ip 10.1.1.2
[*HUAWEI-Vlanif100] vrrp vrid 1 timer advertise 5
Related Topics

vrrp vrid timer advertise millisecond

Function

The vrrp vrid timer advertise millisecond command sets an interval at which the master device in a VRRP group sends a VRRP Advertisement packet to 500 ms.

The undo vrrp vrid timer advertise command restores the default interval.

By default, the master device sends a VRRP Advertisement packet every second.

Format

vrrp vrid virtual-router-id timer advertise millisecond millisecond-interval

undo vrrp vrid virtual-router-id timer advertise

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the ID of a VRRP group. The value is an integer ranging from 1 to 255.
NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

millisecond millisecond-interval Specifies a millisecond-level interval at which the master device in a VRRP group sends a VRRP Advertisement packet. The value is 500, in ms.

Views

GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

The master device in a VRRP group periodically sends VRRP Advertisement packets to the backup devices in the group to notify them of its status. You can run the vrrp vrid timer advertise millisecond command to set an interval at which the master device in a VRRP group sends a VRRP Advertisement packet to 500 ms.

If a backup device does not receive a VRRP Advertisement packet from the master device within a period three times as long as the interval at which the master device sends a VRRP packet, the backup device considers the master device Down and preempts the Master state.

Prerequisites

A VRRP group has been configured using the vrrp vrid command.

Precautions

  • After you run the vrrp vrid timer advertise millisecond command, the function of learning the interval at which VRRP Advertisement packets are sent is not supported. To prevent VRRP negotiation failures and two master devices' coexistence, you must set the same interval at which the devices in a VRRP group send VRRP Advertisement packets.

  • When CPU usage is high (a large number of configurations are restored or multiple services are deployed together), VRRP may flap because the system cannot promptly process VRRP Advertisement packets.

  • A backup device's status changes due to heavy network traffic or timer differences.

Example

# Set an interval at which the master device in VRRP group 1 sends a VRRP Advertisement packet to 500 ms.

<HUAWEI> system-view
[~HUAWEI] interface 10ge 1/0/1
[~HUAWEI-10GE1/0/1] undo portswitch
[*HUAWEI-10GE1/0/1] vrrp vrid 1 virtual-ip 10.10.10.1
[*HUAWEI-10GE1/0/1] vrrp vrid 1 timer advertise millisecond 500

vrrp vrid track admin-vrrp vrid

Function

The vrrp vrid track admin-vrrp vrid command binds a VRRP group to an mVRRP group.

The undo vrrp vrid track admin-vrrp command unbinds a VRRP group from an mVRRP group.

By default, no VRRP group is bound to an mVRRP group.

Format

vrrp vrid virtual-router-id1 track admin-vrrp interface interface-type interface-number vrid virtual-router-id2 [ unflowdown ]

undo vrrp vrid virtual-router-id1 track admin-vrrp

Parameters

Parameter

Description

Value

vrid virtual-router-id1

Specifies the VRID of a VRRP group.

The value is an integer that ranges from 1 to 255.

NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

vrid virtual-router-id2

Specifies the VRID of an mVRRP group.

The value is an integer that ranges from 1 to 255.

NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

interface-type interface-number

Specifies the type and number of an interface configured with an mVRRP group.
  • interface-type specifies the interface type.
  • interface-number specifies the interface number.

-

unflowdown

Allows the interface where a VRRP group bound to an mVRRP group is configured to remain in Up state if the mVRRP group is in Backup or Initialize state.

NOTE:

By default, the flowdown mode is used.

-

Views

GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, VLANIF interface view, Eth-Trunk interface view, VBDIF interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

If multiple VRRP groups are configured on the device, each group sends VRRP Advertisement packets to maintain its state machine. As a result, a large number of VRRP Advertisement packets are generated, which occupy network bandwidth resources and cause CPU performance to deteriorate. To solve the problem, run the vrrp vrid track admin-vrrp vrid command to bind a VRRP group to an mVRRP group. After a VRRP group is bound to an mVRRP group, the VRRP group does not send VRRP Advertisement packets to negotiate the Master and Backup states. The mVRRP group determines the status of the bound VRRP group. This method greatly reduces the impact of VRRP Advertisement packets on network bandwidth and CPU performance.

VRRP groups can be bound to an mVRRP group in flowdown or unflowdown mode:
  • flowdown: This mode is used on a network where uplink and downlink traffic must be forwarded along the same path. On a network configured with a firewall and a VRRP group, uplink traffic flows through the master and downlink traffic flows through either the master or backup. If downlink traffic flows through the backup and the firewall detects that uplink traffic and downlink traffic are transmitted along different paths, the backup discards downlink traffic. The flowdown mode is used to allow downlink traffic to be forwarded through the master so that the firewall allows the packets to pass through.
  • unflowdown: This mode is used on a network where uplink and downlink traffic can be transmitted along different paths. unflowdown can be configured to allow the mVRRP group to determine the status of its bound VRRP group. Uplink traffic travels through the master and then reaches the upper-layer network, and downlink traffic travels through either the master or backup to reach users.

Prerequisites

A VRRP group and an mVRRP group have been created.

Precautions

If an mVRRP group is in Backup or Initialize state, the interface on which the bound VRRP group is configured will go Down and the VRRP group will enter the Initialize state.

The vrrp vrid track admin-vrrp vrid command can be used only on the interface where the bound VRRP group is configured. This command cannot be used on the interface where an mVRRP group is configured.

Example

# Bind VRRP group 1 to mVRRP group 2.
<HUAWEI> system-view
[~HUAWEI] interface vlanif 10
[*HUAWEI-Vlanif10] vrrp vrid 1 track admin-vrrp interface vlanif 20 vrid 2 unflowdown

vrrp vrid track bfd

Function

The vrrp vrid track bfd command associates a VRRP group with a BFD session.

The undo vrrp vrid track bfd command disassociates a VRRP group from a BFD session.

By default, a VRRP group is not associated with a BFD session.

Format

vrrp vrid virtual-router-id track bfd { bfd-session-id | session-name bfd-configure-name } [ increase value-increased | reduce value-reduced ]

vrrp vrid virtual-router-id track bfd { bfd-session-id | session-name bfd-configure-name } [ peer | link ]

undo vrrp vrid virtual-router-id track bfd [ bfd-session-id | session-name bfd-configure-name ]

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the VRID of a VRRP group.

The value is an integer that ranges from 1 to 255.

NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

bfd-session-id Specifies the local discriminator of the monitored BFD session.

The value is an integer that ranges from 1 to 16384.

session-name bfd-configure-name Specifies the name of the monitored BFD session.
The value is a string of 1 to 15 case-sensitive characters without spaces.
NOTE:

When double quotation marks are used around the string, spaces are allowed in the string.

increase value-increased Specifies the value by which the priority increases when the monitored BFD session becomes Down.

The value is an integer that ranges from 1 to 255. The maximum priority value is 254.

reduce value-reduced Specifies the value by which the priority decreases when the monitored BFD session becomes Down.

The value is an integer that ranges from 1 to 255. The priority can decrease to 1. By default, when the monitored BFD session becomes Down, the VRRP priority decreases by 10.

peer Indicates that the monitored BFD session is a peer BFD session.

-

link Indicates that the monitored BFD session is a link BFD session.

-

Views

GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, VLANIF interface view, Eth-Trunk interface view, VBDIF interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario
Association between a VRRP group and a BFD session implements the following functions:
  1. Rapid active/standby switchover: When the link of a VRRP group or the master is faulty, the backup becomes the master after a certain period of time (second level), causing packet loss. You can associate the VRRP group with a BFD session on the backup so that the BFD session can rapidly detect communication faults of the VRRP group. When the BFD session detects a fault, it notifies the VRRP group that the priority of the backup needs to be increased. Then an active/standby switchover is triggered immediately. This millisecond-level switchover reduces traffic loss. When the monitored BFD session recovers, the original priority of the device in the VRRP group is restored.

  2. Monitoring the uplink: Because VRRP cannot detect faults on the uplink of a VRRP group, services are interrupted. You can associate the VRRP group with a BFD session on the master so that the BFD session monitors the uplink status of the master. When the BFD session detects a fault on the uplink, it notifies the VRRP group that the priority of the master needs to be decreased. Then an active/standby switchover is triggered immediately. This reduces the impact of the uplink fault on service forwarding. When the monitored BFD session recovers, the original priority of the device in the VRRP group is restored.

Prerequisites

A VRRP group has been created and a static BFD session or a static BFD session with automatically negotiated discriminators has been created.

Precautions

After a VRRP group is associated with a BFD session, the BFD session type cannot be modified. Before deleting the BFD session type, you must delete all original configurations.

After a VRRP group is associated with a BFD session, set increase value-increased or reduce value-reduced to an appropriate value. This setting ensures that an active/standby switchover is performed immediately when the monitored BFD session becomes Down.

Multiple VRRP groups can monitor a BFD session, and a VRRP group can monitor a maximum of eight BFD sessions simultaneously.

NOTE:
When associating a VRRP group with a BFD session, note the following points:
  • The master and backup in the VRRP group must work in preemption mode. It is recommended that the preemption delay be 0 on the backup and larger than 0 on the master.

  • If an IP address owner exists in the VRRP group, the VRRP group cannot monitor the BFD session.

  • If session-name bfd-configure-name is specified, the VRRP group can be bound to only the static BFD session with automatically negotiated discriminators.

  • If bfd-session-id is specified, the VRRP group can be bound to only the static BFD session.

Example

# Configure VRRP group 1 to monitor the BFD session with local discriminator 1 on VLANIF 100.
<HUAWEI> system-view
[~HUAWEI] bfd
[*HUAWEI-bfd] quit
[*HUAWEI] bfd abc bind peer-ip 10.1.1.1 interface vlanif 100
[*HUAWEI-bfd-session-abc] discriminator local 1
[*HUAWEI-bfd-session-abc] discriminator remote 2
[*HUAWEI-bfd-session-abc] quit
[*HUAWEI] interface vlanif 100
[*HUAWEI-Vlanif100] vrrp vrid 1 virtual-ip 10.1.1.12
[*HUAWEI-Vlanif100] vrrp vrid 1 track bfd 1 reduce 40
# Configure VRRP group 1 to monitor the BFD session with local discriminator 1 on 10GE1/0/1.
<HUAWEI> system-view
[~HUAWEI] bfd
[*HUAWEI-bfd] quit
[*HUAWEI] bfd abc bind peer-ip 10.2.1.1 interface 10ge 1/0/1
[*HUAWEI-bfd-session-abc] discriminator local 1
[*HUAWEI-bfd-session-abc] discriminator remote 2
[*HUAWEI-bfd-session-abc] quit
[*HUAWEI] interface 10ge 1/0/1
[*HUAWEI-10GE1/0/1] vrrp vrid 1 virtual-ip 10.2.1.12
[*HUAWEI-10GE1/0/1] undo portswitch
[*HUAWEI-10GE1/0/1] vrrp vrid 1 track bfd 1 reduce 40

# Configure VRRP group 1 to monitor the BFD session hello on VLANIF 100.

<HUAWEI> system-view
[~HUAWEI] bfd
[*HUAWEI-bfd] quit
[*HUAWEI] bfd hello bind peer-ip 10.2.1.1 interface vlanif 100 source-ip 10.2.1.2 auto
[*HUAWEI-bfd-session-hello] quit
[*HUAWEI] interface vlanif 100
[*HUAWEI-Vlanif100] vrrp vrid 1 virtual-ip 10.2.1.12
[*HUAWEI-Vlanif100] vrrp vrid 1 track bfd session-name hello reduce 40
# Configure VRRP group 1 to track a peer BFD session on VLANIF 100.
<HUAWEI> system-view
[~HUAWEI] bfd
[*HUAWEI-bfd] quit
[*HUAWEI] bfd peer1 bind peer-ip 10.3.1.2 interface vlanif 100 source-ip 10.3.1.1 auto
[*HUAWEI-session-peer1] quit
[*HUAWEI] interface vlanif 100
[*HUAWEI-Vlanif100] vrrp vrid 1 virtual-ip 10.3.1.11
[*HUAWEI-Vlanif100] vrrp vrid 1 track bfd session-name peer1 peer

vrrp vrid track interface

Function

The vrrp vrid track interface command associates a VRRP group with an interface.

The undo vrrp vrid track interface command disassociates a VRRP group from an interface.

By default, a VRRP group is not associated with an interface.

Format

vrrp vrid virtual-router-id track interface interface-type interface-number [ increase value-increased | reduce value-reduced ]

undo vrrp vrid virtual-router-id track interface [ interface-type interface-number ]

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the VRID of a VRRP group.

The value is an integer that ranges from 1 to 255.

NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

interface interface-type interface-number Specifies the type and number of an interface monitored by a VRRP group.
  • interface-type specifies the interface type.
  • interface-number specifies the interface number.
NOTE:
A VRRP backup group can track Layer 2 and Layer 3 interfaces.
  • If the tracked interface is a Layer 2 interface, the VRRP backup group tracks the physical status of the Layer 2 interface and changes its own priority based on the tracked physical status.
  • If the tracked interface is a Layer 3 interface, the VRRP backup group tracks the protocol status of the Layer 3 interface and changes its own priority based on the tracked protocol status.

-

increase value-increased Specifies the value by which the priority increases when the monitored interface becomes Down.

The value is an integer that ranges from 1 to 255. The maximum priority value is 254.

reduce value-reduced Specifies the value by which the priority decreases when the monitored interface becomes Down.

The value is an integer that ranges from 1 to 255. The priority can decrease to 1. By default, when the monitored interface goes Down, the VRRP priority of the device decreases by 10.

Views

GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, VLANIF interface view, Eth-Trunk interface view, VBDIF interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

VRRP can only detect the status change of the interface on which a VRRP group is configured. VRRP cannot detect faults on the uplink interface, causing service interruption. You can run the vrrp vrid track interface command to associate a VRRP group with a device interface not in the VRRP group. When the monitored interface becomes Down, the priority of the device is adjusted and an active/standby switchover is triggered. Therefore, services can be forwarded correctly. When the status of the monitored interface recovers, the original priority of the device in the VRRP group is restored.

Prerequisites

The vrrp vrid virtual-ip command has been executed on an interface to create a VRRP group.

Precautions

After a VRRP group is associated with an interface, set increase value-increased or reduce value-reduced to an appropriate value. This setting ensures that an active/standby switchover is performed immediately when the monitored interface becomes Down.

NOTE:
  • The master and backup in the VRRP group must work in preemption mode. It is recommended that the preemption delay be 0 on the backup and larger than 0 on the master.

  • If the device is the IP address owner (the virtual router IP address is used as the actual interface address), you cannot associate a VRRP group with an interface.

  • Multiple VRRP groups can monitor an interface, and a VRRP group can monitor a maximum of 16 interfaces simultaneously.

Example

# Associate VRRP group 1 with VLANIF 10 and set reduce value-reduced to 50 when VLANIF 10 becomes Down.
<HUAWEI> system-view
[~HUAWEI] interface vlanif 20
[*HUAWEI-Vlanif20] vrrp vrid 1 virtual-ip 10.1.1.1
[*HUAWEI-Vlanif20] vrrp vrid 1 track interface vlanif 10 reduce 50
Related Topics

vrrp vrid track ip route

Function

The vrrp vrid track ip route command associates a VRRP group with a route.

The undo vrrp vrid track ip route command disassociates a VRRP group from a route.

By default, a VRRP group is not associated with a route.

Format

vrrp vrid virtual-router-id track ip route ip-address { mask-address | mask-length } [ vpn-instance vpn-instance-name ] [ increase value-increased | reduce value-reduced ]

undo vrrp vrid virtual-router-id track ip route [ ip-address { mask-address | mask-length } [ vpn-instance vpn-instance-name ] ]

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the VRID of a VRRP group.

The value is an integer that ranges from 1 to 255.

NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

ip-address Specifies the destination address of the monitored route.

The value is in dotted decimal notation.

mask-address Specifies the mask of the destination address of the monitored route.

The value is in dotted decimal notation.

mask-length Specifies the mask length of the destination address of the monitored route.

The value is an integer that ranges from 0 to 32.

vpn-instance vpn-instance-name Specifies the name of a VPN instance. The value is a string of 1 to 31 case-sensitive characters except spaces. When double quotation marks are used to include the string, spaces are allowed in the string. The value _public_ is reserved and cannot be used as the VPN instance name.
increase value-increased Specifies the value by which the master' priority increases if the monitored route is withdrawn or becomes inactive.

The value is an integer that ranges from 1 to 255. The maximum priority value is 254.

reduce value-reduced Specifies the value by which the master' priority decreases if the monitored route is withdrawn or becomes inactive.

The value is an integer that ranges from 1 to 255. The priority can decrease to 1. By default, the master' priority decreases by 10 if the associated route is withdrawn or becomes inactive.

Views

GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, VLANIF interface view, Eth-Trunk interface view, VBDIF interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

To improve device reliability, two user gateways are configured to work in master/backup mode, and VRRP is enabled on these gateways to determine their Master and Backup states. Although a VRRP group has been configured, access devices may not detect route changes caused by the faulty uplink or network topology change. Consequently, data traffic is lost.

You can associate a VRRP group with a route for forwarding uplink traffic. When the route is withdrawn or becomes inactive, the master' priority is adjusted and an active/standby switchover is performed. When the status of the monitored route recovers, the original priority of the master in the VRRP group is restored.

Pre-configuration Tasks

A VRRP group and a routing protocol such as OSPF or IS-IS have been configured.

Precautions

The VRRP group to be associated with a route cannot contain an IP address owner.

The master and backup in the VRRP group must work in preemption mode. It is recommended that the preemption delay be 0 on the backup and non-0 on the master.

When associating a VRRP group with a route in a VPN instance, note the following points:
  • If the VPN instance does not exist, association between the VRRP group and the VPN route cannot work.
  • If the VPN instance is deleted after the VRRP group is associated with the VPN route, association between the VRRP group and the VPN route is also deleted.

Example

# Configure VRRP group 1 to monitor the route on 10.2.1.0, and set the value by which the master' priority decreases if the monitored route is withdrawn or becomes inactive to 20.

<HUAWEI> system-view
[~HUAWEI] interface vlanif 100
[*HUAWEI-Vlanif100] vrrp vrid 1 virtual-ip 10.1.1.12
[*HUAWEI-Vlanif100] vrrp vrid 1 track ip route 10.2.1.0 24 reduce 20

vrrp vrid track nqa

Function

The vrrp vrid track nqa command associates a VRRP group with an NQA test instance to implement a rapid active/standby switchover.

The undo vrrp vrid track nqa command disassociates a VRRP group from an NQA test instance.

By default, a VRRP group is not associated with an NQA test instance.

Format

vrrp vrid virtual-router-id track nqa admin-name test-name [ reduce value-reduced ]

undo vrrp vrid virtual-router-id track nqa [ admin-name test-name ]

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the VRID of a VRRP group.

The value is an integer that ranges from 1 to 255.

NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

admin-name Specifies the administrator name of an NQA test instance.

The value is a string of 1 to 32 case-sensitive characters without spaces. When double quotation marks are used around the string, spaces are allowed in the string.

test-name Specifies the name of an NQA test instance.

The value is a string of 1 to 32 case-sensitive characters without spaces. When double quotation marks are used around the string, spaces are allowed in the string.

reduce value-reduced Specifies the value by which the master's priority reduces if the NQA test instance detects that the uplink is unavailable.

The value is an integer that ranges from 1 to 255. The priority can decrease to 1. By default, the master's priority value decreases by 10 if the associated NQA test instance detects that the uplink is unavailable.

Views

GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, VLANIF interface view, Eth-Trunk interface view, VBDIF interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

To improve device reliability, two user gateways are configured to work in master/backup mode, and VRRP is enabled on these gateways to determine their Master and Backup states. Although a VRRP group has been configured, the uplink may be unreachable and access devices may not detect the faulty uplink. Consequently, data traffic is lost.

You can associate a VRRP group with an NQA test instance to solve this problem. The NQA test instance periodically sends ICMP packets to detect whether the destination IP address of the uplink is reachable. When the destination IP address is unreachable, the NQA test instance reports the fault to the associated VRRP group and instructs the VRRP group to adjust the priority, implementing an active/standby switchover. When the status of the monitored NQA test instance recovers, the original priority of the master in the VRRP group is restored.

Prerequisites

A VRRP group and an NQA test instance have been configured.

Precautions

  • The master and backup in the VRRP group must work in preemption mode. It is recommended that the preemption delay be 0 on the backup and non-0 on the master.

  • The VRRP group that contains an IP address owner and a service VRRP group cannot be associated with an NQA test instances.

Example

# Associate a VRRP group with NQA test instance user user1 on VLANIF100 and set reduce value-reduced to 20 when the destination IP address is unreachable.

<HUAWEI> system-view
[~HUAWEI] nqa test-instance user user1
[*HUAWEI-nqa-user-user1] test-type icmp
[*HUAWEI-nqa-user-user1] destination-address ipv4 10.1.1.1
[*HUAWEI-nqa-user-user1] frequency 10
[*HUAWEI-nqa-user-user1] probe-count 2
[*HUAWEI-nqa-user-user1] start now
[*HUAWEI-nqa-user-user1] commit
[~HUAWEI-nqa-user-user1] quit
[~HUAWEI] interface vlanif 100
[*HUAWEI-Vlanif100] vrrp vrid 1 virtual-ip 10.2.1.12
[*HUAWEI-Vlanif100] vrrp vrid 1 track nqa user user1 reduce 20
[*HUAWEI-Vlanif100] commit

vrrp vrid compatible-version

Function

The vrrp vrid compatible-version command configures a mode in which VRRPv3 Advertisement packets are sent on an interface.

The undo vrrp vrid compatible-version command restores the default mode.

By default, a mode in which VRRPv3 Advertisement packets are sent is the same as that in the system view.

Format

vrrp vrid virtual-router-id compatible-version { 2 | 3 | all }

undo vrrp vrid virtual-router-id compatible-version

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the VRID of a VRRP group.

The value is an integer that ranges from 1 to 255.

NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

2 Indicates that only VRRPv2 Advertisement packets are sent.

-

3 Indicates that only VRRPv3 Advertisement packets are sent.

-

all Indicates that both VRRPv2 and VRRPv3 Advertisement packets are sent.

-

Views

GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, VLANIF interface view, Eth-Trunk interface view, VBDIF interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

If devices in a VRRP group use different VRRP version numbers, the VRRP group may fail to negotiate the status. This is because a VRRPv2-enabled device can only receive VRRPv2 Advertisement packets and discards the received VRRPv3 Advertisement packets. You can set the mode in which VRRP Advertisement packets are sent on the VRRPv3-enabled device so that the VRRPv2-enabled and VRRPv3-enabled devices can negotiate the status.

Prerequisites

The VRRP version number of a device has been configured as 3 using the vrrp version 3 command.

Precautions

  • Only VRRPv3 supports this command.

  • If the vrrp version-3 send-packet-mode command is used in the system view and interface view simultaneously, the configuration in the interface view takes effect.

Example

# Configure a VRRPv3-enabled device to send only VRRPv2 Advertisement packets in the view of VLANIF100.
<HUAWEI> system-view
[~HUAWEI] interface vlanif 100
[*HUAWEI-Vlanif100] vrrp vrid 1 compatible-version 2
Related Topics

vrrp vrid virtual-ip

Function

The vrrp vrid virtual-ip command creates a VRRP group and assigns a virtual IP address to the group.

The undo vrrp vrid virtual-ip command deletes the virtual IP address of a VRRP group.

By default, no VRRP group is created.

Format

vrrp vrid virtual-router-id [ virtual-ip virtual-address ]

undo vrrp vrid virtual-router-id [ virtual-ip virtual-address ]

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the VRID of a VRRP group.

The value is an integer that ranges from 1 to 255.

NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

virtual-ip virtual-address Specifies the virtual IP address of a VRRP group.

The value is in dotted decimal notation.

Views

GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, VLANIF interface view, Eth-Trunk interface view, VBDIF interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

In practice, hosts use the default gateway to communicate with external networks. As value-added services such as IPTV or video conferencing services are widely deployed, hosts may fail to communicate with external networks if the default gateway fails. Configuring dynamic routing protocols such as RIP, OSPF, or ICMP can improve system reliability. However, it is difficult to configure dynamic routing protocols and some hosts may not support dynamic routing protocols. VRRP virtualizes multiple routing devices into a virtual router without changing the networking. The virtual router IP address is configured as the default gateway address.

If users on a network have the same reliability requirements, configure multiple virtual IP addresses for a VRRP group. By doing this, one virtual IP address serves one separate user group, and the default gateway address remains consistent regardless of changes in VRRP device locations. A VRRP group can be assigned a maximum of 16 virtual IP addresses.

Precautions

If all the virtual IP addresses in a VRRP group are deleted, the VRRP group is deleted automatically.

When VRRP and static ARP are configured simultaneously, note the following points:
  • When VRRP is configured on a VLANIF interface, the IP address corresponding to the VLANIF interface in a static ARP entry cannot be set to the virtual IP address of a VRRP group. Otherwise, services cannot be forwarded between devices. For example, if a static ARP entry contains IP address 10.1.1.1, the IP address 10.1.1.1 cannot be used as the virtual IP address.
  • When VRRP is configured on a VLANIF interface, the virtual IP address of a VRRP group cannot be used as the IP address corresponding to the VLANIF interface in a static ARP entry. Otherwise, services cannot be forwarded between devices. For example, if the VRRP group uses virtual IP address 10.1.1.1, the IP address 10.1.1.1 cannot be used in a static ARP entry.

After the interface learns ARP entries and the ARP entries age, ARP age probe packets to be sent carry this interface's IP address as the source IP address, not the virtual IP address.

NOTE:
  • VRRP groups on one interface must use different virtual IP addresses.
  • Two devices in a VRRP group must be configured with the same VRID.
  • VRRP groups on different interfaces of a device can be configured with the same VRID.
  • A virtual IP address must be different from the IP address of a user host. If the user host IP address is the same as the virtual IP address, all packets on the local network segment are sent to the user host. As a result, data of this network segment cannot be forwarded correctly.

Example

# Create a VRRP group on VLANIF 100 with ID 1 and virtual IP address 10.10.10.10.
<HUAWEI> system-view
[~HUAWEI] interface vlanif 100
[*HUAWEI-Vlanif100] vrrp vrid 1 virtual-ip 10.10.10.10
# Create a VRRP group on 10GE 1/0/1 with ID 1 and virtual IP address 10.10.10.10.
<HUAWEI> system-view
[~HUAWEI] interface 10ge 1/0/1
[~HUAWEI-10GE1/0/1] undo portswitch
[*HUAWEI-10GE1/0/1] vrrp vrid 1 virtual-ip 10.10.10.10

vrrp6 advertise vlan

Function

The vrrp6 advertise vlan command configures a mode in which VRRP6 Advertise packets are sent in a super-VLAN.

The undo vrrp6 advertise vlan command cancels the configuration.

By default, a super-VLAN sends VRRP6 Advertisement packets only to a sub-VLAN with the smallest VLAN ID among all the sub-VLANs in Up state.

Format

vrrp6 advertise vlan { sub-vlan-id | all }

undo vrrp6 advertise vlan

Parameters

Parameter Description Value
sub-vlan-id Sends VRRP6 advertisement packets to a sub-VLAN with a specified ID. The value is an integer that ranges from 1 to 4094, except reserved VLAN IDs configured using the vlan reserved command.
all Broadcasts VRRP6 Advertisement packets to all sub-VLANs. -

Views

VLANIF interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

In a scenario where a VRRP6 group is configured in a super-VLAN, if VRRP6 Advertisement packets are transmitted to all sub-VLANs, much bandwidth is occupied. To improve bandwidth use efficiency, run the vrrp6 advertise vlan command to enable VRRP6 Advertisement packets to be transmitted to only a specified sub-VLAN.

Prerequisites

The configurations of the super-VLAN and sub-VLANs have been completed.

A VRRP6 group has been configured on a VLANIF interface of a super-VLAN.

Configuration Impact

all is not recommended. If all is configured, a super-VLAN broadcasts a VRRP6 Advertisement packet to all its sub-VLANs. This causes CPU usage to increase.

Example

# Enable VRRP6 Advertisement packets in super VLAN 100 to be sent to sub-VLAN 10.

<HUAWEI> system-view
[~HUAWEI] vlan 10
[*HUAWEI-vlan10] quit
[*HUAWEI] vlan 100
[*HUAWEI-vlan100] aggregate-vlan
[*HUAWEI-vlan100] access-vlan 10
[*HUAWEI-vlan100] quit
[*HUAWEI] interface vlanif 100
[*HUAWEI-Vlanif100] vrrp6 vrid 1 virtual-ip FE80::1 link-local
[*HUAWEI-Vlanif100] vrrp6 advertise vlan 10

vrrp6 checksum exclude pseudo-header

Function

The vrrp6 checksum exclude pseudo-header command configures the device to calculate a VRRP6 Advertisement packet 's checksum based on the content excluding the IPv6 pseudo header.

The undo vrrp6 checksum exclude pseudo-header command restores the default configuration.

By default, the device calculates a VRRP6 Advertisement packet 's checksum based on the content including the IPv6 pseudo header.

Format

vrrp6 checksum exclude pseudo-header

undo vrrp6 checksum exclude pseudo-header

Parameters

None

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Various devices deployed on a large-scale network have different packet processing capabilities and modes. In VRRP6 scenarios, a VRRP6 group may contain Huawei and non-Huawei devices. After a Huawei device receives a VRRP6 Advertisement packet, it calculates the packet's checksum based on the content including the IPv6 pseudo header. However, a non-Huawei device may calculate the packet's checksum based on the content excluding the IPv6 pseudo header. As a result, VRRP negotiation between the Huawei and non-Huawei devices may fail. To resolve this issue, run the vrrp6 checksum exclude pseudo-header command to configure the Huawei device to calculate the packet's checksum based on the content excluding the IPv6 pseudo header.

Example

# Configure the device to calculate a VRRP6 Advertisement packet 's checksum based on the content excluding the IPv6 pseudo header.

<HUAWEI> system-view
[~HUAWEI] vrrp6 checksum exclude pseudo-header

vrrp6 na interval

Function

The vrrp6 na interval command configures an interval at which the master in a VRRP6 group sends NA packets.

The undo vrrp6 na interval command restores the default interval.

By default, the master in a VRRP6 group sends NA packets at intervals of 120 seconds.

Format

vrrp6 na interval interval

undo vrrp6 na interval

Parameters

Parameter Description Value
interval interval Specifies an interval at which the master in a VRRP6 group sends NA packets. The value is an integer that ranges from 30 to 1200, in seconds.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

After a VRRP6 group performs an active/standby switchover, the new master periodically sends NA packets to update the destination MAC address and outbound interface on its connected downstream device.

To configure an interval at which the master in a VRRP6 group sends NA packets, run the vrrp6 na interval command.

Precautions

To disable the master from periodically sending NA packets, run the vrrp6 na interval disable command.

Example

# Set the interval at which the master in a VRRP6 group sends NA packets to 600 seconds.

<HUAWEI> system-view
[~HUAWEI] vrrp6 na interval 600

vrrp6 na interval disable

Function

The vrrp6 na interval disable command disables the master in a VRRP6 group from periodically sending NA packets.

By default, the master in a VRRP6 group sends NA packets at intervals of 120 seconds.

Format

vrrp6 na interval disable

Parameters

None

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

To ensure that the destination MAC address and outbound interface on a downstream device connected to the master in a VRRP6 group are updated in real time, the master sends NA packets to the downstream device at a specified interval. Because the NA protocol is simple and does not provide any security mechanisms, attackers can send spoofed NA packets to attack networks. To prevent security risks caused by NA attacks, run the vrrp6 na interval disable command to disable the master in a VRRP6 group from periodically sending NA packets.

Configuration Impact

After the vrrp6 na interval disable command is run, the masters in all VRRP6 groups no longer periodically send NA packets. An NA packet is sent to a downstream device only when a backup switches to the Master state. To enable the master in a VRRP6 group to periodically send NA packets and set an interval at which NA packets are sent, run the vrrp6 na interval command.

Example

# Disable the master in a VRRP6 group from periodically sending NA packets.

<HUAWEI> system-view
[~HUAWEI] vrrp6 na interval disable

vrrp6 recover-delay

Function

The vrrp6 recover-delay command sets the delay before a VRRP6 group recovers.

The undo vrrp6 recover-delay command restores the default delay before a VRRP6 group recovers.

By default, the delay before a VRRP6 group recovers is 0 seconds, indicating that VRRP6 group flapping is not suppressed.

Format

vrrp6 recover-delay delay-value

undo vrrp6 recover-delay

Parameters

Parameter Description Value
delay-value Specifies the delay before a VRRP6 group recovers. The value is an integer that ranges from 0 to 3600, in seconds.

Views

GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, VLANIF interface view, Eth-Trunk interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When the status of the interface where a VRRP6 group is configured alternates between Up and Down states, the VRRP6 group status may flap. To prevent this situation, run the vrrp6 recover-delay command to set the delay before a VRRP6 group recovers.

Configuration Impact

After the delay before a VRRP6 group recovers is set, the VRRP6 group responds to an interface Up event only after the delay expires. This prevents VRRP6 group flapping caused by frequent interface flapping.

Precautions

If the vrrp6 recover-delay command is run in the system view, the delay is applicable to all VRRP6 groups on the device.

If the vrrp6 recover-delay command is run in the interface view, the delay is applicable to all VRRP6 groups on the interface. The vrrp6 recover-delay command configured in the interface view takes precedence over that configured in the system view.

Example

# Set the delay before a VRRP6 group recovers to 5 seconds in the view of VLANIF 100.

<HUAWEI> system-view
[~HUAWEI] interface vlanif 100
[*HUAWEI-Vlanif100] vrrp6 recover-delay 5

vrrp6 hop-limit-check disable

Function

The vrrp6 hop-limit-check disable command disables the device from checking the TTL value in VRRP6 Advertisement packets.

The undo vrrp6 hop-limit-check disable command enables the device to check the TTL value in VRRP6 Advertisement packets.

By default, the system checks the TTL value in VRRP6 Advertisement packets.

Format

vrrp6 hop-limit-check disable

undo vrrp6 hop-limit-check disable

Parameters

None

Views

GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, VLANIF interface view, Eth-Trunk interface view

Default Level

2: Configuration level

Usage Guidelines

As defined by RFC 2338, the device checks the TTL value in received VRRP6 Advertisement packets. If the TTL value of a VRRP6 Advertisement packet is not 255, the device discards the packet.

On certain networks, especially on a network where the device interworks with non-Huawei devices, valid packets may be discarded if TTL check is enabled. You can configure the device not to check the TTL value in VRRP6 Advertisement packets.

Example

# Disable the device from checking the TTL value in VRRP6 Advertisement packets.
<HUAWEI> system-view
[~HUAWEI] interface vlanif 100 
[*HUAWEI-Vlanif100] vrrp6 hop-limit-check disable
Related Topics

vrrp6 vrid holding-multiplier

Function

The vrrp6 vrid holding-multiplier command sets a multiplier of the interval at which VRRP6 Advertisement packets are sent for the timeout period of a backup device in a VRRP6 backup group.

The undo vrrp6 vrid holding-multiplier command restores the default multiplier of the interval at which VRRP6 Advertisement packets are sent for the timeout period of a backup device in a VRRP6 backup group.

By default, the timeout period of a backup device in a VRRP6 backup group is three times the interval at which VRRP6 Advertisement packets are sent.

Format

vrrp6 vrid virtual-router-id holding-multiplier holding-multiplier-value

undo vrrp6 vrid virtual-router-id holding-multiplier [ holding-multiplier-value ]

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the ID of a VRRP6 backup group. The value is an integer ranging from 1 to 255.
NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

holding-multiplier holding-multiplier-value Specifies a multiplier of the interval at which VRRP6 Advertisement packets are sent for the timeout period of a backup device in a VRRP6 backup group. The value is an integer ranging from 3 to 10.

Views

GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, VLANIF interface view, Eth-Trunk interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

The timeout period of a backup device in a VRRP6 backup group is three times the interval at which VRRP6 Advertisement packets are sent. To set a multiplier of the interval at which VRRP6 Advertisement packets are sent for the timeout period of a backup device in a VRRP6 backup group, run the vrrp6 vrid holding-multiplier command.

Prerequisites

A VRRP6 backup group has been configured using the vrrp6 vrid virtual-ip command.

Precautions

If a VRRP6 backup group is configured to monitor a service (for example, VRRP6 association with BFD or NQA), the vrrp6 vrid holding-multiplier command hardly affects the timeout period of a backup device.

Example

# Set a multiplier of the interval at which VRRP6 Advertisement packets are sent for the timeout period of a backup device in VRRP6 backup group 1 to 4.

<HUAWEI> system-view
[~HUAWEI] interface vlanif 100
[*HUAWEI-Vlanif100] vrrp6 vrid 1 virtual-ip FE80::7 link-local
[*HUAWEI-Vlanif100] vrrp6 vrid 1 holding-multiplier 4

vrrp6 vrid join load-balance-vrrp

Function

The vrrp6 vrid join load-balance-vrrp command adds a specified VRRP6 group to a VRRP6 Load-Balance Redundancy Group (LBRG).

The undo vrrp6 vrid join load-balance-vrrp command deletes a specified VRRP6 group from a VRRP6 LBRG.

By default, no VRRP6 group is added to a VRRP6 LBRG.

Format

vrrp6 vrid virtual-router-id join load-balance-vrrp vrid lb-vrid-value

undo vrrp6 vrid virtual-router-id join load-balance-vrrp

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the VRID of a VRRP6 group.

The value is an integer that ranges from 1 to 255.

NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

vrid lb-vrid-value Specifies the VRID of a VRRP6 LBRG.

The value is an integer that ranges from 1 to 255.

NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

Views

GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, VLANIF interface view, Eth-Trunk interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

To implement VRRP6 single-gateway load balancing, run the vrrp6 vrid join load-balance-vrrp command to add a specified VRRP6 group to a VRRP6 LBRG. The VRRP6 LBRG uses the virtual MAC addresses of the VRRP6 groups to respond to different users' NS request packets destined for virtual IPv6 addresses so that the master of a specified VRRP6 group forwards the traffic of a specified user. This implements load balancing.

Prerequisites

The vrrp6 vrid virtual-router-id [ virtual-ip virtual-address [ link-local ] ] command has been executed to create a VRRP6 group.
  • If you use the VRRP6 group as a VRRP6 LBRG, you must assign a virtual IPv6 address to the VRRP6 group.
  • If you use the VRRP6 group as a VRRP6 LBRG member group, you do not need to assign a virtual IPv6 address to the VRRP6 group.

The vrrp6 vrid virtual-router-id load-balance command has been executed to create a VRRP6 LBRG.

Example

# Create a VRRP6 LBRG and add a VRRP6 group to the VRRP6 LBRG on VLANIF100.

<HUAWEI> system-view
[~HUAWEI] interface vlanif 100
[*HUAWEI-Vlanif100] ipv6 enable
[*HUAWEI-Vlanif100] ipv6 address FC00::1 64
[*HUAWEI-Vlanif100] vrrp6 vrid 1 virtual-ip FE80::7 link-local
[*HUAWEI-Vlanif100] vrrp6 vrid 1 virtual-ip FC00::2
[*HUAWEI-Vlanif100] vrrp6 vrid 1 load-balance
[*HUAWEI-Vlanif100] vrrp6 vrid 2
[*HUAWEI-Vlanif100] vrrp6 vrid 2 join load-balance-vrrp vrid 1

vrrp6 vrid load-balance

Function

The vrrp6 vrid load-balance command configures a specified VRRP6 group as a VRRP6 Load-Balance Redundancy Group (LBRG).

The undo vrrp6 vrid load-balance command restores a VRRP6 LBRG to a VRRP6 group.

By default, no VRRP6 LBRG is configured.

Format

vrrp6 vrid virtual-router-id load-balance

undo vrrp6 vrid virtual-router-id load-balance

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the VRID of a VRRP6 group.

The value is an integer that ranges from 1 to 255.

NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

Views

GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, VLANIF interface view, Eth-Trunk interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When VRRP6 is used for gateway redundancy on the live network, the master has heavy loads, whereas the backups have light loads. In traditional VRRP6 load balancing mode, multiple VRRP6 groups with virtual IPv6 addresses are created and specified as gateways for different users to implement load balancing. To simplify user configurations, create a VRRP6 LBRG and specify it as a gateway for all users to implement load balancing.

After you configure a VRRP6 LBRG, the VRRP6 LBRG returns different MAC addresses for NS request packets from different users so that the master of a specified VRRP6 group forwards the traffic of a specified user.

Prerequisites

A VRRP6 group has been created and assigned a virtual IPv6 address using the vrrp6 vrid virtual-router-id virtual-ip virtual-address [ link-local ] command.

Follow-up Procedure

Run the vrrp6 vrid virtual-router-id join load-balance-vrrp vrid lb-vrid-value command to add a VRRP6 group to the VRRP6 LBRG.

Precautions

The VRRP6 group to be configured as a VRRP6 LBRG must have been assigned a virtual IPv6 address.

Example

# Create a VRRP6 group and configure it as a VRRP6 LBRG on VLANIF100.

<HUAWEI> system-view
[~HUAWEI] interface vlanif 100
[*HUAWEI-Vlanif100] ipv6 enable
[*HUAWEI-Vlanif100] ipv6 address FC00::1 64
[*HUAWEI-Vlanif100] vrrp6 vrid 1 virtual-ip FE80::7 link-local
[*HUAWEI-Vlanif100] vrrp6 vrid 1 virtual-ip FC00::2
[*HUAWEI-Vlanif100] vrrp6 vrid 1 load-balance

vrrp6 vrid preempt disable

Function

The vrrp6 vrid preempt disable command configures the device in a VRRP6 group in non-preemption mode.

The undo vrrp6 vrid preempt command restores the default preemption mode.

By default, the device uses the immediate preemption mode.

Format

vrrp6 vrid virtual-router-id preempt disable

undo vrrp6 vrid virtual-router-id preempt

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the VRID of a VRRP6 group.

The value is an integer that ranges from 1 to 255.

NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

Views

GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, VLANIF interface view, Eth-Trunk interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

To enable the device with higher priority in a VRRP6 group to be the master, set the preemption mode on the device. In non-preemption mode, as long as the master is working properly, the backup with higher priority cannot be the master.

NOTE:

When non-preemption is disabled, the preemption delay is restored to 0 seconds immediately.

Prerequisites

The vrrp6 vrid virtual-ip command has been executed on an interface to create a VRRP6 group.

Example

# Configure VRRP6 group 1 in non-preemption mode.
<HUAWEI> system-view
[~HUAWEI] interface vlanif 100
[*HUAWEI-Vlanif100] vrrp6 vrid 1 virtual-ip FE80::7 link-local
[*HUAWEI-Vlanif100] vrrp6 vrid 1 preempt disable

vrrp6 vrid preempt timer delay

Function

The vrrp6 vrid preempt timer delay command sets the preemption delay for the device in a VRRP6 group.

The undo vrrp6 vrid preempt timer delay command restores the default preemption delay for the device in a VRRP6 group.

The default preemption delay is 5 seconds for a preemption caused by an interface Up event or 0 seconds (indicating immediate preemption) for a preemption caused by other reasons.

Format

vrrp6 vrid virtual-router-id preempt timer delay delay-value

undo vrrp6 vrid virtual-router-id preempt timer delay

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the VRID of a VRRP6 group.

The value is an integer that ranges from 1 to 255.

NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

delay delay-value Specifies the preemption delay.

The value is an integer that ranges from 0 to 3600, in seconds. The default value is 0.

Views

GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, VLANIF interface view, Eth-Trunk interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

If the backup in a VRRP6 group does not receive VRRP6 Advertisement packets from the master within a specified period of time, the backup becomes the master. On an unstable network, even if the master is working properly, the backup may not receive packets from the master because of network congestion. In this case, the VRRP6 group status may flap and traffic is lost. To prevent frequent switching of the VRRP6 group status, run the vrrp6 vrid preempt-mode timer delay command to set the preemption delay so that the backup becomes the master only after the delay expires.

Prerequisites

The vrrp6 vrid virtual-ip command has been executed to create a VRRP6 group.

Precautions

You are advised to set the preemption delay of the backup in a VRRP6 group to 0, configure the master in preemption mode, and set the preemption delay to a non-0 value. After the faulty master device in the VRRP6 backup group recovers, receives protocol packets, and has a lot of service configurations, the master device slowly delivers the VRRP6 forwarding table. An immediate traffic switchback leads to packet loss on the master device. To prevent packet loss, properly set a delay time in this situation.

  • The preemption delay refers to the delay before the backup switches to the master. Therefore, the IP address owner is irrelevant to the preemption delay. After the IP address owner recovers, it becomes the master immediately, without any delay.
  • On a stable network, a short preemption delay is recommended. When the master is faulty, the backup can rapidly switch to the master. This prevents traffic loss. On an unstable network, a long preemption delay is recommended. This prevents traffic loss caused by frequent switching of the VRRP6 group status.

Example

# Set the preemption delay of VRRP6 group 1 to 10 seconds.
<HUAWEI> system-view
[~HUAWEI] interface vlanif 100
[*HUAWEI-Vlanif100] vrrp6 vrid 1 virtual-ip FE80::7 link-local
[*HUAWEI-Vlanif100] vrrp6 vrid 1 preempt timer delay 10

vrrp6 vrid priority

Function

The vrrp6 vrid priority command sets the priority of the device in a VRRP6 group.

The undo vrrp6 vrid priority command restores the default priority of the device in a VRRP6 group.

By default, the priority of the device in a VRRP6 group is 100.

Format

vrrp6 vrid virtual-router-id priority priority-value

undo vrrp6 vrid virtual-router-id priority

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the VRID of a VRRP6 group.

The value is an integer that ranges from 1 to 255.

NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

priority priority-value Specifies the priority of the device in a VRRP6 group.

The value is an integer that ranges from 1 to 254. A larger value indicates a higher priority.

Views

GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, VLANIF interface view, Eth-Trunk interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

To configure the device in a VRRP6 group as the default gateway, run the vrrp6 vrid priority command to specify the highest priority for the device so that the device can become the master.

Prerequisites

The vrrp6 vrid virtual-ip command has been executed to create a VRRP6 group.

Precautions
  • Priority 0 is reserved in the system. Priority 255 is reserved for the IP address owner.

  • When devices in a VRRP6 group have the same priority, the device that first changes to master state becomes the master. If devices attempt to be the master simultaneously, the device where the interface with the largest IP address is located becomes the master.

Example

# Set the priority of the switch in VRRP6 group 2 to 120.
<HUAWEI> system-view
[~HUAWEI] interface vlanif 100
[*HUAWEI-Vlanif100] vrrp6 vrid 2 virtual-ip FE80::7 link-local
[*HUAWEI-Vlanif100] vrrp6 vrid 2 priority 120

vrrp6 vrid timer advertise

Function

The vrrp6 vrid timer advertise command sets the interval at which the master sends VRRP6 Advertisement packets.

The undo vrrp6 vrid timer advertise command restores the default interval at which the master sends VRRP6 Advertisement packets.

By default, the master sends VRRP6 Advertisement packets every 1 second.

Format

vrrp6 vrid virtual-router-id timer advertise advertise-interval

undo vrrp6 vrid virtual-router-id timer advertise

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the VRID of a VRRP6 group.

The value is an integer that ranges from 1 to 255.

NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

advertise advertise-interval Specifies the interval at which the master sends VRRP6 Advertisement packets.

The value is an integer that ranges from 100 to 4095, in centiseconds.

Views

GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, VLANIF interface view, Eth-Trunk interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

The master in a VRRP6 group sends VRRP6 Advertisement packets to backups at intervals to notify that it is working properly. If the backup with the highest priority does not receive any VRRP6 Advertisement packets from the master at the specified interval (usually, three times the interval for sending VRRP6 Advertisement packets), it considers the master faulty and becomes the master. The vrrp6 vrid timer advertise command sets the interval at which the master sends VRRP6 Advertisement packets.

Prerequisites

The vrrp6 vrid virtual-ip command has been executed on an interface to create a VRRP6 group.

Precautions

If a longer interval is used, backups in the same VRRP6 group cannot detect the fault on the master in a timely manner, causing packet loss. If a shorter interval is used, system resources are occupied. In addition, when network traffic is heavy or the network is unstable, backups may not receive packets after the Master_Down_Interval timer expires. As a result, the VRRP6 group status is incorrectly switched. Set the interval based on actual networking.

NOTE:
  • For VRRP for IPv4, set the same interval for sending VRRP Advertisement packets for members in a VRRP group to prevent multiple masters in the VRRP group.

  • For VRRP for IPv6, even if you set different intervals for sending VRRP Advertisement packets for members in a VRRP6 group, there is only one master in a VRRP6 group.

Example

# Set the interval at which the master in VRRP6 group 1 sends VRRP6 Advertisement packets to 200 centiseconds.
<HUAWEI> system-view
[~HUAWEI] interface vlanif 100
[*HUAWEI-Vlanif100] vrrp6 vrid 1 virtual-ip FE80::7 link-local
[*HUAWEI-Vlanif100] vrrp6 vrid 1 timer advertise 200
Related Topics

vrrp6 vrid timer advertise millisecond

Function

The vrrp6 vrid timer advertise millisecond command sets an interval at which the master device in a VRRP6 backup group sends a VRRP6 Advertisement packet to 500 ms.

The undo vrrp6 vrid timer advertise command restores the default interval.

By default, the master device sends a VRRP6 Advertisement packet every second.

Format

vrrp6 vrid virtual-router-id timer advertise millisecond millisecond-interval

undo vrrp6 vrid virtual-router-id timer advertise

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the ID of a VRRP6 backup group. The value is an integer ranging from 1 to 255.
NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

millisecond millisecond-interval Specifies a millisecond-level interval at which the master device in a VRRP6 backup group sends a VRRP6 Advertisement packet. The value is 500, in ms.

Views

GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

The master device in a VRRP6 backup group periodically sends VRRP6 Advertisement packets to the backup devices in the group to notify them of its status. You can run the vrrp6 vrid timer advertise millisecond command to set an interval at which the master device in a VRRP6 backup group sends a VRRP6 Advertisement packet to 500 ms.

If a backup device does not receive a VRRP6 Advertisement packet from the master device within a period three times as long as the interval at which the master device sends a VRRP6 packet, the backup device considers the master device Down and preempts the Master state.

Prerequisites

A VRRP6 backup group has been configured using the vrrp6 vrid virtual-ip command.

Precautions

  • After you run the vrrp6 vrid timer advertise millisecond command, the function of learning the interval at which VRRP6 Advertisement packets are sent is not supported. To prevent VRRP6 negotiation failures and two master devices' coexistence, you must set the same interval at which the devices in a VRRP6 backup group send VRRP6 Advertisement packets.
  • When CPU usage is high (a large number of configurations are restored or multiple services are deployed together), VRRP6 may flap because the system cannot promptly process VRRP6 Advertisement packets.
  • A backup device's status changes due to heavy network traffic or timer differences.

Example

# Set an interval at which the master device in VRRP6 backup group 1 sends a VRRP6 Advertisement packet to 500 ms.

<HUAWEI> system-view
[~HUAWEI] interface 10ge 1/0/1
[~HUAWEI-10GE1/0/1] undo portswitch
[*HUAWEI-10GE1/0/1] vrrp6 vrid 1 virtual-ip FE80::7 link-local
[*HUAWEI-10GE1/0/1] vrrp6 vrid 1 timer advertise millisecond 500

vrrp6 vrid track admin-vrrp vrid

Function

The vrrp6 vrid track admin-vrrp vrid command binds a VRRP6 group to an mVRRP6 group.

The undo vrrp6 vrid track admin-vrrp command unbinds a VRRP6 group from an mVRRP6 group.

By default, no VRRP6 group is bound to an mVRRP6 group.

Format

vrrp6 vrid virtual-router-id1 track admin-vrrp interface interface-type interface-number vrid virtual-router-id2 [ unflowdown ]

undo vrrp6 vrid virtual-router-id1 track admin-vrrp

Parameters

Parameter Description Value
vrid virtual-router-id1 Specifies the VRID of a VRRP6 group.

The value is an integer that ranges from 1 to 255.

NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

vrid virtual-router-id2 Specifies the VRID of an mVRRP6 group.

The value is an integer that ranges from 1 to 255.

NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

interface-type interface-number Specifies the type and number of an interface configured with an mVRRP6 group.

-

unflowdown

Allows the interface where a VRRP6 group bound to an mVRRP6 group is configured to retain the Up state if the mVRRP6 group is in Backup or Initialize state.

-

Views

GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, VLANIF interface view, Eth-Trunk interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

If multiple VRRP6 groups are configured on the device, each group sends VRRP6 Advertisement packets to maintain its state machine. As a result, a large number of VRRP6 Advertisement packets are generated, which occupy network bandwidth resources and cause CPU performance to deteriorate. To solve the problem, run the vrrp6 vrid track admin-vrrp6 vrid command to bind a VRRP6 group to an mVRRP6 group. After a VRRP6 group is bound to an mVRRP6 group, the VRRP6 group does not send VRRP6 Advertisement packets to negotiate the Master and Backup states. The mVRRP6 group determines the status of the bound VRRP6 group. This method greatly reduces the impact of VRRP6 Advertisement packets on network bandwidth and CPU performance.

This mode is used on a network where uplink and downlink traffic can be transmitted along different paths. unflowdown can be configured to allow the mVRRP6 group to determine the status of its bound VRRP6 group. Uplink traffic travels through the master and then reaches the upper-layer network, and downlink traffic travels through either the master or backup to reach users.

Prerequisites

A VRRP6 group and an mVRRP6 group have been created.

Precautions

The vrrp6 vrid track admin-vrrp6 vrid command can be used only on the interface where the bound VRRP6 group is configured. This command cannot be used on the interface where an mVRRP6 group is configured.

VRRP4 and VRRP6 can be configured on an interface simultaneously. However, there are limitations:
  • A VRRP4 group can be bound to only an mVRRP4 group, and a VRRP6 group can be bound to only an mVRRP6 group.
  • At most one VRRP4 group and one VRRP6 group can be configured on an interface. An interface cannot be configured with multiple VRRP4 or VRRP6 groups.

Example

# Bind VRRP6 group 1 to mVRRP6 group 2.
<HUAWEI> system-view
[~HUAWEI] interface vlanif 10
[*HUAWEI-Vlanif10] vrrp6 vrid 1 track admin-vrrp interface vlanif 11 vrid 2 unflowdown

vrrp6 vrid track bfd

Function

The vrrp6 vrid track bfd command associates a VRRP6 group with a BFD session.

The undo vrrp6 vrid track bfd command disassociates a VRRP6 group from a BFD session.

By default, a VRRP6 group is not associated with a BFD session.

Format

vrrp6 vrid virtual-router-id track bfd { session-id | session-name bfd-configure-name } [ increase value-increased | reduce value-reduced ]

vrrp6 vrid virtual-router-id track bfd { session-id | session-name bfd-configure-name } [ peer | link ]

undo vrrp6 vrid virtual-router-id track bfd [ session-id | session-name bfd-configure-name ]

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the VRID of a VRRP6 group.

The value is an integer that ranges from 1 to 255.

NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

session-id Specifies the local discriminator of the monitored BFD session.

The value is an integer that ranges from 1 to 16384.

session-name bfd-configure-name Specifies the name of the monitored BFD session.
The value is a string of 1 to 15 case-sensitive characters without spaces.
NOTE:

When double quotation marks are used around the string, spaces are allowed in the string.

increase value-increased Specifies the value by which the priority increases when the monitored BFD session becomes Down.

The value is an integer that ranges from 1 to 255. The maximum priority value is 254.

reduce value-reduced Specifies the value by which the priority decreases when the monitored BFD session becomes Down.

The value is an integer that ranges from 1 to 255. The priority can decrease to 1. By default, when the monitored BFD session becomes Down, the VRRP6 priority decreases by 10.

peer

Indicates that the monitored BFD session is a peer BFD session.

-

link

Indicates that the monitored BFD session is a link BFD session.

-

Views

GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, VLANIF interface view, Eth-Trunk interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario
If the link between devices in a VRRP6 group fails, the VRRP6 group performs an active/standby switchover only after three times the interval at which VRRP Advertisement packets are sent. During this period, user data may be lost. BFD can rapidly detect link faults. You can run the vrrp6 vrid track bfd command to associate a VRRP6 group with a BFD session. When the status of the monitored BFD session changes, the BFD module notifies the VRRP6 module of the change. The VRRP6 module changes the priority or status based on configurations to implement a rapid active/standby switchover.
  • To associate a VRRP6 group with a common BFD session, run the vrrp6 vrid virtual-router-id track bfd { session-id | session-name bfd-configure-name } [ increase value-increased | reduce value-reduced ] command. When the BFD module notifies the VRRP6 module of a BFD session status change, the VRRP6 module increases or decreases the priority to implement an active/standby switchover. Usually, backups use BFD sessions to monitor the master.
  • To associate a VRRP6 group with a peer or link BFD session, run the vrrp6 vrid virtual-router-id track bfd { session-id | session-name bfd-configure-name } [ peer | link ] command. If peer or link BFD detects a fault and the peer or link BFD session goes Down, the BFD module notifies the VRRP6 module of the status change. After receiving the notification, the VRRP6 module directly performs an active/standby switchover without changing the priority. A VRRP6 group can determine a local or remote link fault based on the status of the peer or link BFD session.
Prerequisites

A VRRP6 group has been created and a static BFD session or a static BFD session with automatically negotiated discriminators has been created.

Precautions

After a VRRP6 group is associated with a BFD session, the BFD session type cannot be modified. Before deleting the BFD session type, you must delete all original configurations.

After a VRRP6 group is associated with a BFD session, set an appropriate value of increase value-increased or reduce value-reduced. This setting ensures that an active/standby switchover is performed immediately when the monitored BFD session becomes Down.

Multiple VRRP6 groups can monitor a BFD session, and a VRRP6 group can monitor a maximum of eight BFD sessions simultaneously.

NOTE:
When associating a VRRP6 group with a BFD session, note the following points:
  • If an IPv6 address owner exists in the VRRP6 group, the VRRP6 group cannot monitor the BFD session.

  • If session-name bfd-configure-name is specified, the VRRP6 group can be bound to only the static BFD session with automatically negotiated discriminators.

  • If session-id is specified, the VRRP6 group can bind to only a static BFD session.

Example

# Associate VRRP6 group 1 with the BFD session hello on VLANIF 100.
<HUAWEI> system-view
[~HUAWEI] bfd
[*HUAWEI-bfd] quit
[*HUAWEI] bfd hello bind peer-ipv6 FC00::1 interface vlanif 100 source-ipv6 FC00::2 auto
[*HUAWEI-bfd-session-hello] quit
[*HUAWEI] interface vlanif 100
[*HUAWEI-Vlanif100] vrrp6 vrid 1 virtual-ip FE80::7 link-local
[*HUAWEI-Vlanif100] vrrp6 vrid 1 virtual-ip FC00::100
[*HUAWEI-Vlanif100] vrrp6 vrid 1 track bfd session-name hello reduce 40
# Enable VRRP6 group 1 to monitor a peer BFD session on VLANIF 100.
<HUAWEI> system-view
[~HUAWEI] bfd
[*HUAWEI-bfd] quit
[*HUAWEI] bfd hello bind peer-ipv6 FC00::1 interface vlanif 100 source-ipv6 FC00::2 auto
[*HUAWEI-bfd-session-hello] quit
[*HUAWEI] interface vlanif 100
[*HUAWEI-Vlanif100] vrrp6 vrid 1 track bfd session-name hello peer

vrrp6 vrid track interface

Function

The vrrp6 vrid track interface command associates a VRRP6 group with an interface.

The undo vrrp6 vrid track interface command disassociates a VRRP6 group from an interface.

By default, a VRRP6 group is not associated with an interface.

Format

vrrp6 vrid virtual-router-id track interface interface-type interface-number [ increase value-increased | reduce value-reduced ]

undo vrrp6 vrid virtual-router-id track interface [ interface-type interface-number ]

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the VRID of a VRRP6 group.

The value is an integer that ranges from 1 to 255.

NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

interface-type interface-number Specifies the type and number of an interface monitored by a VRRP6 group.
  • interface-type specifies the interface type.
  • interface-number specifies the interface number.

-

increase value-increased Specifies the value by which the priority increases when the monitored interface becomes Down.

The value is an integer that ranges from 1 to 255. The maximum priority value is 254.

reduce value-reduced Specifies the value by which the priority decreases when the monitored interface becomes Down.

The value is an integer that ranges from 1 to 255. The priority can decrease to 1. By default, when the monitored interface goes Down, the VRRP6 priority of the device decreases by 10.

Views

GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, VLANIF interface view, Eth-Trunk interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

VRRP6 can only detect the status change of the interface on which a VRRP6 group is configured. VRRP6 cannot detect faults on the uplink interface of the master, causing service interruption. You can associate a VRRP6 group with a device interface that is not in the VRRP6 group. When the monitored interface is faulty, the priority of the master is reduced. This triggers an active/standby switchover and reduces the impact of services on the uplink interface. When the fault is rectified, the original master restores its priority and switches to the master to forward traffic.

Prerequisites

The vrrp6 vrid virtual-ip command has been executed on an interface to create a VRRP6 group.

Precautions

After a VRRP6 group is associated with an interface, set increased value-increased or reduced value-reduced to an appropriate value. This setting ensures that an active/standby switchover is performed immediately when the monitored interface becomes Down.

NOTE:
  • The master and backup in the VRRP6 group must work in preemption mode. It is recommended that the preemption delay be 0 on the backup and larger than 0 on the master.

  • If the device is the IPv6 address owner (the virtual router IPv6 address is used as the actual interface address), you cannot associate a VRRP6 group with an interface.

  • If the IPv4 protocol status on the monitored interface configured with an IPv4 address changes, a new master in the VRRP6 group is selected. If the IPv6 protocol status on the monitored interface configured with an IPv6 address changes, the VRRP6 group remains unchanged.

Example

# Associate VRRP6 group 1 with VLANIF 100 and set reduce value-reduced to 50 when VLANIF 100 becomes Down.
<HUAWEI> system-view
[~HUAWEI] interface vlanif 200
[*HUAWEI-Vlanif200] vrrp6 vrid 1 virtual-ip FE80::7 link-local
[*HUAWEI-Vlanif200] vrrp6 vrid 1 virtual-ip FC00::2
[*HUAWEI-Vlanif200] vrrp6 vrid 1 track interface vlanif 100 reduce 50
Related Topics

vrrp6 vrid virtual-ip

Function

The vrrp6 vrid virtual-ip command creates a VRRP6 group and assigns a virtual IPv6 address to the group.

The undo vrrp6 vrid virtual-ip command deletes the virtual IPv6 address of a VRRP6 group.

By default, no VRRP6 group is created.

Format

vrrp6 vrid virtual-router-id [ virtual-ip virtual-ipv6-address [ link-local ] ]

undo vrrp6 vrid virtual-router-id [ virtual-ip virtual-ipv6-address [ link-local ] ]

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the VRID of a VRRP6 group.

The value is an integer that ranges from 1 to 255.

NOTE:

The CE6870EI supports a maximum of sixteen VRIDs. The CE6880EI supports a maximum of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces to VRRP groups with the same VRID.

The total number of virtual MAC addresses on VLANIF, VBDIF, and NVE interfaces of the device cannot exceed the maximum number of VRIDs.

virtual-ip virtual-ipv6-address Specifies the virtual IPv6 address of a VRRP6 group.

The address is a 32-digit hexadecimal number, in the format X:X:X:X:X:X:X:X.

link-local Indicates that a link-local address is used as the virtual IPv6 address of a VRRP6 group. The first virtual IPv6 address of a VRRP6 group must be a link-local address.

-

Views

GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, VLANIF interface view, Eth-Trunk interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

In practice, hosts use the default gateway to communicate with external networks. As value-added services such as IPTV or video conferencing services are widely deployed, hosts may fail to communicate with external networks if the default gateway fails. Configuring dynamic routing protocols such as RIPng, OSPFv3, or ICMPv6 can improve system reliability. However, it is difficult to configure dynamic routing protocols and some hosts may not support dynamic routing protocols. VRRP6 virtualizes multiple routing devices into a virtual router without changing the networking. The virtual router IPv6 address is configured as the default gateway address.

If users on a network have the same reliability requirements, configure multiple virtual IPv6 addresses for a VRRP6 group. By doing this, one virtual IPv6 address serves one separate user group, and the default gateway address remains consistent regardless of changes in VRRP6 device locations. A VRRP6 group can be assigned a maximum of 16 virtual IPv6 addresses.

Precautions

If all the virtual IPv6 addresses in a VRRP6 group are deleted, the VRRP6 group is deleted automatically.

NOTE:
  • The first virtual IPv6 address of a VRRP6 group must be a link-local address. That is, you must run the vrrp6 vrid virtual-router-id virtual-ip virtual-ipv6-address link-local command before assigning other virtual IPv6 addresses to the VRRP6 group.

  • VRRP6 groups on one interface must use different virtual IP addresses.

  • Two devices in a VRRP6 group must be configured with the same VRID.

  • VRRP6 groups on different interfaces of a device can be configured with the same VRID.

Example

# Configure a VRRP6 group on VLANIF 100 and configure the virtual IPv6 address FE80::7.
<HUAWEI> system-view
[~HUAWEI] interface vlanif 100
[*HUAWEI-Vlanif100] vrrp6 vrid 1 virtual-ip FE80::7 link-local
Translation
Download
Updated: 2019-03-21

Document ID: EDOC1000166501

Views: 42688

Downloads: 326

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next