No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Command Reference

S1720, S2700, S5700, and S6720 V200R011C10

This document describes all the configuration commands of the device, including the command function, syntax, parameters, views, default level, usage guidelines, examples, and related commands.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
VRRP Configuration Commands

VRRP Configuration Commands

Command Support

The S1720GFR, S2750EI, S5710-X-LI, S5700LI, and S5700S-LI do not support VRRP.

admin-vrrp vrid

Function

The admin-vrrp vrid command specifies an mVRRP group.

The undo admin-vrrp vrid command deletes the specified mVRRP group.

By default, no mVRRP group is configured.

Format

admin-vrrp vrid virtual-router-id

undo admin-vrrp vrid virtual-router-id

Parameters

Parameter

Description

Value

vrid virtual-router-id

Specifies the virtual router ID (VRID) of an mVRRP group.

The value is an integer that ranges from 1 to 255.

Views

Interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

An mVRRP group can be bound to VRRP groups. Once bound, the mVRRP group determines the master and backup status of the bound VRRP groups. mVRRP is used when multiple VRRP groups coexist, decreasing the number of VRRP Advertisement packets sent and minimize network bandwidth and system resource consumption.
NOTE:

mVRRP provides the following functions:

  • An mVRRP group used as the gateway can process both VRRP Advertisement packets and service packets.

  • An mVRRP group that is not used as the gateway can only process VRRP Advertisement packets.

Precautions

An mVRRP group cannot be bound to another mVRRP group.

Example

# Create VRRP group 1 on VLANIF 10 and configure it as an mVRRP group.
<HUAWEI> system-view
[HUAWEI] interface vlanif 10
[HUAWEI-Vlanif10] ip address 10.1.1.1 24
[HUAWEI-Vlanif10] vrrp vrid 1 virtual-ip 10.1.1.111
[HUAWEI-Vlanif10] admin-vrrp vrid 1
# Create VRRP group 1 on GE0/0/1 and configure it as an mVRRP group.
<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] undo portswitch
[HUAWEI-GigabitEthernet0/0/1] ip address 10.1.1.1 24
[HUAWEI-GigabitEthernet0/0/1] vrrp vrid 1 virtual-ip 10.1.1.111
[HUAWEI-GigabitEthernet0/0/1] admin-vrrp vrid 1

admin-vrrp6 vrid

Function

The admin-vrrp6 vrid command configures a VRRP6 group as an mVRRP6 group.

The undo admin-vrrp6 vrid command deletes the specified mVRRP6 group.

By default, no mVRRP6 group is configured.

Format

admin-vrrp6 vrid virtual-router-id

undo admin-vrrp6 vrid virtual-router-id

Parameters

Parameter

Description

Value

vrid virtual-router-id

Specifies the virtual router ID (VRID) of an mVRRP6 group.

The value is an integer that ranges from 1 to 255.

Views

VLANIF interface view, Eth-Trunk interface view, GE interface view, XGE interface view, 40GE interface view, MultiGE interface view, Eth-Trunk sub-interface view, GE sub-interface view, XGE sub-interface view, 40GE sub-interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

An mVRRP6 group can be bound to common VRRP6 groups. Once bound, the mVRRP6 group determines the status of the bound VRRP6 groups based on the binding. mVRRP6 is used when multiple VRRP6 groups coexist, decreasing the number of VRRP Advertisement packets sent and minimizing network bandwidth consumption.
NOTE:

mVRRP6 provides the following functions:

  • An mVRRP6 group used as the gateway can process both VRRP6 Advertisement packets and service packets.

  • An mVRRP6 group that is not used as the gateway can only process VRRP6 Advertisement packets.

Precautions

An mVRRP6 group cannot be bound to another mVRRP6 group.

Example

# Create VRRP6 group 1 on VLANIF 10 and configure it as an mVRRP6 group.
<HUAWEI> system-view
[HUAWEI] ipv6
[HUAWEI] interface vlanif 10
[HUAWEI-Vlanif10] ipv6 enable
[HUAWEI-Vlanif10] ipv6 address FC00::1 64
[HUAWEI-Vlanif10] vrrp6 vrid 1 virtual-ip FE80::1 link-local
[HUAWEI-Vlanif10] admin-vrrp6 vrid 1
# Create a VRRP6 group 1 on GE0/0/1 and configure it as an mVRRP6 group.
<HUAWEI> system-view
[HUAWEI] ipv6
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] undo portswitch
[HUAWEI-GigabitEthernet0/0/1] ipv6 enable
[HUAWEI-GigabitEthernet0/0/1] ipv6 address FC00::1 64
[HUAWEI-GigabitEthernet0/0/1] vrrp6 vrid 1 virtual-ip FE80::1 link-local
[HUAWEI-GigabitEthernet0/0/1] admin-vrrp6 vrid 1

arp learning passive enable

Function

The arp learning passive enable command enables passive ARP that allows a backup device in a VRRP backup group to learn ARP entries when receiving an ARP request message sent to a virtual IP address.

The undo arp learning passive enable command disables passive ARP.

By default, passive ARP is disabled so that a backup device in a VRRP backup group does not learn ARP entries when receiving an ARP request message sent to a virtual IP address.
NOTE:

Only the S5720EI, S5720HI, S6720EI, and S6720S-EI support this command.

Format

arp learning passive enable

undo arp learning passive enable

Parameters

None

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When the master and backup devices in a VRRP backup group receive an ARP request message sent to a virtual IP address, only the master device learns ARP entries and responds to the sender with the virtual MAC address. If a link or device fault causes the VRRP backup group to perform a master/backup switchover, a backup device must learn ARP entries on the user side before taking over traffic. As a result, service traffic is interrupted for a short time.

After you run the arp learning passive enable command to enable passive ARP, a backup device in a VRRP backup group learns ARP entries when receiving an ARP request message sent to a virtual IP address. If a VRRP backup group performs a master/backup switchover, the new master device can take over traffic without needing to relearn ARP entries, ensuring service continuity.

Precautions

Passive ARP cannot be configured together with strict ARP entry learning.

Example

# Enable passive ARP.

<HUAWEI> system-view
[HUAWEI] arp learning passive enable

clear admin-vrrp

Function

The clear admin-vrrp command deletes the binding of an mVRRP group on the subcard that is not functioning.

NOTE:

Only the S5720EI, S5720HI, S6720EI, and S6720S-EI support this command.

Format

clear admin-vrrp binding interface interface-type interface-number vrid virtual-router-id

Parameters

Parameter Description Value
interface interface-type interface-number Specifies the type and number of an interface where an mVRRP group is configured. -
vrid virtual-router-id Specifies the VRID of an mVRRP group. The value is an integer that ranges from 1 to 255.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

An mVRRP group is often bound to VRRP groups on an interface. If the subcard on which the mVRRP group is configured fails or is not properly installed, the binding is retained and will take effect when the subcard begins working properly. You can run the display vrrp binding admin-vrrp member-vrrp command to check whether configuration recovery is successful.

If the binding is not required, run the clear admin-vrrp command to delete the binding.

Prerequisites

The mVRRP group has been configured and VRRP groups have been bound to the mVRRP group.

Precautions

If the binding between the mVRRP group and VRRP groups is deleted, the status of the mVRRP group no longer determines the status of the bound VRRP groups.

The binding deleted using the clear admin-vrrp command cannot be restored.

Ensure that the interface name is correct when executing the clear admin-vrrp command. This is because the system does not verify the interface name.

Example

# Delete the binding of the mVRRP group on the specified subcard that is not properly installed.

<HUAWEI> system-view
[HUAWEI] clear admin-vrrp binding interface gigabitethernet 0/0/1 vrid 1
Related Topics

clear admin-vrrp6

Function

The clear admin-vrrp6 command deletes the binding of an mVRRP6 group on the member switch that is not functioning in a stack.

NOTE:

Only the S5720EI, S5720HI, S6720EI, and S6720S-EI support this command.

Format

clear admin-vrrp6 binding interface interface-type interface-number vrid virtual-router-id

Parameters

Parameter Description Value
interface interface-type interface-number Specifies the type and number of an interface where an mVRRP6 group is configured. -
vrid virtual-router-id Specifies the VRID of an mVRRP6 group. The value is an integer that ranges from 1 to 255.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

In a stack, an mVRRP6 group is often bound to VRRP6 groups on an interface. If the member switch on which the mVRRP6 group is configured fails or is not properly installed, the binding is retained and will take effect when the member switch begins working properly. You can run the display vrrp6 binding admin-vrrp6 member-vrrp command to check whether configuration recovery is successful.

If the binding is not required, run the clear admin-vrrp6 command to delete the binding.

Prerequisites

The mVRRP6 group has been configured and VRRP6 groups have been bound to the mVRRP6 group.

Precautions

If the binding between the mVRRP6 group and VRRP6 groups is deleted, the status of the mVRRP6 group no longer determines the status of the bound VRRP6 groups.

The binding deleted using the clear admin-vrrp6 command cannot be restored.

Ensure that the interface name is correct when executing the clear admin-vrrp6 command. This is because the system does not verify the interface name.

Example

# Delete the binding of the mVRRP6 group on the specified member switch that is not properly installed.

<HUAWEI> system-view
[HUAWEI] clear admin-vrrp6 binding interface gigabitethernet 0/0/1 vrid 1

display snmp-agent trap feature-name vrrp all

Function

The display snmp-agent trap feature-name vrrp all command displays all trap messages of the VRRP module.

Format

display snmp-agent trap feature-name vrrp all

Parameters

None

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

Usage Scenario

The Simple Network Management Protocol (SNMP) is a network management protocol widely used on TCP/IP networks. SNMP uses a central computer (a network management station) that runs network management software to manage network elements. The SNMP agent reports trap messages to the network management station so that the network management station can quickly determine the network status, and the network administrator can take measures accordingly.

The display snmp-agent trap feature-name vrrp all command displays the following information:
  • Trap names supported by the VRRP module: The trap names are the same as the trap names specified by the snmp-agent trap enable feature-name vrrp [ trap-name { vrrptrapauthfailure | vrrptrapmasterdown | vrrptrapnewmaster } ] command. Each trap name corresponds to a network element abnormality.

  • Trap status of the VRRP module: You can check whether a trap is reported based on the trap name.

Prerequisites

SNMP agent has been enabled using the snmp-agent command.

Example

# Display all trap messages of the VRRP module.

<HUAWEI> display snmp-agent trap feature-name vrrp all
------------------------------------------------------------------------------  
Feature name: VRRP                                                              
Trap number : 6                                                                 
------------------------------------------------------------------------------  
Trap name                       Default switch status   Current switch status   
vrrpTrapNewMaster               on                      on                      
vrrpTrapAuthFailure             on                      on                      
vrrpTrapMasterDown              on                      on                      
hwVrrpExtTrapNonMaster          on                      on                      
vrrpv3NewMaster                 on                      on
vrrpv3ProtoError                on                      on
Table 12-12  Description of the display snmp-agent trap feature-name vrrp all command output

Item

Description

Feature name

Name of the module that a trap message belongs to.

Trap number

Number of trap messages.

Trap name

Name of a trap message of the VRRP module:

  • vrrpTrapAuthFailure: This trap message is generated when the authentication mode and key in the received packet conflicts with those on the device.
  • vrrpTrapMasterDown: This trap message is generated when the VRRP group status changes from Master to another status.
  • vrrpTrapNewMaster: This trap message is generated when the VRRP group status changes to Master.
  • hwVrrpExtTrapNonMaster: This trap is generated when the VRRP backup group status changes from Backup to Initialize or from Initialize to Backup.
  • vrrpv3NewMaster: This trap is generated when VRRPv3 changes from another state to the Master state.
  • vrrpv3ProtoError: This trap is generated when a device in a VRRPv3 backup group receives an incorrect VRRP packet.

Default switch status

Whether the trap function is enabled by default:
  • on: The trap function is enabled.
  • off: The trap function is disabled.

Current switch status

Status of the trap function:
  • on: The trap function is enabled.
  • off: That the trap function is disabled.

display vrrp

Function

The display vrrp command displays the status and configuration parameters of VRRP groups.

Format

display vrrp [ interface interface-type interface-number ] [ virtual-router-id ] [ brief ]

display vrrp { interface interface-type interface-number [ virtual-router-id ] | virtual-router-id } verbose

Parameters

Parameter

Description

Value

interface interface-type interface-number Displays the status of all VRRP groups on the specified interface.
  • interface-type specifies the interface type.
  • interface-number specifies the interface number.

-

virtual-router-id Displays the status of a VRRP group with the specified VRID.

The VRID of the VRRP group must have been created.

brief Displays brief information about a specified VRRP group. If this parameter is not specified, detailed information about a VRRP group is displayed.

-

verbose Displays detailed information about a VRRP group.

-

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

The display vrrp command displays information about VRRP groups.

Example

# Display information about all VRRP groups on the switch.

<HUAWEI> display vrrp
Vlanif100 | Virtual Router 1              
    State : Master                                                              
    Virtual IP : 10.1.1.100                                                     
    Master IP : 10.1.1.2                                                        
    PriorityRun : 120                                                           
    PriorityConfig : 120                                                        
    MasterPriority : 120                                                        
    Preempt : YES   Delay Time : 20 s                                           
    TimerRun : 2 s                                                              
    TimerConfig : 2 s                                                           
    Auth type : MD5   Auth key : ******            
    Virtual MAC : 0000-5e00-0101                                                
    Check TTL : YES                                                             
    Config type : normal-vrrp                                                   
    Backup-forward : disabled     
    Track BFD : 69                     Priority reduced : 10                    
    BFD-session state : UP                                                      
    Create time : 2011-10-07 15:43:42 UTC-08:00               
    Last change time : 2011-10-07 15:44:03 UTC-08:00
Table 12-13  Description of the display vrrp command output

Item

Description

Vlanif100 | Virtual Router 1

Interface where the VRRP group is configured and VRID of the VRRP group.

State

VRRP status of the device:
  • Master: The device functions as the master in the VRRP group.

  • Backup: The device functions as the backup in the VRRP group.

  • Initialize: All VRRP groups begin in Initialize state. When the interface where a VRRP group is configured becomes Down or is Administratively Down, the VRRP group status is switched to Initialize.

Virtual IP

Virtual IP address of a VRRP group. To configure a virtual IP address for a VRRP group, run the vrrp vrid virtual-ip command.

Master IP

Primary IP address of the interface configured with the VRRP group on the master.

PriorityRun

Priority of the switch when the VRRP group runs. If the switch is the IP address owner in a VRRP group, the running priority of the switch in the group is displayed as 255.

PriorityConfig

Priority configured for the switch using the vrrp vrid priority command. If the switch is the IP address owner and this value is not configured, the default priority 100 but not 255 is displayed.

MasterPriority

Priority of the master in the VRRP group. If the switch is the IP address owner in a VRRP group, the priority of the switch in the group is displayed as 255.

Preempt

Preemption mode:
  • YES: preemption

  • NO: no preemption

To disable the preemption mode, run the vrrp vrid preempt-mode disable command.

Delay Time

Preemption delay, in seconds. To set the preemption delay, run the vrrp vrid preempt-mode timer delay command.

TimerRun

Interval at which the master in the VRRP group sends VRRP Advertisement packets, in seconds.

TimerConfig

Configured interval at which the master in the VRRP group sends VRRP Advertisement packets, in seconds. To set the interval at which the master in the VRRP group sends VRRP Advertisement packets, run the vrrp vrid timer advertise command.

Auth type

VRRP Advertisement packet authentication mode:
  • NONE: non-authentication

  • SIMPLE: simple authentication

  • MD5: MD5 authentication

To set an authentication mode, run the vrrp vrid authentication-mode command. VRRPv3 does not support authentication.

Auth key

Authentication key. If authentication is configured, ****** is displayed. If no authentication is configured, this field is not displayed.

Virtual MAC

Virtual MAC address of the VRRP group.

Check TTL

Whether the TTL value of a VRRP Advertisement packet is checked:
  • YES: The TTL value of a VRRP Advertisement packet is checked.
  • NO: The TTL value of a VRRP Advertisement packet is not checked.
To configure the switch to check the TTL value in a VRRP Advertisement packet , run the vrrp un-check ttl command.

Config type

VRRP group type:
  • normal-vrrp: common VRRP group

  • admin-vrrp: mVRRP group

  • member-vrrp: service VRRP group

Backup-forward

Whether the backup is enabled to forward traffic:

  • enabled

  • disabled

To configure the backup to forward traffic, run the vrrp vrid backup-forward command.

Track BFD

Local discriminator or name of the BFD session associated with the VRRP group. This field is displayed when only the BFD session is associated with the VRRP group.

To configure the BFD session associate with the VRRP group, run the vrrp vrid track bfd-session command.

Priority reduced

Value by which the VRRP priority reduces if the interface or BFD session associated with the VRRP group becomes Down.

If the Increase mode is configured, Priority increased is displayed. Priority increased indicates the value by which the VRRP priority increases if the interface or BFD session associated with the VRRP group becomes Down.

To configure the parameter, run the vrrp vrid track bfd-session or vrrp vrid track interface command.

BFD-session state

Status of the BFD session associated with the VRRP group:

  • UP: A BFD session is in Up state.

  • DOWN: A BFD session is in Down state.

  • AdminDown: A BFD session is in AdminDown state.

Create time

Time when the VRRP group was created.

Last change time

Last time the VRRP group status changed.

# Display brief information about all VRRP groups on the switch.

<HUAWEI> display vrrp brief
Total:1     Master:0     Backup:0     Non-active:1      
VRID  State        Interface                Type     Virtual IP     
----------------------------------------------------------------
1     Initialize   Vlanif23                 Normal   10.1.1.100  
Table 12-14  Description of the display vrrp brief command output

Item

Description

VRID

VRID of the VRRP group.

State

VRRP status of the switch:
  • Master: The switch functions as the master in the VRRP group.

  • Backup: The switch functions as the backup in the VRRP group.

  • Initialize: All VRRP groups begin in Initialize state. When the interface where a VRRP group is configured becomes Down or is Administratively Down, the VRRP group status changes to Initialize.

Interface

Interface configured with the VRRP group.

Type

Type of a VRRP group:
  • normal-vrrp: common VRRP group

  • admin-vrrp: mVRRP group

  • member-vrrp: service VRRP group

Virtual IP

Virtual IP address of the VRRP group.

Total

Number of VRRP groups.

Master

Number of VRRP groups in Master state.

Backup

Number of VRRP groups in Backup state.

Non-active

Number of VRRP groups in Non-active state.

display vrrp admin-vrrp

Function

The display vrrp admin-vrrp command displays the status and configuration of all mVRRP groups.

Format

display vrrp admin-vrrp

Parameters

None

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

Usage Scenario

You can view basic information about an mVRRP group, including the interface where the mVRRP group is configured, and the VRID and status of the mVRRP group.

Example

# Display the status and configuration of all mVRRP groups on the device.

<HUAWEI> display vrrp admin-vrrp
Admin-vrrp number: 1
Interface: Vlanif10,  admin-vrrp vrid: 1, state: Master
Table 12-15  Description of the display vrrp admin-vrrp command output

Item

Description

Admin-vrrp number

Number of mVRRP groups.

Interface

Name and number of the interface where the mVRRP group is configured.

admin-vrrp vrid

VRID of the mVRRP group.

state

Status of the mVRRP group:
  • Master
  • Backup
  • Initialize

display vrrp binding admin-vrrp

Function

The display vrrp binding admin-vrrp command displays the binding of an mVRRP group, including member VRRP groups and interfaces where member VRRP groups are configured.

Format

display vrrp binding admin-vrrp [ interface interface-type interface-number ] [ vrid virtual-router-id ]

Parameters

Parameter

Description

Value

interface interface-type interface-number

Specifies the type and number of an interface where an mVRRP group is configured.

  • interface-type specifies the interface type.

  • interface-number specifies the interface number.

-

vrid virtual-router-id

Specifies the VRID of an mVRRP group.

The value is an integer that ranges from 1 to 255.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

You can run the display vrrp binding admin-vrrp command to view the binding of an mVRRP group.

Example

# Display the binding of an mVRRP group.

<HUAWEI> display vrrp binding admin-vrrp
Interface: Vlanif10,  admin-vrrp vrid: 1, state:Master
  Member-vrrp number: 3
    Interface: Vlanif11, vrid: 1, state: Master
    Interface: Vlanif12, vrid: 2, state: Master
    Interface: Vlanif13, vrid: 3, state: Master
Table 12-16  Description of the display vrrp binding admin-vrrp command output

Item

Description

Interface

Interface configured with the mVRRP group.

admin-vrrp vrid

VRID of the mVRRP group.

state

Status of the mVRRP group:
  • Master
  • Backup
  • Initialize

Member-vrrp number

Number of member VRRP groups bound to the mVRRP group.

Interface

Interface where the member VRRP group bound to the mVRRP group is configured.

vrid

VRID of the member VRRP group bound to the mVRRP group.

state

Status of the member VRRP group bound to the mVRRP group:
  • Master
  • Backup
  • Initialize
Related Topics

display vrrp binding admin-vrrp member-vrrp

Function

The display vrrp binding admin-vrrp member-vrrp command displays information about the binding between an mVRRP group and member VRRP groups.

Format

display vrrp binding admin-vrrp [ interface interface-type1 interface-number1 ] [ vrid virtual-router-id1 ] member-vrrp [ interface interface-type2 interface-number2 ] [ vrid virtual-router-id2 ]

Parameters

Parameter Description Value
interface interface-type1 interface-number1 Specifies the type and number of an interface configured with an mVRRP group.
  • interface-type1 specifies the interface type.
  • interface-number1 specifies the interface number.
-
vrid virtual-router-id1 Specifies the VRID of an mVRRP group. The value is an integer that ranges from 1 to 255.
interface interface-type2 interface-number2 Specifies the type and number of an interface configured with a member VRRP group.
  • interface-type2 specifies the interface type.
  • interface-number2 specifies the interface number.
-
vrid virtual-router-id2 Specifies the VRID of a member VRRP group. The value is an integer that ranges from 1 to 255.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

Usage Scenario

You can run the display vrrp binding admin-vrrp member-vrrp command to view information about the binding between an mVRRP group and member VRRP groups.

Example

# Display information about the binding between an mVRRP group and member VRRP groups.

<HUAWEI> display vrrp binding admin-vrrp member-vrrp
Interface: Vlanif11,  admin-vrrp vrid: 1, state:Master
  Member-vrrp number: 3
    Interface: Vlanif10, vrid: 1, state: Master
    Interface: Vlanif10, vrid: 2, state: Master
    Interface: Vlanif12, vrid: 3, state: Master
Table 12-17  Description of the display vrrp binding admin-vrrp member-vrrp command output

Item

Description

Interface

Interface configured with the mVRRP group.

admin-vrrp vrid

VRID of the mVRRP group.

state

Status of the mVRRP group:
  • Master
  • Backup
  • Initialize

Member-vrrp number

Number of member VRRP groups bound to the mVRRP group.

Interface

Interface where the member VRRP group bound to the mVRRP group is configured.

vrid

VRID of the member VRRP group bound to the mVRRP group.

state

Status of the member VRRP group bound to the mVRRP group:
  • Master
  • Backup
  • Initialize

display vrrp protocol-information

Function

The display vrrp protocol-information command displays VRRP information.

Format

display vrrp protocol-information

Parameters

None

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

You can run the display vrrp protocol-information command to view VRRP information.

Example

# Display VRRP information.

<HUAWEI> display vrrp protocol-information
 VRRP protocol information is shown as below:                                   
    VRRP protocol version : V2                                                  
    Send advertisement packet mode : send v2 only  
Table 12-18  Description of the display vrrp protocol-information command output
Item Description

VRRP protocol version

VRRP version number:
  • V2

  • V3

To configure a VRRP version number, run the vrrp version command.

Send advertisement packet mode

Mode in which VRRP Advertisement packets are sent:
  • send v2 only: Only VRRPv2 Advertisement packets are sent.

  • send v3 only: Only VRRPv3 Advertisement packets are sent. It is displayed only when VRRPv3 is used.

  • send v2v3 both: VRRPv2 and VRRPv3 Advertisement packets are sent. It is displayed only when VRRPv3 is used.

To configure the mode in which VRRP Advertisement packets are sent, run the vrrp vrid version-3 send-packet-mode command in the interface view or run the vrrp version-3 send-packet-mode command in the system view.

display vrrp state-change interface vrid

Function

The display vrrp state-change interface vrid command displays status changes of a specified VRRP group. This command can display a maximum of 10 of the latest status changes of a VRRP group.

Format

display vrrp state-change interface interface-type interface-number vrid virtual-router-id

Parameters

Parameter

Description

Value

interface-type interface-number

Specifies the type and number of an interface where status changes of a VRRP group are displayed.

  • interface-type specifies the interface type.

  • interface-number specifies the interface number.

-

vrid virtual-router-id

Specifies the VRID of a VRRP group.

The VRID of the VRRP group must have been created.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

When the VRRP status becomes abnormal, run the display vrrp state-change interface vrid command to view the last 10 status changes of the VRRP group, including the time at which the VRRP group status changed, the VRRP group status before and after the change, and the cause of the VRRP group status change. The command output helps you locate faults.

Example

# Display status changes of VRRP group 1 on VLANIF 100.

<HUAWEI> display vrrp state-change interface vlanif 100 vrid 1
  Time                      SourceState   DestState     Reason
  ---------------------------------------------------------------
  2012-01-27 15:29:45       Backup        Master        Protocol timer expired 
  2012-01-27 15:29:42       Initialize    Backup        Interface UP 
Table 12-19  Description of the display vrrp state-change interface vrid command output

Item

Description

Time

Time when the VRRP group status changed.

SourceState

VRRP group status before the change:

  • Master

  • Backup

  • Initialize

DestState

VRRP group status after the change:

  • Master

  • Backup

  • Initialize

Reason

Cause of the VRRP status change:
  • Admin-vrrp drove

  • BFD configure deleted

  • CFM session down

  • CFM session up

  • EFM configure deleted

  • EFM session down

  • EFM session up

  • Interface up

  • Interface down

  • Ignore interface down

  • Link BFD session down

  • Link BFD session up

  • Link BFD session deleted

  • Link BFD down-number changed

  • Peer BFD session down

  • Priority calculation

  • Protocol timer expired

  • Track interface

  • Track BFD session

display vrrp statistics

Function

The display vrrp statistics command displays statistics about sent and received packets of VRRP groups.

Format

display vrrp [ interface interface-type interface-number ] [ virtual-router-id ] statistics

Parameters

Parameter

Description

Value

interface interface-type interface-number Displays statistics about sent and received packets of all VRRP groups on a specified interface.
  • interface-type specifies the interface type.
  • interface-number specifies the interface number.
If this parameter is not specified, statistics about sent and received packets of all VRRP groups or a specified VRRP group on the device are displayed.

-

virtual-router-id Displays statistics about sent and received packets of a specified VRRP group. If this parameter is not specified, statistics about sent and received packets of all VRRP groups on the device or a specified interface are displayed.

The VRID of the VRRP group must have been created.

statistics Displays statistics about sent and received packets of a VRRP group.

-

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

The display vrrp statistics command displays information about sent and received packets of VRRP groups.

Example

# Display statistics about sent and received packets of VRRP group 1 on VLANIF100.

<HUAWEI> display vrrp interface vlanif 100 1 statistics
  Vlanif 100 | Virtual Router 1
                            Transited to master : 1                             
                            Transited to backup : 1                             
                        Transited to initialize : 0                             
                        Received advertisements : 0                             
                            Sent advertisements : 1000                          
                  Advertisement interval errors : 0                             
                 Failed to authentication check : 0                             
                         Received ip ttl errors : 0                             
            Received packets with priority zero : 0                             
                Sent packets with priority zero : 0                             
                  Received invalid type packets : 0                             
        Received unmatched address list packets : 0                             
            Unknown authentication type packets : 0                             
                 Mismatched authentication type : 0                             
                           Packet length errors : 0                             
       Discarded packets since track admin-vrrp : 0                             
                     Received attacking packets : 0                             
                      Received selfsend packets : 0                             
                                                                                

# Display statistics about all VRRP Advertisement packets on the device.

<HUAWEI> display vrrp statistics
  Checksum errors : 0                                                           
   Version errors : 0                                                           
      Vrid errors : 0                                                           
     Other errors : 0                                                           
                                                                                
  Vlanif 100 | Virtual Router 1                                       
                            Transited to master : 1                             
                            Transited to backup : 1                             
                        Transited to initialize : 0                             
                        Received advertisements : 0                             
                            Sent advertisements : 1000                             
                  Advertisement interval errors : 0                             
                 Failed to authentication check : 0                             
                         Received ip ttl errors : 0                             
            Received packets with priority zero : 0                             
                Sent packets with priority zero : 0                             
                  Received invalid type packets : 0                             
        Received unmatched address list packets : 0                             
            Unknown authentication type packets : 0                             
                 Mismatched authentication type : 0                             
                           Packet length errors : 0                             
       Discarded packets since track admin-vrrp : 0                             
                     Received attacking packets : 0                             
                      Received selfsend packets : 0                             
                                                                                
Table 12-20  Description of the display vrrp statistics command output

Item

Description

Checksum errors

CRC error count.

Version errors

Version error count.

Vrid errors

Number of VRID errors.

Other errors

Number of other errors.

Vlanif 100 | Virtual Router 1

Interface where the VRRP group is configured and VRID of the VRRP group.

Transited to master

Number of times the switch transitions to the Master state.

Transited to backup

Number of times the switch transitions to the Backup state.

Transited to initialize

Number of times the switch transitions to the Initialize state.

Received advertisements

Number of received VRRP Advertisement packets.

Sent advertisements

Number of sent VRRP Advertisement packets.

Advertisement interval errors

Number of times VRRP Advertisement packets are sent at an incorrect interval.

Failed to authentication check

Number of authentication failures.

Received ip ttl errors

Number of packets with TTL errors.

Received packets with priority zero

Number of received VRRP Advertisement packets with the priority of 0.

Sent packets with priority zero

Number of sent VRRP Advertisement packets with the priority of 0.

Received invalid type packets

Number of received VRRP Advertisement packets of invalid type.

Received unmatched address list packets

Number of packets with incorrect virtual IP address lists.

Unknown authentication type packets

Number of packets with an unknown authentication mode.

Mismatched authentication type

Number of packets with a non-matched authentication mode.

Packet length errors

Number of packets with incorrect length.

Discarded packets since track admin-vrrp

Number of received packets that are discarded after a VRRP group is bound to a management VRRP (mVRRP) group.

Received attacking packets

Number of received attack packets.

Received selfsend packets

Number of received packets sent by the switch.

display vrrp track bfd gratuitous-arp information

Function

The display vrrp track bfd gratuitous-arp information command displays information when a sub-interface is enabled to rapidly send gratuitous ARP packets during an active/standby switchover of a VRRP group triggered by its associated peer BFD session.

Format

display vrrp track bfd gratuitous-arp information

NOTE:

Only the S5720HI supports this command.

Parameters

None

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

The display vrrp track bfd gratuitous-arp information command displays information when a sub-interface is enabled to rapidly send gratuitous ARP packets during an active/standby switchover of a VRRP group triggered by its associated peer BFD session.

Example

# Display information when a sub-interface is enabled to rapidly send gratuitous ARP packets during an active/standby switchover of a VRRP group triggered by its associated peer BFD session.

<HUAWEI> display vrrp track bfd gratuitous-arp information
--------------------------------------------------------------------------------
Interface                        Vrid       BFD-session Name        Status      
--------------------------------------------------------------------------------
GigabitEthernet0/0/19.1          32         atob                    Active      
--------------------------------------------------------------------------------
Total:1            Active:1            InActive:0                               
Table 12-21  Description of the display vrrp track bfd gratuitous-arp information command output

Item

Description

Interface

Interface configured with the VRRP group.

Vrid

VRID of the VRRP group.

BFD-session Name

-

Status

Status of the BFD session.

Total

Total number of peer BFD sessions.

Active

Number of BFD sessions in active state.

InActive

Number of BFD sessions in inactive state.

display vrrp6

Function

The display vrrp6 command displays the status and configuration parameters of VRRP6 groups.

Format

display vrrp6 [ interface interface-type interface-number ] [ vrid virtual-router-id ] [ brief ]

display vrrp6 { interface interface-type interface-number [ vrid virtual-router-id ] | vrid virtual-router-id } verbose

Parameters

Parameter Description Description
interface interface-type interface-number Displays the status of all VRRP6 groups on the specified interface.
  • interface-type specifies the interface type.
  • interface-number specifies the interface number.
If this parameter is not specified, information about all VRRP6 groups is displayed.

-

vrid virtual-router-id Displays the status of a VRRP6 group with the specified VRID.

The VRID of the VRRP6 group must have been created.

brief Displays brief information about a specified VRRP6 group.

-

verbose Displays detailed information about a specified VRRP6 group.

-

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

You can view the status and configuration of all VRRP6 groups based on networking, including interfaces where mVRRP6 groups are configured, and VRIDs and statuses of VRRP6 groups.

Example

# Display information about all VRRP6 groups on the switch with VRID 4.

<HUAWEI> display vrrp6 vrid 4
Vlanif100 | Virtual Router 4
    State            : Master
    Virtual IP       : FE80::1:2
    Master IP : FE80::218:82FF:FED3:2AF1 
    PriorityRun      : 200
    PriorityConfig   : 200
    MasterPriority   : 200
    Preempt          : YES                     Delay Time : 0 s 
    TimerRun         : 100 cs
    TimerConfig      : 100 cs
    Virtual Mac      : 0000-5e00-0204
    Check hop limit  : YES
    Config type      : normal-vrrp
    Backup-forward   : disabled
    Create time      : 2012-05-22 17:40:56 UTC-08:00
    Last change time : 2012-05-22 17:41:03 UTC-08:00
Table 12-22  Description of the display vrrp6 command output

Item

Description

Vlanif100 | Virtual Router 4

Interface where the VRRP6 group is configured and VRID of the VRRP6 group.

State

VRRP6 status of the device:
  • Master: The device functions as the master in the VRRP6 group.

  • Backup: The device functions as the backup in the VRRP6 group.

  • Initialize: All VRRP6 groups begin in Initialize state. When the status of an interface is Down or administratively Down, the VRRP6 group status changes to Initialize.

Virtual IP

Virtual IP address of the VRRP6 group. To configure a virtual IP address for a VRRP6 group, run the vrrp6 vrid virtual-ip command.

Master IP

Primary IP address of the interface configured with the VRRP6 group on the master.

PriorityRun

Priority of the switch when the VRRP6 group runs. If the switch is the IP address owner in a VRRP6 group, the running priority of the switch in the group is displayed as 255.

PriorityConfig

Priority configured for the switch using the vrrp6 vrid priority command. If the switch is the IP address owner, the default priority 100 but not 255 is displayed.

MasterPriority

Priority of the master in the VRRP6 group. If the switch is the IP address owner in a VRRP6 group, the priority of the switch in the group is displayed as 255.

Preempt

Preemption mode:
  • YES: preemption

  • NO: no preemption

To disable the preemption mode, run the vrrp6 vrid preempt-mode disable command.

Delay Time

Preemption delay, in seconds. To set the preemption delay, run the vrrp6 vrid preempt-mode timer delay command.

TimerRun

Interval at which the master in the VRRP6 group sends VRRP Advertisement packets, in centiseconds.

TimerConfig

Configured interval at which the master in the VRRP6 group sends VRRP6 Advertisement packets, in centiseconds. To set the interval at which the master in the VRRP6 group sends VRRP6 Advertisement packets, run the vrrp6 vrid timer advertise command.

Virtual Mac

Virtual MAC address of the VRRP6 group.

Check hop limit

Whether the TTL value of a VRRP6 Advertisement packet is checked:
  • YES: The TTL value of a VRRP6 Advertisement packet is checked.
  • NO: The TTL value of a VRRP6 Advertisement packet is not checked.
To configure the device to check the TTL value in a VRRP6 Advertisement packet , run the vrrp6 un-check hop-limit command.

Config type

Type of a VRRP6 group:
  • normal-vrrp: common VRRP6 group

  • admin-vrrp: mVRRP6 group

  • member-vrrp: service VRRP6 group

Backup-forward

Whether the backup is enabled to forward traffic:

  • enabled
  • disabled

Create time

Time when the VRRP6 group was created.

Last change time

Last time the VRRP6 group status changed.

# Display brief information about all VRRP6 groups on the device.

<HUAWEI> display vrrp6 brief
Total:2     Master:2     Backup:0     Non-active:0      
VRID  State        Interface                Type     Virtual IP     
----------------------------------------------------------------
1     Master       Vlanif66                  Normal   FE80::1        
2     Master       Vlanif67                  Normal   FE80::1:3      
Table 12-23  Description of the display vrrp6 brief command output

Item

Description

VRID

VRID of the VRRP6 group.

State

VRRP6 status of the switch:
  • Master: The device functions as the master in the VRRP6 group.

  • Backup: The device functions as the backup in the VRRP6 group.

  • Initialize: All VRRP6 groups begin in Initialize state. When the interface where a VRRP group is configured becomes Down or is Administratively Down, the VRRP6 group status is switched to Initialize.

Interface

Interface configured with the VRRP6 group.

Type

Type of a VRRP6 group:
  • normal-vrrp: common VRRP6 group

  • admin-vrrp: mVRRP6 group

  • member-vrrp: service VRRP6 group

Virtual IP

Virtual IP address of the VRRP6 group.

Total

Number of VRRP6 groups.

Master

Number of VRRP6 groups in Master state.

Backup

Number of VRRP6 groups in Backup state.

Non-active

Number of VRRP6 groups in Non-active state.

display vrrp6 admin-vrrp6

Function

The display vrrp6 admin-vrrp6 command displays the status and configuration of all mVRRP6 groups.

Format

display vrrp6 admin-vrrp6

Parameters

None

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

You can view the status and configuration of all mVRRP6 groups, including interfaces where mVRRP6 groups are configured, and VRIDs and statuses of the mVRRP6 groups.

Example

# Display the status and configuration of all mVRRP6 groups on the device.

<HUAWEI> display vrrp6 admin-vrrp6
  Admin-vrrp6 number: 1
Interface: Vlanif100,  admin-vrrp6 vrid: 1, state: Master
Table 12-24  Description of the display vrrp6 admin-vrrp6 command output

Item

Description

Admin-vrrp6 number

Number of mVRRP6 groups.

Interface

Interface configured with the mVRRP6 group.

admin-vrrp6 vrid

VRID of the mVRRP6 group.

state

Status of the mVRRP6 group:
  • Master

  • Backup

  • Initialize

Related Topics

display vrrp6 binding admin-vrrp6

Function

The display vrrp6 binding admin-vrrp6 command displays the binding of an mVRRP6 group and its member VRRP6 groups.

Format

display vrrp6 binding admin-vrrp6 [ interface interface-type interface-number ] [ vrid virtual-router-id ]

Parameters

Parameter Description Value
interface interface-type interface-number Specifies the type and number of an interface where an mVRRP6 group is configured. -
vrid virtual-router-id Specifies the VRID of an mVRRP6 group. The value is an integer that ranges from 1 to 255.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

If the interface interface-type interface-number parameter is not specified, the display vrrp6 binding admin-vrrp6 command displays the binding of mVRRP6 groups on all interfaces of the device.

Example

# Display the binding of mVRRP6 groups on all interfaces.

<HUAWEI> display vrrp6 binding admin-vrrp6
Interface: Vlanif100,  admin-vrrp6 vrid: 1, state:Master
  Member-vrrp6 number: 1
    Interface: Vlanif200, vrid: 2, state: Master
Table 12-25  Description of the display vrrp6 binding admin-vrrp6 command output

Item

Description

Interface

Interface configured with the mVRRP6 group.

admin-vrrp6 vrid

VRID of the mVRRP6 group.

state

Status of the mVRRP6 group:
  • Master
  • Backup
  • Initialize

Member-vrrp6 number

Number of member VRRP6 groups bound to the mVRRP6 group.

Interface

Interface configured with a member VRRP6 group that is bound to the mVRRP6 group.

vrid

VRID of a member VRRP6 group bound to the mVRRP6 group.

state

Status of a member VRRP6 group bound to the mVRRP6 group:
  • Master
  • Backup
  • Initialize

display vrrp6 binding admin-vrrp6 member-vrrp

Function

The display vrrp6 binding admin-vrrp6 member-vrrp command displays information about the binding between an mVRRP6 group and member VRRP6 groups.

Format

display vrrp6 binding admin-vrrp6 [ interface interface-type1 interface-number1 ] [ vrid virtual-router-id1 ] member-vrrp [ interface interface-type2 interface-number2 ] [ vrid virtual-router-id2 ]

Parameters

Parameter Description Value
interface interface-type1 interface-number1 Specifies the type and number of an interface configured with an mVRRP6 group. -
vrid virtual-router-id1 Specifies the VRID of an mVRRP6 group. The value is an integer that ranges from 1 to 255.
interface interface-type2 interface-number2 Specifies the type and number of an interface configured with a member VRRP6 group. -
vrid virtual-router-id2 Specifies the VRID of a member VRRP6 group. The value is an integer that ranges from 1 to 255.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

The display vrrp6 binding admin-vrrp6 member-vrrp command displays the bindings between mVRRP6 backup groups and member VRRP6 backup groups on the network as required.

  • If interface-type1 interface-number1 is merely specified in the command, the command output displays all the bindings between mVRRP6 backup groups and member VRRP6 backup groups on the specified interface.

  • If the command is specified with only virtual-router-id1, the command output displays the bindings between the specified mVRRP6 backup group and member VRRP6 backup groups.

  • If the command is specified with only interface-type1 interface-number1 and virtual-router-id1, the command output displays the bindings between the specified mVRRP6 backup group on the specified interface and member VRRP6 backup groups.

  • If the command is only specified with interface-type2 interface-number2, the command output displays the bindings between member VRRP6 backup groups on the specified interface and mVRRP6 backup groups.

  • If the command is specified with only virtual-router-id2, the command output displays the bindings between the specified member VRRP6 backup group and mVRRP6 backup groups.

  • If the command is specified with only interface-type2 interface-number2 and virtual-router-id2, the command output displays the bindings between the specified member VRRP6 backup group on the specified interface and mVRRP6 backup groups, and information about the mVRRP6 backup groups.

Example

# Display information about the binding between an mVRRP6 group and member VRRP6 groups.

<HUAWEI> display vrrp6 binding admin-vrrp6 member-vrrp
Interface: Vlanif100, admin-vrrp6 vrid: 1, state: Master
  Member-vrrp number: 2
    Interface: Vlanif101, vrid: 2, state: Master
    Interface: Vlanif102, vrid: 3, state: Master

# Display information about the binding between mVRRP6 group 1 and member VRRP6 groups on VLANIF 10.

<HUAWEI> display vrrp6 binding admin-vrrp6 interface vlanif 10 vrid 1 member-vrrp
Interface: Vlanif10,  admin-vrrp6 vrid: 1, state:Master
  Member-vrrp number: 3
          Interface: Vlanif100, vrrp6 vrid: 1, state: Master
          Interface: Vlanif101, vrrp6 vrid: 2, state: Master
          Interface: Vlanif102, vrrp6 vrid: 3, state: Master
Table 12-26  Description of the display vrrp6 binding admin-vrrp6 member-vrrp command output

Item

Description

Interface

Interface configured with the mVRRP6 group.

admin-vrrp6 vrid

VRID of the mVRRP6 group.

state

Status of the mVRRP6 group:
  • Master

  • Backup

  • Initialize

Member-vrrp number

Number of member VRRP6 groups bound to the mVRRP6 group.

Interface

Interface configured with the member VRRP6 group.

vrrp6 vrid

VRID of the member VRRP6 group.

state

Status of the member VRRP6 group.

display vrrp6 state-change interface vrid

Function

The display vrrp6 state-change interface vrid command displays status changes of a specified VRRP6 group. This command can display a maximum of the latest 10 status changes of a VRRP6 group.

Format

display vrrp6 state-change interface interface-type interface-number vrid virtual-router-id

Parameters

Parameter Description Value
interface-type interface-number Specifies the type and number of an interface where status changes of a VRRP6 group are displayed.

-

virtual-router-id Specifies the VRID of a VRRP6 group.

The VRID of the VRRP6 group must have been created.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

When the VRRP6 status becomes abnormal, run the display vrrp6 state-change interface vrid command to view the latest 10 status changes of the VRRP6 group. The command output includes the time when the VRRP6 group status changed, VRRP6 group status before and after each change, and causes of the status changes. The command output helps you locate faults.

Example

# Display status changes of VRRP6 group 1 on VLANIF 100.

<HUAWEI> display vrrp6 state-change interface vlanif 100 vrid 1
Time                               SourceState  DestState   Reason
-------------------------------------------------------------------------------
2012-05-19 20:36:44                Initialize   Backup      interface up
2012-05-19 20:37:07                Backup       Master      protocol timer expired 
Table 12-27  Description of the display vrrp6 state-change interface vrid command output

Item

Description

Time

Time when the VRRP6 status changed.

SourceState

Status before the change:

  • Master
  • Backup
  • Initialize

DestState

Status after the change:
  • Master
  • Backup
  • Initialize

Reason

Reason of the change in the status of the VRRP6 backup group:
  • Admin-vrrp drove

  • BFD configure deleted

  • Interface up

  • Interface down

  • Link BFD session down

  • Link BFD session up

  • Link BFD session deleted

  • Peer BFD session down

  • Priority calculation

  • Protocol timer expired

  • Track interface

  • Track BFD session

display vrrp6 statistics

Function

The display vrrp6 statistics command displays statistics about sent and received packets of VRRP6 groups.

Format

display vrrp6 [ interface interface-type interface-number ] [ vrid virtual-router-id ] statistics

Parameters

Parameter Description Value
interface interface-type interface-number Displays statistics about sent and received packets of all VRRP6 groups on a specified interface.
  • interface-type specifies the interface type.
  • interface-number specifies the interface number.
If this parameter is not specified, statistics about sent and received packets of all VRRP6 groups or a specified VRRP6 group on the switch are displayed.

-

vrid virtual-router-id Displays statistics about sent and received packets of a specified VRRP6 group. If this parameter is not specified, statistics about sent and received packets of all VRRP6 groups on the switch or a specified interface are displayed.

The VRID of the VRRP6 group must have been created.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

The display vrrp6 statistics command displays information about sent and received packets of VRRP6 groups.

Example

# Display statistics about all VRRP6 Advertisement packets on the switch.

<HUAWEI> display vrrp6 statistics
  Checksum errors : 0
   Version errors : 0
      Vrid errors : 0
     Other errors : 0

  Vlanif100 | Virtual Router 1
                            Transited to master : 1
                            Transited to backup : 1
                        Transited to initialize : 0
                        Received advertisements : 0
                            Sent advertisements : 1000
                  Advertisement interval errors : 0
                 Failed to authentication check : 0
                         Received ip ttl errors : 0
            Received packets with priority zero : 0
                Sent packets with priority zero : 0
                  Received invalid type packets : 0
        Received unmatched address list packets : 0
            Unknown authentication type packets : 0
                 Mismatched authentication type : 0
                           Packet length errors : 0
       Discarded packets since track admin-vrrp : 0
                     Received attacking packets : 0
                      Received selfsend packets : 0
Table 12-28  Description of the display vrrp6 statistics command output

Item

Description

Checksum errors

CRC error count.

Version errors

Version error count.

Vrid errors

Number of VRID errors.

Other errors

Number of other errors.

Vlanif100 | Virtual Router 1

Interface where the VRRP6 group is configured and VRID of the VRRP6 group.

Transited to master

Number of times the switch transitions to the Master state.

Transited to backup

Number of times the switch transitions to the Backup state.

Transited to initialize

Number of times the switch transitions to the Initialize state.

Received advertisements

Number of received VRRP Advertisement packets.

Sent advertisements

Number of sent VRRP Advertisement packets.

Advertisement interval errors

Number of times VRRP Advertisement packets are sent at an incorrect interval.

Failed to authentication check

Number of authentication failures.

Received ip ttl errors

Number of packets with TTL errors.

Received packets with priority zero

Number of received VRRP Advertisement packets with the priority of 0.

Sent packets with priority zero

Number of sent VRRP Advertisement packets with the priority of 0.

Received invalid type packets

Number of received VRRP6 Advertisement packets of invalid type.

Received unmatched address list packets

Number of packets with incorrect virtual IPv6 address lists.

Unknown authentication type packets

Number of invalid authentication packets.

Mismatched authentication type

Number of packets with mismatching authentication types.

Packet length errors

Number of packets with incorrect length.

Discarded packets since track admin-vrrp

Number of received packets that are discarded after a VRRP6 group is bound to a management VRRP6 (mVRRP6) group.

Received attacking packets

Number of received attack packets.

Received selfsend packets

Number of received packets sent by the switch.

reset vrrp statistics

Function

The reset vrrp statistics command clears statistics about received and sent packets of VRRP groups.

Format

reset vrrp [ interface interface-type interface-number ] [ vrid virtual-router-id ] statistics

Parameters

Parameter Description Value
interface interface-type interface-number Clears statistics about sent and received packets of all VRRP groups on a specified interface.
  • interface-type specifies the interface type.
  • interface-number specifies the interface number.
If this parameter is not specified, statistics about sent and received packets of all VRRP groups or a specified VRRP group on the device are cleared.

-

vrid virtual-router-id Clears statistics about sent and received packets of a specified VRRP group. If this parameter is not specified, statistics about sent and received packets of all VRRP groups or a specified VRRP group on the device are cleared.

The value is an integer that ranges from 1 to 255.

Views

User view

Default Level

3: Management level

Usage Guidelines

Usage Scenario

Before recollecting statistics about VRRP Advertisement packets, run the reset vrrp statistics command to clear existing statistics.

Precautions

The cleared statistics cannot be restored. Exercise caution when executing the reset vrrp statistics command.

Example

# Clear statistics about sent and received packets of VRRP group 1 on VLANIF100.

<HUAWEI> reset vrrp interface vlanif 100 vrid 1 statistics

# Clear statistics about all the packets of VRRP group 1.

<HUAWEI> reset vrrp vrid 1 statistics

# Clear statistics about packets of all VRRP groups on the switch.

<HUAWEI> reset vrrp statistics

reset vrrp6 statistics

Function

The reset vrrp6 statistics command clears statistics about received and sent packets of VRRP6 groups.

Format

reset vrrp6 [ interface interface-type interface-number ] [ vrid virtual-router-id ] statistics

Parameters

Parameter Description Value
interface interface-type interface-number Clears statistics about sent and received packets of all VRRP6 groups on a specified interface.
  • interface-type specifies the interface type.
  • interface-number specifies the interface number.
If this parameter is not specified, statistics about sent and received packets of all VRRP6 groups or a specified VRRP6 group on the device are cleared.

-

vrid virtual-router-id Clears statistics about sent and received packets of a specified VRRP6 group. If this parameter is not specified, statistics about sent and received packets of all VRRP6 groups or a specified VRRP6 group on the device are cleared.

The value is an integer that ranges from 1 to 255.

Views

User view

Default Level

3: Management level

Usage Guidelines

Usage Scenario

Before recollecting statistics about VRRP6 Advertisement packets, run the reset vrrp6 statistics command to clear existing statistics.

Precautions

The cleared statistics cannot be restored. Exercise caution when executing the reset vrrp6 statistics command.

Example

# Clear statistics about sent and received packets of VRRP6 group 1 on VLANIF100.

<HUAWEI> reset vrrp6 interface vlanif 100 vrid 1 statistics

# Clear statistics about all the packets of VRRP6 group 1.

<HUAWEI> reset vrrp6 vrid 1 statistics

# Clear statistics about packets of all VRRP6 groups on the switch.

<HUAWEI> reset vrrp6 statistics

set vrrp max-group-number

Function

The set vrrp max-group-number command sets the maximum number of allowed VRRP groups.

The undo set vrrp max-group-number command restores the default maximum number of allowed VRRP groups.

By default, a maximum of 64 VRRP groups can be configured.

NOTE:

Only the S1720GW-E, S1720GWR-E, S1720X-E, S1720GW, S1720GWR, S1720X, S5720HI, S5720EI, S6720S-EI, S6720EI, S5720SI, S5720S-SI, S2720EI, S5720LI, S5720S-LI, S5730SI, S5730S-EI, S6720LI, S6720S-LI, S6720SI, and S6720S-SI support this command.

Format

set vrrp max-group-number max-group-number

undo set vrrp max-group-number

Parameters

Parameter Description Value
max-group-number Specifies the maximum number of allowed VRRP groups.
Enumerated type. The values are as follows:
  • S5720HI: 64, 128, 192, 256, 320, 384, 448, 512, or 1000
  • S5720EI, S6720S-EI, and S6720EI: 64, 128, 192, 256, 320, or 384
  • S5720SI, S5720S-SI, S5730SI, S5730S-EI, S6720SI, and S6720S-SI: 64, 128, 192, or 256
  • S1720GW-E, S1720GWR-E, S1720X-E, S1720GW, S1720GWR, S1720X, S2720EI, S5720LI, S5720S-LI, S6720LI, and S6720S-LI: 64 or 128

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When more than 64 VRRP groups need to be configured, run this command to set the maximum number of allowed VRRP groups.

Precautions
  • You are not advised to configure more than 64 VRRP groups.

  • When more than 64 VRRP groups are configured, to reduce the frequency of sending VRRP Advertisement packets and the impact of VRRP Advertisement packets on network bandwidth and CPU performance, perform either of the following operations as prompted in addition to executing the set vrrp max-group-number command:

    • Run the vrrp vrid timer advertise command to increase the interval for sending VRRP Advertisement packets, and increase the CPCAR for VRRP Advertisement packets. Improper CPCAR settings will affect services on your network. If you need to adjust CPCAR settings, you are advised to contact Huawei technical personnel for help.
    • Configure an mVRRP group.
    • For the S5730SI, S5730S-EI, S6720SI, and S6720S-SI:

      • When the number of VRRP groups on the device exceeds a specified value, ACL resources are occupied. In this situation, MAC mirroring may become invalid.

      • When a VRRP group is configured for a super-VLAN, the device delivers virtual MAC address entries corresponding to sub-VLANs of the super-VLAN. This occupies many resources. When configuring a VRRP group for a super-VLAN, pay attention to the following points:
        • The VRRP group can be configured for a maximum of 16 super-VLANs on the device.

        • The device allows a maximum of 312 virtual MAC address entries for VRRP. For example, there are 10 sub-VLANs in super-VLAN 100. When a VRRP group is configured on VLANIF 100, 11 virtual MAC address entries are occupied (1 super-VLAN + 10 sub-VLANs).

Example

# Set the maximum number of allowed VRRP groups to 192.

<HUAWEI> system-view
[HUAWEI] set vrrp max-group-number 192

snmp-agent trap enable feature-name vrrp

Function

The snmp-agent trap enable feature-name vrrp command enables the trap function for the VRRP module.

The undo snmp-agent trap enable feature-name vrrp command disables the trap function for the VRRP module.

By default, the trap function is enabled for the VRRP module.

Format

snmp-agent trap enable feature-name vrrp [ trap-name { vrrptrapauthfailure | vrrptrapmasterdown | vrrptrapnewmaster | hwvrrpexttrapnonmaster | vrrpv3newmaster | vrrpv3protoerror } ]

undo snmp-agent trap enable feature-name vrrp [ trap-name { vrrptrapauthfailure | vrrptrapmasterdown | vrrptrapnewmaster | hwvrrpexttrapnonmaster | vrrpv3newmaster | vrrpv3protoerror } ]

Parameters

Parameter Description Value
trap-name Enables the trap function for the specified event. If no event type is specified using the trap-name parameter, the trap function is enabled for all events. -
vrrptrapauthfailure Enables the vrrptrapauthfailure trap. When the authentication mode and key in the received packet conflicts with those on the switch, the switch sends this trap message to the NMS. -
vrrptrapmasterdown Enables the vrrptrapmasterdown trap. When the VRRP status changes from the Master state to the Backup or Initialize state, the switch sends this trap message to the NMS. -
vrrptrapnewmaster Enables the vrrptrapnewmaster trap. When the VRRP status change from Backup or Initialize to Master, the switch sends this trap message to the NMS. -
hwvrrpexttrapnonmaster This trap is generated when the VRRP backup group status changes from Backup to Initialize or from Initialize to Backup. -
vrrpv3newmaster Enables the trap function when VRRPv3 changes from another state to the Master state. -
vrrpv3protoerror Enables the trap function when a device in a VRRPv3 backup group receives an incorrect VRRP packet. -

Views

System view

Default Level

2: Configuration level

Usage Guidelines

You can specify trap-name to enable the trap function for one or more events of the VRRP module.

Example

# Enable the vrrptrapauthfailure trap.

<HUAWEI> system-view
[HUAWEI] snmp-agent trap enable feature-name vrrp trap-name vrrptrapauthfailure

vrrp advertise send-mode

Function

The vrrp advertise send-mode command configures a mode in which the master sends VRRP Advertisement packets in a super-VLAN.

The undo vrrp advertise send-mode command restores the default mode in which the master sends VRRP Advertisement packets in a super-VLAN.

By default, the master sends VRRP Advertisement packets to a sub-VLAN that is Up and has the smallest VLAN ID in a super-VLAN.

NOTE:

Only the S5720SI, S5720S-SI, S5720EI, S5720HI, S5730SI, S5730S-EI, S6720SI, S6720S-SI, S6720EI, and S6720S-EI support this command.

Format

vrrp advertise send-mode { sub-vlan-id | all }

undo vrrp advertise send-mode

Parameters

Parameter Description Value
sub-vlan-id Specifies the ID of a sub-VLAN where the master sends VRRP Advertisement packets. The value is an integer that ranges from 1 to 4094.
all Indicates that the master sends VRRP Advertisement packets to all sub-VLANs in a super-VLAN. -

Views

VLANIF interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When a VRRP group is configured in a super-VLAN, run the vrrp advertise send-mode command to configure the master to send VRRP Advertisement packets to a specified sub-VLAN or all sub-VLANs in the super-VLAN. If there are a large number of sub-VLANs in a super-VLAN, to save bandwidth, configure the master to send VRRP Advertisement packets to a specified sub-VLAN.

Prerequisites

A VRRP group has been configured on the VLANIF interface corresponding to the super-VLAN.

Precautions

Using all is not recommended. If all is configured, a super VLAN broadcasts a VRRP Advertisement packet to all its Sub-VLANs. This causes CPU usage to increase.

If both VRRP and static ARP is configured on a device, note the following issues:
  • If VRRP is enabled on a VLANIF interface, a virtual IP address cannot be an IP address that maps to a MAC address in a static ARP entry. If a virtual IP address maps to a MAC address in a static ARP entry, a forwarding failure occurs. For example, if a MAC address in a static ARP entry on a VLANIF interface maps to an IP address of 10.1.1.1, the IP address of 10.1.1.1 cannot be a virtual IP address of a VRRP IPv4 backup group configured on the VLANIF interface.

  • After a VLANIF interface is configured with a VRRP IPv4 backup group and a static ARP entry, the virtual IP address of the VRRP IPv4 backup group cannot be an IP address that maps to the MAC address in the static ARP entry. Otherwise, a forwarding failure occurs. For example, if a VRRP IPv4 backup group on a VLANIF interface is assigned an IP address of 10.1.1.1, the IP address of 10.1.1.1 cannot map to a MAC address in a static ARP entry configured on the VLANIF interface.

Example

# Configure the master to broadcast VRRP Advertisement packets to all sub-VLANs in super-VLAN 100.

<HUAWEI> system-view
[HUAWEI] vlan 100
[HUAWEI-vlan100] aggregate-vlan
[HUAWEI-vlan100] quit
[HUAWEI] interface vlanif 100
[HUAWEI-Vlanif100] vrrp vrid 1 virtual-ip 10.10.10.10
[HUAWEI-Vlanif100] vrrp advertise send-mode all

vrrp arp send-mode simple

Function

The vrrp arp send-mode simple command configures the master on a QinQ termination sub-interface to send gratuitous ARP packets to the VLAN specified by the outer VLAN tag and the first VLAN in the VLAN range specified by the inner VLAN tag.

The undo vrrp arp send-mode simple command restores the default setting.

By default, the master on a QinQ termination sub-interface sends gratuitous ARP packets to the VLAN specified by the outer VLAN tag and all VLANs in the VLAN range specified by the inner VLAN tag.

NOTE:

Only the S5720HI supports this command.

Format

vrrp arp send-mode simple

undo vrrp arp send-mode simple

Parameters

None

Views

VE sub-interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When VRRP is deployed on a QinQ termination sub-interface, the system sends double-tagged ARP packets. If the inner VLAN tag specifies a VLAN range, the system sends ARP packets to all the VLANs in the VLAN range specified by the inner VLAN tag. This ensures that MAC address entries on the downstream device are updated immediately, but causes a heavy burden. The vrrp arp send-mode simple command configures the master on a QinQ termination sub-interface to send gratuitous ARP packets to the VLAN specified by the outer VLAN tag and the first VLAN in the VLAN range specified by the inner VLAN tag. This prevents excess gratuitous ARP packets from affecting the system.

NOTE:

The vrrp arp send-mode simple command takes effect in VLANs specified only by the inner VLAN tag but not VLANs specified by the outer VLAN tag. For example, the VLAN ID in the outer tag ranges from 1 to 10 and the VLAN ID in the inner tag ranges from 1 to 10. After the vrrp arp send-mode simple command is run, gratuitous ARP packets are transmitted in only VLAN 1 (specified by the inner VLAn tag). A total of 10 gratuitous ARP packets (10 outer VLAN IDs x 1 inner VLAN ID) are sent.

Precautions

The vrrp arp send-mode simple command must be executed on a QinQ termination sub-interface.

Example

# Configure VE sub-interface Virtual-Ethernet0/0/2.1 to send gratuitous ARP packets in VLAN 3.

<HUAWEI> system-view
[HUAWEI] interface virtual-ethernet0/0/2
[HUAWEI-Virtual-Ethernet0/0/2] ve-group 1 l3-access
[HUAWEI-Virtual-Ethernet0/0/2] quit
[HUAWEI] interface virtual-ethernet0/0/2.1
[HUAWEI-Virtual-Ethernet0/0/2.1] qinq termination pe-vid 5 ce-vid 3 to 20
[HUAWEI-Virtual-Ethernet0/0/2.1] vrrp vrid 1 virtual-ip 10.1.1.1
[HUAWEI-Virtual-Ethernet0/0/2.1] vrrp arp send-mode simple

vrrp gratuitous-arp timeout

Function

The vrrp gratuitous-arp timeout command configures an interval at which the master in a VRRP group sends gratuitous ARP packets or the master in a VRRP6 group sends ND packets.

The undo vrrp gratuitous-arp timeout command restores the default interval at which the master in a VRRP group sends gratuitous ARP packets or the master in a VRRP6 group sends ND packets.

The default interval is 120 seconds.

Format

vrrp gratuitous-arp timeout time

undo vrrp gratuitous-arp timeout

Parameters

Parameter Description Value
timeout time

Specifies an interval at which the master in a VRRP group sends gratuitous ARP packets or the master in a VRRP6 group sends ND packets.

The value is an integer that ranges from 30 to 1200, in seconds.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

The master in a VRRP group sends gratuitous ARP packets or the master in a VRRP6 group sends ND packets to its connected downstream switch to update the MAC entries on the downstream switch.

Precautions
  • If a short interval is used, bandwidth resources will be consumed. If a long interval is used, MAC address entries on the downstream switch cannot be updated immediately.

  • The interval at which the master sends gratuitous ARP or ND packets must be shorter than the aging time of MAC address entries on user devices.

Set the interval based on actual networking:

  • To restore the default interval at which the master sends gratuitous ARP or ND packets, run the undo vrrp gratuitous-arp timeout command in the system view.

  • If gratuitous ARP or ND packet do not need to be sent, run the vrrp gratuitous-arp timeout disable command in the system view.

Example

# Set the interval at which the master in a VRRP group sends gratuitous ARP packets or the master in a VRRP6 group sends ND packets to 100 seconds.

<HUAWEI> system-view
[HUAWEI] vrrp gratuitous-arp timeout 100

vrrp gratuitous-arp timeout disable

Function

The vrrp gratuitous-arp timeout disable command disables the master device in a Virtual Router Redundancy Protocol for IPv4 (VRRP4) backup group from sending gratuitous ARP packets or the master device in a Virtual Router Redundancy Protocol for IPv6 (VRRP6) backup group from sending ND packets.

By default, the master device in a VRRP4 (or VRRP6) backup group sends gratuitous ARP (or ND) packets every 120 seconds.

Format

vrrp gratuitous-arp timeout disable

Parameters

None

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

The master device in a VRRP4 (or VRRP6) backup group sends gratuitous ARP (or ND) packets to its connected downstream switch to update the MAC entries on the downstream switch. Because ARP and NDP do not provide any security mechanisms, attackers can send spoofed ARP or ND packets to attack network devices. If high network security is required, run the vrrp gratuitous-arp timeout disable command to disable the master device in a VRRP4 backup group from sending gratuitous ARP packets or the master device in a VRRP6 backup group from sending ND packets.

Precautions

After the vrrp gratuitous-arp timeout disable command is run, the master device in a VRRP4 (or VRRP6) backup group no longer periodically sends gratuitous ARP (or ND) packets to its connected downstream switch. If a master/backup switchover occurs, the MAC entries on the downstream switch cannot be promptly updated. As a result, traffic is interrupted.

Example

# Disable the master device in a VRRP4 backup group from sending gratuitous ARP packets or the master device in a VRRP6 backup group from sending ND packets.

<HUAWEI> system-view
[HUAWEI] vrrp gratuitous-arp timeout disable

vrrp recover-delay

Function

The vrrp recover-delay command sets the delay before a VRRP group recovers.

The undo vrrp recover-delay command restores the default delay before a VRRP group recovers.

By default, the delay before a VRRP group recovers is 0.

Format

vrrp recover-delay delay-value

undo vrrp recover-delay

Parameters

Parameter Description Value
delay-value Specifies the delay before a VRRP group recovers. The value is an integer that ranges from 0 to 60, in seconds.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When an interface or a BFD session associated with a VRRP group alternates between Up and Down states, the VRRP group status may flap, causing user traffic loss. To solve this problem, run the vrrp recover-delay command to set the delay before a VRRP group recovers. A VRRP group then only responds to the interface or BFD session Up event after the delay expires.

Precautions
  • When the device in a VRRP group restarts, the VRRP group status may flap. It is recommended that the delay be set based on actual networking.

  • After an interface or a BFD session associated with a VRRP group alternates between Up and Down states, the system only records logs and alarms at one time during each delay. This prevents the same alarms from being displayed repeatedly.

Example

# Set the delay before a VRRP group recovers to 5 seconds.

<HUAWEI> system-view
[HUAWEI] vrrp recover-delay 5

vrrp smooth-switching timer

Function

The vrrp smooth-switching timer command enables VRRP smooth switching and sets the interval contained in VRRP Advertisement packets during VRRP smooth switching.

The undo vrrp smooth-switching timer command disables VRRP smooth switching.

By default, VRRP smooth switching is enabled and the interval contained in VRRP Advertisement packets is 100s.

Format

vrrp smooth-switching timer timer-value

undo vrrp smooth-switching timer

Parameters

Parameter Description Value
timer-value

Specifies the interval contained in VRRP Advertisement packets during VRRP smooth switching. After VRRP smooth switching is enabled on the master, the master sends VRRP Advertisement packets at this interval during an active/standby switchover.

The value is an integer that ranges from 1 to 255, in seconds.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

If an active/standby switchover occurs on the master in the stack system in a VRRP group, the master and backup may fail to communicate with each other during the switchover. During the switchover, the backup with the highest priority becomes the new master if backups receive no VRRP Advertisement packet after the VRRP Advertisement packet sending interval expires. In this situation, two masters coexist. After the active/standby switchover is complete on the original master, the original master switches to the master because its priority is higher than the new master. During this process, services are switched twice, causing unstable service transmission.

After VRRP smooth switching is enabled on the device in the stack system, backups learn the smooth switching time. This implementation extends the timeout interval for receiving VRRP Advertisement packets during VRRP smooth switching, ensuring stability of the VRRP group status.

Prerequisites

The device has been enabled to learn the interval for sending VRRP Advertisement packets using the vrrp timer-advertise learning enable command.

Precautions

After receiving VRRP Advertisement packets from the master, the non-master device checks the interval in VRRP Advertisement packets. If the interval in VRRP Advertisement packets is different from the interval of the non-master device, the non-master device learns the interval and adjusts its own interval to be the same as the learned interval.

  • timer-value must be greater than the interval at which VRRP Advertisement packets are sent. Otherwise, the master may be busy during the switchover and unable to send VRRP Advertisement packets in a timely manner. As a result, a backup switches to the master.

  • After the undo vrrp timer-advertise learning enable command is executed, VRRP smooth switching is also disabled.

Example

# Enable VRRP smooth switching and set the interval contained in VRRP Advertisement packets during VRRP smooth switching to 20 seconds.

<HUAWEI> system-view
[HUAWEI] vrrp smooth-switching timer 20

vrrp timer-advertise learning enable

Function

The vrrp timer-advertise learning enable command enables the device to learn the interval for sending VRRP Advertisement packets.

The vrrp timer-advertise learning disable command disables the device from learning the interval for sending VRRP Advertisement packets.

The undo vrrp timer-advertise learning enable command disables the device from learning the interval for sending VRRP Advertisement packets.

By default, the device is enabled to learn the interval for sending VRRP Advertisement packets.

Format

vrrp timer-advertise learning enable

vrrp timer-advertise learning disable

undo vrrp timer-advertise learning enable

Parameters

None

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When a link fault triggers an active/standby switchover, VRRP smooth switching is enabled to prevent traffic loss. Before enabling VRRP smooth switching, run the vrrp timer advertise learning enable command to enable the device to learn the interval for sending VRRP Advertisement packets. Then non-master devices in the VRRP group will learn the interval at which VRRP Advertisement packets are sent and update their interval to be the same as the learned interval.

Prerequisites

A VRRP group has been created.

Precautions

If VRRP smooth switching has been enabled, running the undo vrrp timer-advertise learning enable command disables VRRP smooth switching.

The undo vrrp timer-advertise learning enable command is valid only for VRRPv2. If VRRPv3 is enabled using the vrrp version command, this function does not take effect.

Example

# Enable the device to learn the interval for sending VRRP Advertisement packets.

<HUAWEI> system-view
[HUAWEI] vrrp timer-advertise learning enable

vrrp track bfd gratuitous-arp send enable

Function

The vrrp track bfd gratuitous-arp send enable command enables a sub-interface to rapidly send gratuitous ARP packets during an active/standby switchover of a VRRP group triggered by its associated peer BFD session.

The undo vrrp track bfd gratuitous-arp send enable command cancels the configuration.

By default, a sub-interface is not enabled to rapidly send gratuitous ARP packets during an active/standby switchover of a VRRP group triggered by its associated peer BFD session.

Format

vrrp track bfd gratuitous-arp send enable

undo vrrp track bfd gratuitous-arp send enable

NOTE:

Only the S5720HI supports this command.

Parameters

None

Views

GE sub-interface view, XGE sub-interface view, Eth-Trunk sub-interface view, VE sub-interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

On a network where association between a VRRP group and a peer BFD session is configured, when the peer BFD session on the backup detects a fault on the active link, the peer BFD session notifies the VRRP group of performing an active/standby switchover. The new master sends gratuitous ARP packets to its downstream Layer 2 device through the software protocol stack so that traffic is switched to the new master.

To speed up traffic switching, run this command to enable a sub-interface to rapidly send gratuitous ARP packets during an active/standby switchover of a VRRP group triggered by its associated peer BFD session. When the peer BFD session on the backup detects the fault on the active link, the hardware rapidly sends gratuitous ARP packets to its downstream Layer 2 device so that traffic is switched to the new master.

Prerequisites

The vrrp vrid virtual-router-id track bfd-session { bfd-session-id | session-name bfd-configure-name } peer command has been configured on the sub-interface.

Precautions

Each peer BFD session triggers only one VRRP group to send gratuitous ARP packets.

Example

# Enable gigabitethernet0/0/1.1 to rapidly send gratuitous ARP packets during an active/standby switchover of a VRRP group triggered by its associated peer BFD session.

<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1.1
[HUAWEI-GigabitEthernet0/0/1.1] vrrp vrid 1 track bfd-session 1 peer
[HUAWEI-GigabitEthernet0/0/1.1] vrrp track bfd gratuitous-arp send enable

vrrp un-check ttl

Function

The vrrp un-check ttl command disables the device from checking the TTL value in VRRP Advertisement packets.

The undo vrrp un-check ttl command enables the device to check the TTL value in VRRP Advertisement packets.

By default, the system checks the TTL value in VRRP Advertisement packets.

Format

vrrp un-check ttl

undo vrrp un-check ttl

Parameters

None

Views

Interface view

Default Level

2: Configuration level

Usage Guidelines

The device checks the TTL value in received VRRP Advertisement packets. If the TTL value in a VRRP Advertisement packet is not 255, the device discards the VRRP Advertisement packet and generates a log about the VRRP Advertisement packet error.

On certain networks, especially on a network where the device interworks with non-Huawei devices, valid packets may be discarded if TTL check is enabled. You can configure the device not to check the TTL value in VRRP Advertisement packets.

Example

# Disable the switch from checking the TTL value in VRRP Advertisement packets on VLANIF 100.
<HUAWEI> system-view
[HUAWEI] interface vlanif 100
[HUAWEI-Vlanif100] vrrp un-check ttl
# Disable the switch from checking the TTL value in VRRP Advertisement packets on GE0/0/1.
<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] undo portswitch
[HUAWEI-GigabitEthernet0/0/1] vrrp un-check ttl
Related Topics

vrrp version

Function

The vrrp version command configures a VRRP version number.

The undo vrrp version command restores the default VRRP version number.

By default, VRRPv2 is used.

Format

vrrp version { v2 | v3 }

undo vrrp version

Parameters

Parameter Description Value
v2

Indicates that VRRPv2 is used.

-
v3

Indicates that VRRPv3 is used.

-

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

If VRRPv2 and VRRPv3 are used on a network and devices running VRRPv2 need to communicate with devices running VRRPv3, run the vrrp version command to specify a VRRP version number.

Precautions

A VRRPv2 group can only send and receive VRRPv2 Advertisement packets. It discards the received VRRPv3 Advertisement packets.

A VRRPv3 group can send and receive both VRRPv2 and VRRPv3 Advertisement packets. You can configure a mode in which VRRPv3 Advertisement packets are sent so that devices running VRRPv2 and VRRPv3 can communicate.

Follow-up Procedure

After VRRPv3 is used, run the vrrp version-3 send-packet-mode command in the system view or the vrrp vrid version-3 send-packet-mode command in the interface view to configure a mode in which VRRP Advertisement packets are sent.

Example

# Set the VRRP version of the device to VRRPv3.

<HUAWEI> system-view
[HUAWEI] vrrp version v3

vrrp version-3 send-packet-mode

Function

The vrrp version-3 send-packet-mode command configures a mode in which VRRPv3 Advertisement packets are sent.

The undo vrrp version-3 send-packet-mode command restores the default mode in which VRRPv3 Advertisement packets are sent.

By default, the mode is v3-only.

Format

vrrp version-3 send-packet-mode { v2-only | v3-only | v2v3-both }

undo vrrp version-3 send-packet-mode

Parameters

Parameter Description Value
v2-only Indicates that the device sends only VRRPv2 Advertisement packets. -
v3-only Indicates that the device sends only VRRPv3 Advertisement packets. -
v2v3-both Indicates that the device sends both VRRPv2 and VRRPv3 Advertisement packets. -

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

If devices in a VRRP group use different VRRP version numbers, the VRRP group may fail to negotiate the status. This is because a VRRPv2-enabled device can only receive VRRPv2 Advertisement packets and discards the received VRRPv3 Advertisement packets. You can configure a mode in which VRRP Advertisement packets are sent so that devices running VRRPv2 and VRRPv3 in the VRRP group can negotiate the status.

Precautions

NOTE:

If a large number of VRRP groups are configured, v2v3-both is not recommended.

Example

# Set the mode in which VRRPv3 Advertisement packets are sent to v2-only.

<HUAWEI> system-view
[HUAWEI] vrrp version-3 send-packet-mode v2-only
Related Topics

vrrp virtual-ip ping enable

Function

The vrrp virtual-ip ping enable command enables the master to respond to ping packets sent to a virtual IP address.

The vrrp virtual-ip ping disable command disables the master from responding to ping packets sent to a virtual IP address.

The undo vrrp virtual-ip ping enable command disables the master from responding to ping packets sent to a virtual IP address.

By default, the master is enabled to respond to ping packets sent to a virtual IP address.

Format

vrrp virtual-ip ping enable

vrrp virtual-ip ping disable

undo vrrp virtual-ip ping enable

Parameters

None

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario
The switch allows user devices to ping a virtual IP address to serve the following purposes:
  • Monitors the operating status of the master in a VRRP group.

  • Monitors communication between a user device and a network connected by a default gateway using the virtual IP address.

Precautions

If the ping to a virtual IP address is enabled, a device on an external network can ping a virtual IP address. This imposes the switch to ICMP-based attacks.

After the undo vrrp virtual-ip ping enable command is run to disable the master from responding to ping packets sent to a virtual IP address, the host route for the virtual IP address is deleted. As a result, services transmitted using the host route are interrupted. For example, after the undo vrrp virtual-ip ping enable command is run, the GRE tunnel with the source IP address of a virtual IP address goes Down.

Example

# Disable the master from responding to ping packets.

<HUAWEI> system-view
[HUAWEI] undo vrrp virtual-ip ping enable

vrrp virtual-ip route-advertise disable

Function

The vrrp virtual-ip route-advertise disable command disables a dynamic routing protocol from advertising routes generated by the virtual IP address of a VRRP group.

The undo vrrp virtual-ip route-advertise disable command enables a dynamic routing protocol to advertise routes generated by the virtual IP address of a VRRP group.

By default, a dynamic routing protocol is enabled to advertise routes generated by the virtual IP address of a VRRP group.

Format

vrrp virtual-ip route-advertise disable [ isis | ospf | rip ] *

undo vrrp virtual-ip route-advertise disable

NOTE:

Only the S5720HI, S5720EI, S6720EI, S6720S-EI, S5720SI, S5720S-SI, S5730SI, S5730S-EI, S6720SI, and S6720S-SI support isis.

Parameters

Parameter Description Value
isis Disables IS-IS from advertising the routes generated by the virtual IP address of a VRRP group. -
ospf Disables OSPF from advertising the routes generated by the virtual IP address of a VRRP group. -
rip Disables RIP from advertising the routes generated by the virtual IP address of a VRRP group. -

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

Direct routes generated by the virtual IP address of a VRRP group can be imported to a dynamic routing protocol. By default, these routes are advertised by a dynamic routing protocol to neighbors. In practice, a large number of routes may be generated by the virtual IP address of a VRRP group. If a dynamic routing protocol imports theses routes and advertises them to neighbors, there is a heavy burden on network devices and network performance deteriorates. You can run the vrrp virtual-ip route-advertise disable command to disable a dynamic routing protocol from advertising routes generated by the virtual IP address of a VRRP group.

Prerequisites

  • A virtual IP address has been configured for a VRRP group.
  • A dynamic routing protocol has imported routes generated by the virtual IP address of the VRRP group.

Precautions

After the vrrp virtual-ip route-advertise disable command is executed, routes generated by virtual IP addresses of all VRRP groups cannot be advertised by a dynamic routing protocol.

The vrrp virtual-ip route-advertise disable command is only valid for OSPF and IS-IS.

If routes generated by the virtual IP address of a VRRP group must be advertised by a dynamic routing protocol, do not run the vrrp virtual-ip route-advertise disable command.

Example

# Disable a dynamic routing protocol from advertising routes generated by the virtual IP address of a VRRP group.

<HUAWEI> system-view
[HUAWEI] vrrp virtual-ip route-advertise disable

vrrp vrid authentication-mode

Function

The vrrp vrid authentication-mode command configures an authentication mode and an authentication key for a VRRP group.

The undo vrrp vrid authentication-mode command cancels the authentication mode and authentication key for a VRRP group.

By default, a VRRP group uses non-authentication.

Format

vrrp vrid virtual-router-id authentication-mode { simple { key | plain key | cipher cipher-key } | md5 md5-key }

undo vrrp vrid virtual-router-id authentication-mode

Parameters

Parameter

Description

Value

vrid virtual-router-id

Specifies the VRID of a VRRP group.

The value is an integer that ranges from 1 to 255.

simple

Indicates simple authentication.

-

key

Specifies the authentication key in simple authentication mode.

The value is a string of 1 to 8 case-sensitive characters without spaces. When double quotation marks are used around the string, spaces are allowed in the string.

plain key

Specifies the authentication key in plain text authentication mode.

NOTE:

If plain is selected, the password is saved in the configuration file in plain text. This brings security risks. It is recommended that you select cipher to save the password in cipher text.

The value is a string of 1 to 8 case-sensitive characters without spaces. When double quotation marks are used around the string, spaces are allowed in the string.

cipher cipher-key

Specifies the authentication key in cipher text authentication mode.

The value a string of case-sensitive characters, spaces not supported. When double quotation marks are used around the string, spaces are allowed in the string. Passwords are saved in ciphertext in the configuration file with the length of 48. Either of the following passwords can be set:
  • A simple text password is a string of 1 to 8 characters.
  • A ciphertext password is a string of 32 or 48 characters.
NOTE:

A 32-character ciphertext password configured in an earlier version is also supported in this version.

md5 md5-key

Specifies the authentication key in MD5 authentication mode.

The value a string of case-sensitive characters, spaces not supported. When double quotation marks are used around the string, spaces are allowed in the string. Passwords are saved in ciphertext in the configuration file with the length of 48. Either of the following passwords can be set:
  • A simple text password is a string of 1 to 8 characters.
  • A ciphertext password is a string of 24, or 32, or 48 characters.
NOTE:

A 32-character ciphertext password configured in an earlier version is also supported in this version.

NOTE:

To ensure security, you are advised to use MD5 as the authentication algorithm of VRRP.

Views

Interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

To be compatible with VRRP defined in earlier version and interwork with other devices, VRRP provides simple authentication and MD5 authentication. The vrrp vrid authentication-mode command configures an authentication mode and an authentication key for a VRRP group.

Prerequisites

A VRRP group has been configured on a specified interface.

Precautions

Devices in a VRRP group must be configured with the same authentication mode and authentication key; otherwise, the VRRP group cannot negotiate the Master and Backup states.

Example

# Set the authentication mode of the VRRP group with VRID 2 on VLANIF100 to MD5 authentication and set the authentication key to Huawei-1.
<HUAWEI> system-view
[HUAWEI] interface vlanif 100
[HUAWEI-Vlanif100] vrrp vrid 2 virtual-ip 10.1.1.1
[HUAWEI-Vlanif100] vrrp vrid 2 authentication-mode md5 Huawei-1
# Set the authentication mode of the VRRP group with VRID 2 on GE0/0/1 to MD5 authentication and set the authentication key to Huawei-1.
<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] undo portswitch
[HUAWEI-GigabitEthernet0/0/1] vrrp vrid 2 virtual-ip 10.1.1.1
[HUAWEI-GigabitEthernet0/0/1] vrrp vrid 2 authentication-mode md5 Huawei-1
Related Topics

vrrp vrid backup-forward

Function

The vrrp vrid backup-forward command enables the backup device in a VRRP backup group to forward traffic.

The undo vrrp vrid backup-forward command disables the backup device in a VRRP backup group from forwarding traffic.

By default, the backup device in a VRRP backup group is disabled from forwarding traffic.

Format

vrrp vrid virtual-router-id backup-forward

undo vrrp vrid virtual-router-id backup-forward

NOTE:
Only the S5720HI supports this command.

Parameters

Parameter Description Value
virtual-router-id Specifies the ID of a VRRP backup group. The value is an integer ranging from 1 to 255.

Views

GE sub-interface view, XGE sub-interface view, Eth-Trunk sub-interface view, VE sub-interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

On large aggregation networks of enterprises, terminal users use active and standby links to access aggregation devices that have a VRRP backup group deployed. The aggregation device connects to the active link is the master device, and that connects to the standby link is the backup device. If the active link or the master device fails, a link switchover occurs. However, the master/backup switchover in the VRRP backup group has not yet completed. Therefore, a traffic interruption occurs and lasts for a short period.

To prevent traffic interruptions in such scenarios, run the vrrp vrid backup-forward command to enable the backup device in a VRRP backup group to forward traffic. This configuration ensures carrier-class reliability.

Prerequisites

A VRRP backup group has been created using the vrrp vrid virtual-ip command in the interface view.

Precautions

The backup device can forward traffic with the destination MAC address being the virtual MAC address. If a downstream switch broadcasts a packet with the destination MAC address being the virtual MAC address, the backup device will also forward this packet. Therefore, two copies of this packet will be sent. To prevent duplicate traffic, do not run the vrrp vrid backup-forward command in scenarios other than the one where high reliability is required on large aggregation networks of enterprises.

Example

# Create VRRP backup group 1 on GE0/0/2.1 and enable the backup device in the VRRP backup group to forward traffic.

<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/2.1
[HUAWEI-GigabitEthernet0/0/2.1] vrrp vrid 1 virtual-ip 10.1.1.100
[HUAWEI-GigabitEthernet0/0/2.1] vrrp vrid 1 backup-forward
Related Topics

vrrp vrid preempt-mode disable

Function

The vrrp vrid preempt-mode disable command configures the device in a VRRP group in non-preemption mode.

The undo vrrp vrid preempt-mode command restores the default preemption mode.

By default, the device uses the immediate preemption mode.

Format

vrrp vrid virtual-router-id preempt-mode disable

undo vrrp vrid virtual-router-id preempt-mode

Parameters

Parameter

Description

Value

vrid virtual-router-id

Specifies the VRID of a VRRP group.

The value is an integer that ranges from 1 to 255.

Views

Interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

To enable the device with higher priority in a VRRP group to be the master, set the preemption mode on the device. In non-preemption mode, as long as the master is working properly, the backup with higher priority cannot be the master.

NOTE:

When non-preemption is disabled, the preemption delay is restored to be 0 seconds immediately.

Prerequisites

The vrrp vrid virtual-ip command has been executed on an interface to create a VRRP group.

Example

# Configure VRRP group 1 in non-preemption mode on the VLANIF interface.
<HUAWEI> system-view
[HUAWEI] interface vlanif 100
[HUAWEI-Vlanif100] vrrp vrid 1 virtual-ip 10.1.1.2
[HUAWEI-Vlanif100] vrrp vrid 1 preempt-mode disable
# Configure VRRP group 1 in non-preemption mode on the Ethernet interface.
<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] undo portswitch
[HUAWEI-GigabitEthernet0/0/1] vrrp vrid 1 virtual-ip 10.1.1.2
[HUAWEI-GigabitEthernet0/0/1] vrrp vrid 1 preempt-mode disable

vrrp vrid preempt-mode timer delay

Function

The vrrp vrid preempt-mode timer delay command sets the preemption delay for the device in a VRRP group.

The undo vrrp vrid preempt-mode timer delay command restores the default preemption delay for the device in a VRRP group.

By default, the preemption delay is 0 seconds.

Format

vrrp vrid virtual-router-id preempt-mode timer delay delay-value

undo vrrp vrid virtual-router-id preempt-mode timer delay

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the VRID of a VRRP group.

The value is an integer that ranges from 1 to 255.

delay delay-value Specifies the preemption delay.

The value is an integer that ranges from 0 to 3600, in seconds. The default value is 0.

Views

Interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

If the backup in a VRRP group does not receive VRRP Advertisement packets from the master within a specified period of time, the backup becomes the master. On an unstable network, even if the master is working properly, the backup may not receive packets from the master because of network congestion. In this case, the VRRP group status will flap and traffic is lost. To prevent frequent switching of the VRRP group status, run the vrrp vrid preempt-mode timer delay command to set the preemption delay so that the backup becomes the master only after the delay expires.

Precautions

You are advised to set the preemption delay of the backup in a VRRP group to 0, configure the master in preemption mode, and set the preemption delay to be longer than 15s. These settings allow a period of time for status synchronization between the uplink and downlink on devices in a VRRP group on an unstable network. If the preceding settings are not used, two masters coexist and user devices may learn an incorrect master address. As a result, traffic is interrupted.

  • The preemption delay refers to the delay before the backup switches to the master. Therefore, the IP address owner is irrelevant to the preemption delay. After the IP address owner recovers, it becomes the master immediately, without any delay.
  • On a stable network, a short preemption delay is recommended. When the master is faulty, the backup with the highest priority can rapidly switch to the master. This prevents traffic loss. On an unstable network, a long preemption delay is recommended. This prevents traffic loss caused by frequent switching of the VRRP group status.

Example

# Set the preemption delay of VRRP group 1 to 5 seconds on the VLANIF interface.
<HUAWEI> system-view
[HUAWEI] interface vlanif 100
[HUAWEI-Vlanif100] vrrp vrid 1 preempt-mode timer delay 5
# Set the preemption delay of VRRP group 1 to 5 seconds on the Ethernet interface.
<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] undo portswitch
[HUAWEI-GigabitEthernet0/0/1] vrrp vrid 1 preempt-mode timer delay 5

vrrp vrid priority

Function

The vrrp vrid priority command sets the priority of the device in a VRRP group.

The undo vrrp vrid priority command restores the default priority of the device in a VRRP group.

By default, the priority of the device in a VRRP group is 100.

Format

vrrp vrid virtual-router-id priority priority-value

undo vrrp vrid virtual-router-id priority

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the VRID of a VRRP group. The value is an integer that ranges from 1 to 255.
priority priority-value Specifies the priority of the device in a VRRP group. The value is an integer that ranges from 1 to 254. A larger value indicates a higher priority.

Views

Interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

To configure the device in a VRRP group as the default gateway, run the vrrp vrid priority command to specify the highest priority for the device so that the device can become the master.

Prerequisites

The vrrp vrid virtual-ip command has been executed to create a VRRP group.

Precautions
  • Priority 0 is reserved in the system. Priority 255 is reserved for the IP address owner.

  • When devices in a VRRP group have the same priority, the device that first changes to master state becomes the master. If devices attempt to be the master simultaneously, the device where the interface with the largest IP address is located becomes the master.

Example

# Set the priority of the switch in VRRP group 1 to 150 on the VLANIF interface.
<HUAWEI> system-view
[HUAWEI] interface vlanif 100
[HUAWEI-Vlanif100] vrrp vrid 1 virtual-ip 10.1.1.2
[HUAWEI-Vlanif100] vrrp vrid 1 priority 150
# Set the priority of the switch in VRRP group 1 to 150 on the Ethernet interface.
<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] undo portswitch
[HUAWEI-GigabitEthernet0/0/1] vrrp vrid 1 virtual-ip 10.1.1.2
[HUAWEI-GigabitEthernet0/0/1] vrrp vrid 1 priority 150
Related Topics

vrrp vrid timer advertise

Function

The vrrp vrid timer advertise command sets the interval at which the master sends VRRP Advertisement packets.

The undo vrrp vrid timer advertise command restores the default interval at which the master sends VRRP Advertisement packets.

By default, the master sends VRRP Advertisement packets every 1 second.

Format

vrrp vrid virtual-router-id timer advertise advertise-interval

undo vrrp vrid virtual-router-id timer advertise

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the VRID of a VRRP group. The value is an integer that ranges from 1 to 255.
advertise advertise-interval Specifies the interval at which the master sends VRRP Advertisement packets. The value is an integer, in seconds. In VRRPv2, the value ranges from 1 to 255. In VRRPv3, the value ranges from 1 to 40.

Views

Interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

The master in a VRRP group sends VRRP Advertisement packets to backups at intervals to notify that it is working properly. If the backup with the highest priority does not receive any VRRP Advertisement packets from the master at the specified interval, it considers the master faulty and becomes the master. The vrrp vrid timer advertise command sets the interval at which the master sends VRRP Advertisement packets.

Prerequisites

The vrrp vrid virtual-ip command has been executed on an interface to create a VRRP group.

Precautions

If a longer interval is used, backups in the same VRRP group cannot detect the fault on the master in a timely manner, causing packet loss. If a shorter interval is used, system resources are occupied. In addition, when network traffic is heavy or the network is unstable, backups may not receive packets after the Master_Down_Interval timer expires. As a result, the VRRP group status is incorrectly switched. Set the interval based on actual networking.The algorithm for calculating the value of the Master_Down_Interval timer is as follows:

Master_Down_Interval = (3 x Advertisement_Interval) + Skew_time

Skew_Time = (256 – Priority) / 256

When the interval for sending VRRP Advertisement packets on the master and backup in the same VRRP group is different, the master sends VRRP Advertisement packets at the configured interval.

Example

# Set the interval at which the master in VRRP group 1 sends VRRP Advertisement packets to 5 seconds on the VLANIF interface.
<HUAWEI> system-view
[HUAWEI] interface vlanif 100
[HUAWEI-Vlanif100] vrrp vrid 1 virtual-ip 10.1.1.2
[HUAWEI-Vlanif100] vrrp vrid 1 timer advertise 5
# Set the interval at which the master in VRRP group 1 sends VRRP Advertisement packets to 5 seconds on the Ethernet interface.
<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] undo portswitch
[HUAWEI-GigabitEthernet0/0/1] vrrp vrid 1 virtual-ip 10.1.1.2
[HUAWEI-GigabitEthernet0/0/1] vrrp vrid 1 timer advertise 5
Related Topics

vrrp vrid track admin-vrrp vrid

Function

The vrrp vrid track admin-vrrp vrid command binds a VRRP group to an mVRRP group.

The undo vrrp vrid track admin-vrrp command unbinds a VRRP group from an mVRRP group.

By default, no VRRP group is bound to an mVRRP group.

Format

vrrp vrid virtual-router-id1 track admin-vrrp interface interface-type interface-number vrid virtual-router-id2 unflowdown

undo vrrp vrid virtual-router-id1 track admin-vrrp

Parameters

Parameter

Description

Value

vrid virtual-router-id1

Specifies the VRID of a VRRP group.

The value is an integer that ranges from 1 to 255.

vrid virtual-router-id2

Specifies the VRID of an mVRRP group.

The value is an integer that ranges from 1 to 255.

interface-type interface-number

Specifies the type and number of an interface configured with an mVRRP group.
  • interface-type specifies the interface type.
  • interface-number specifies the interface number.

-

unflowdown

Allows the interface where a VRRP group bound to an mVRRP group is configured to remain in Up state if the mVRRP group is in Backup or Initialize state.

-

Views

Interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

If multiple VRRP groups are configured on the device, each group sends VRRP Advertisement packets to maintain its state machine. As a result, a large number of VRRP Advertisement packets are generated, which occupy network bandwidth resources and cause CPU performance to deteriorate. To solve the problem, run the vrrp vrid track admin-vrrp vrid command to bind a VRRP group to an mVRRP group. After a VRRP group is bound to an mVRRP group, the VRRP group does not send VRRP Advertisement packets to negotiate the Master and Backup states. The mVRRP group determines the status of the bound VRRP group. This method greatly reduces the impact of VRRP Advertisement packets on network bandwidth and CPU performance.

This mode is used on a network where uplink and downlink traffic can be transmitted along different paths. unflowdown can be configured to allow the mVRRP group to determine the status of its bound VRRP group. Uplink traffic travels through the master and then reaches the upper-layer network, and downlink traffic travels through either the master or backup to reach users.

Prerequisites

A VRRP group and an mVRRP group have been created.

Precautions

The vrrp vrid track admin-vrrp vrid command can be used only on the interface where the bound VRRP group is configured. This command cannot be used on the interface where an mVRRP group is configured.

VRRP4 and VRRP6 can be configured on an interface simultaneously. However, there are limitations:
  • A VRRP4 group can be bound to only an mVRRP4 group, and a VRRP6 group can be bound to only an mVRRP6 group.
  • At most one VRRP4 group and one VRRP6 group can be configured on an interface. In addition, unflowdown must be used. An interface cannot be configured with multiple VRRP4 or VRRP6 groups.

If multiple service VRRP backup groups are configured on an interface, a single service VRRP backup group can be bound to the mVRRP backup group.

Example

# Bind VRRP group 1 to mVRRP group 2 on the VLANIF interface.
<HUAWEI> system-view
[HUAWEI] interface vlanif 10
[HUAWEI-Vlanif10] vrrp vrid 1 track admin-vrrp interface vlanif 20 vrid 2 unflowdown
# Bind VRRP group 1 to mVRRP group 2 on the Ethernet interface.
<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] undo portswitch
[HUAWEI-GigabitEthernet0/0/1] vrrp vrid 1 track admin-vrrp interface GigabitEthernet 0/0/2 vrid 2 unflowdown

vrrp vrid track bfd-session

Function

The vrrp vrid track bfd-session command associates a VRRP group with a BFD session.

The undo vrrp vrid track bfd-session command disassociates a VRRP group from a BFD session.

By default, a VRRP group is not associated with a BFD session.

NOTE:

Only the S5720SI, S5720S-SI, S5730SI, S5730S-EI, S5720EI, S5720HI, S6720SI, S6720S-SI, S6720EI, and S6720S-EI support this command.

Format

vrrp vrid virtual-router-id track bfd-session { bfd-session-id | session-name bfd-configure-name } [ increased value-increased | reduced value-reduced ]

undo vrrp vrid virtual-router-id track bfd-session [ bfd-session-id | session-name bfd-configure-name ]

vrrp vrid virtual-router-id track bfd-session { bfd-session-id | session-name bfd-configure-name } peer (Only the sub-interfaces of the S5720HI support this command)

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the VRID of a VRRP group.

The value is an integer that ranges from 1 to 255.

bfd-session-id Specifies the local discriminator of the monitored BFD session.

The value is an integer that ranges from 1 to 8191.

session-name bfd-configure-name Specifies the name of the monitored BFD session.

The value is a string of 1 to 15 case-insensitive characters without spaces. When double quotation marks are used around the string, spaces are allowed in the string.

increased value-increased Specifies the value by which the priority increases when the monitored BFD session becomes Down.

The value is an integer that ranges from 1 to 255. The maximum priority value is 254.

reduced value-reduced Specifies the value by which the priority decreases when the monitored BFD session becomes Down.

The value is an integer that ranges from 1 to 255. The priority can decrease to 1. By default, when the monitored BFD session becomes Down, the VRRP priority decreases by 10.

peer Indicates that the monitored BFD session is a peer BFD session.

-

Views

Interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario
Association between a VRRP group and a BFD session implements the following functions:
  1. Rapid active/standby switchover: When the link of a VRRP group or the master is faulty, the backup becomes the master after a certain period of time (second level), causing packet loss. You can associate the VRRP group with a BFD session on the backup so that the BFD session can rapidly detect communication faults of the VRRP group. When the BFD session detects a fault, it notifies the VRRP group that the priority of the backup needs to be increased. Then an active/standby switchover is triggered immediately. This millisecond-level switchover reduces traffic loss. When the monitored BFD session recovers, the original priority of the device in the VRRP group is restored.

  2. Monitoring the uplink: Because VRRP cannot detect faults on the uplink of a VRRP group, services are interrupted. You can associate the VRRP group with a BFD session on the master so that the BFD session monitors the uplink status of the master. When the BFD session detects a fault on the uplink, it notifies the VRRP group that the priority of the master needs to be decreased. Then an active/standby switchover is triggered immediately. This reduces the impact of the uplink fault on service forwarding. When the monitored BFD session recovers, the original priority of the device in the VRRP group is restored.

Prerequisites

A VRRP group has been created and a static BFD session or a static BFD session with automatically negotiated discriminators has been created.

Precautions

After a VRRP group is associated with a BFD session, the BFD session type cannot be modified. Before deleting the BFD session type, you must delete all original configurations.

After a VRRP group is associated with a BFD session, set increased value-increased or reduced value-reduced to an appropriate value. This setting ensures that an active/standby switchover is performed immediately when the monitored BFD session becomes Down.

Multiple VRRP groups can monitor a BFD session, and a VRRP group can monitor a maximum of eight BFD sessions simultaneously.

NOTE:
When associating a VRRP group with a BFD session, note the following points:
  • The master and backup in the VRRP group must work in preemption mode. It is recommended that the preemption delay be 0 on the backup and larger than 0 on the master.

  • If an IP address owner exists in the VRRP group, the VRRP group cannot monitor the BFD session.

  • If session-name bfd-configure-name is specified, the VRRP group can be bound to only the static BFD session with automatically negotiated discriminators.

  • If bfd-session-id is specified, the VRRP group can be bound to only the static BFD session.

Example

# Configure VRRP group 1 to monitor the BFD session with local discriminator 1 on VLANIF 100.
<HUAWEI> system-view
[HUAWEI] bfd
[HUAWEI-bfd] quit
[HUAWEI] bfd abc bind peer-ip 10.1.1.1 interface vlanif 100
[HUAWEI-bfd-session-abc] discriminator local 1
[HUAWEI-bfd-session-abc] discriminator remote 2
[HUAWEI-bfd-session-abc] commit
[HUAWEI-bfd-session-abc] quit
[HUAWEI] interface vlanif 100
[HUAWEI-Vlanif100] vrrp vrid 1 virtual-ip 10.1.1.12
[HUAWEI-Vlanif100] vrrp vrid 1 track bfd-session 1 reduced 40
# Configure VRRP group 1 to monitor the BFD session with local discriminator 1 on GE0/0/1.
<HUAWEI> system-view
[HUAWEI] bfd
[HUAWEI-bfd] quit
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] undo portswitch
[HUAWEI-GigabitEthernet0/0/1] quit
[HUAWEI] bfd abc bind peer-ip 10.1.1.1 interface gigabitethernet 0/0/1
[HUAWEI-bfd-session-abc] discriminator local 1
[HUAWEI-bfd-session-abc] discriminator remote 2
[HUAWEI-bfd-session-abc] commit
[HUAWEI-bfd-session-abc] quit
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] vrrp vrid 1 virtual-ip 10.1.1.12
[HUAWEI-GigabitEthernet0/0/1] vrrp vrid 1 track bfd-session 1 reduced 40

# Configure VRRP group 1 to monitor the BFD session hello on VLANIF 100.

<HUAWEI> system-view
[HUAWEI] bfd
[HUAWEI-bfd] quit
[HUAWEI] bfd hello bind peer-ip 10.2.1.1 interface vlanif 100 source-ip 10.2.1.2 auto
[HUAWEI-bfd-session-hello] commit
[HUAWEI-bfd-session-hello] quit
[HUAWEI] interface vlanif 100
[HUAWEI-Vlanif100] vrrp vrid 1 virtual-ip 10.2.1.12
[HUAWEI-Vlanif100] vrrp vrid 1 track bfd-session session-name hello reduced 40
# Configure VRRP group 1 to monitor the BFD session hello on GE0/0/1.
<HUAWEI> system-view
[HUAWEI] bfd
[HUAWEI-bfd] quit
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] undo portswitch
[HUAWEI-GigabitEthernet0/0/1] quit
[HUAWEI] bfd hello bind peer-ip 10.2.1.1 interface gigabitethernet 0/0/1 source-ip 10.2.1.2 auto
[HUAWEI-bfd-session-hello] commit
[HUAWEI-bfd-session-hello] quit
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] vrrp vrid 1 virtual-ip 10.2.1.12
[HUAWEI-GigabitEthernet0/0/1] vrrp vrid 1 track bfd-session session-name hello reduced 40

vrrp vrid track interface

Function

The vrrp vrid track interface command associates a VRRP group with an interface.

The undo vrrp vrid track interface command disassociates a VRRP group from an interface.

By default, a VRRP group is not associated with an interface.

Format

vrrp vrid virtual-router-id track interface interface-type interface-number [ increased value-increased | reduced value-reduced ]

undo vrrp vrid virtual-router-id track interface [ interface-type interface-number ]

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the VRID of a VRRP group.

The value is an integer that ranges from 1 to 255.

interface interface-type interface-number Specifies the type and number of an interface monitored by a VRRP group.
  • interface-type specifies the interface type.
  • interface-number specifies the interface number.
NOTE:
A VRRP backup group can track Layer 2 and Layer 3 interfaces.
  • If the tracked interface is a Layer 2 interface, the VRRP backup group tracks the physical status of the Layer 2 interface and changes its own priority based on the tracked physical status.
  • If the tracked interface is a Layer 3 interface, the VRRP backup group tracks the protocol status of the Layer 3 interface and changes its own priority based on the tracked protocol status.

-

increased value-increased Specifies the value by which the priority increases when the monitored interface becomes Down.

The value is an integer that ranges from 1 to 255. The maximum priority value is 254.

reduced value-reduced Specifies the value by which the priority decreases when the monitored interface becomes Down.

The value is an integer that ranges from 1 to 255. The priority can decrease to 1. By default, when the monitored interface goes Down, the VRRP priority of the device decreases by 10.

Views

Interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

VRRP can only detect the status change of the interface on which a VRRP group is configured. VRRP cannot detect faults on the uplink interface, causing service interruption. You can run the vrrp vrid track interface command to associate a VRRP group with a device interface not in the VRRP group. When the monitored interface becomes Down, the priority of the device is adjusted and an active/standby switchover is triggered. Therefore, services can be forwarded correctly. When the status of the monitored interface recovers, the original priority of the device in the VRRP group is restored.

Prerequisites

The vrrp vrid virtual-ip command has been executed on an interface to create a VRRP group.

Precautions

After a VRRP group is associated with an interface, set increased value-increased or reduced value-reduced to an appropriate value. This setting ensures that an active/standby switchover is performed immediately when the monitored interface becomes Down.

NOTE:
  • The master and backup in the VRRP group must work in preemption mode. It is recommended that the preemption delay be 0 on the backup and larger than 0 on the master.

  • If the device is the IP address owner (the virtual router IP address is used as the actual interface address), you cannot associate a VRRP group with an interface.

  • Multiple VRRP groups can monitor an interface, and a VRRP group can monitor a maximum of 8 interfaces simultaneously.

Example

# Associate VRRP group 1 with VLANIF 10 and set reduced value-reduced to 50 when VLANIF 10 becomes Down.
<HUAWEI> system-view
[HUAWEI] interface vlanif 20
[HUAWEI-Vlanif20] vrrp vrid 1 virtual-ip 10.1.1.1
[HUAWEI-Vlanif20] vrrp vrid 1 track interface vlanif 10 reduced 50
# Associate VRRP group 1 with GE0/0/2 and set reduced value-reduced to 50 when GE0/0/2 becomes Down.
<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] undo portswitch
[HUAWEI-GigabitEthernet0/0/1] vrrp vrid 1 virtual-ip 10.1.1.1
[HUAWEI-GigabitEthernet0/0/1] vrrp vrid 1 track interface gigabitethernet0/0/2 reduced 50
Related Topics

vrrp vrid track ip route

Function

The vrrp vrid track ip route command associates a VRRP group with a route.

The undo vrrp vrid track ip route command disassociates a VRRP group from a route.

By default, a VRRP group is not associated with a route.

Format

vrrp vrid virtual-router-id track ip route ip-address { mask-address | mask-length } [ vpn-instance vpn-instance-name ] [ reduced value-reduced ]

undo vrrp vrid virtual-router-id track ip route [ ip-address { mask-address | mask-length } [ vpn-instance vpn-instance-name ] ]

NOTE:

Only the S5720EI, S5720HI, S5720SI, S5720S-SI, S5730SI, S5730S-EI, S5720LI, S5720S-LI, S2720EI, S1720GW-E, S1720GWR-E, S1720X-E, S1720GW, S1720GWR, S1720X, S6720LI, S6720S-LI, S6720SI, S6720S-SI, S6720EI, and S6720S-EI support vpn-instance vpn-instance-name.

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the VRID of a VRRP group.

The value is an integer that ranges from 1 to 255.

ip-address Specifies the destination address of the monitored route.

The value is in dotted decimal notation.

mask-address Specifies the mask of the destination address of the monitored route.

The value is in dotted decimal notation.

mask-length Specifies the mask length of the destination address of the monitored route.

The value is an integer that ranges from 0 to 32.

vpn-instance vpn-instance-name Specifies the name of a VPN instance.

The value must be an existing VPN instance name.

reduced value-reduced Specifies the value by which the master's priority decreases if the monitored route is withdrawn or becomes inactive.

The value is an integer that ranges from 1 to 255. The priority can decrease to 1. By default, the master's priority decreases by 10 if the associated route is withdrawn or becomes inactive.

Views

Interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

To improve device reliability, two user gateways are configured to work in master/backup mode, and VRRP is enabled on these gateways to determine their Master and Backup states. Although a VRRP group has been configured, access devices may not detect route changes caused by the faulty uplink or network topology change. Consequently, data traffic is lost.

You can associate a VRRP group with a route for forwarding uplink traffic. When the route is withdrawn or becomes inactive, the master' priority is adjusted and an active/standby switchover is performed. When the status of the monitored route recovers, the original priority of the master in the VRRP group is restored.

Pre-configuration Tasks

A VRRP group and a routing protocol such as OSPF or IS-IS have been configured.

Precautions

The VRRP group to be associated with a route cannot contain an IP address owner.

The master and backup in the VRRP group must work in preemption mode. It is recommended that the preemption delay be 0 on the backup and non-0 on the master.

When associating a VRRP group with a route in a VPN instance, note the following points:
  • If the VPN instance does not exist, association between the VRRP group and the VPN route cannot work.
  • If the VPN instance is deleted after the VRRP group is associated with the VPN route, association between the VRRP group and the VPN route is also deleted.

Multiple VRRP groups can monitor a route, and a VRRP group can monitor a maximum of eight routes simultaneously.

Example

# Configure VRRP group 1 to monitor the route on 10.2.1.0, and set the value by which the master's priority decreases if the monitored route is withdrawn or becomes inactive to 20.

<HUAWEI> system-view
[HUAWEI] interface vlanif 100
[HUAWEI-Vlanif100] vrrp vrid 1 virtual-ip 10.1.1.12
[HUAWEI-Vlanif100] vrrp vrid 1 track ip route 10.2.1.0 24 reduced 20

vrrp vrid track nqa

Function

The vrrp vrid track nqa command associates a VRRP group with an NQA test instance to implement a rapid active/standby switchover.

The undo vrrp vrid track nqa command disassociates a VRRP group from an NQA test instance.

By default, a VRRP group is not associated with an NQA test instance.

Format

vrrp vrid virtual-router-id track nqa admin-name test-name [ reduced value-reduced ]

undo vrrp vrid virtual-router-id track nqa [ admin-name test-name ]

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the VRID of a VRRP group.

The value is an integer that ranges from 1 to 255.

admin-name Specifies the administrator name of an NQA test instance.

The value is a string of 1 to 32 case-sensitive characters without spaces. When double quotation marks are used around the string, spaces are allowed in the string.

test-name Specifies the name of an NQA test instance.

The value is a string of 1 to 32 case-sensitive characters without spaces. When double quotation marks are used around the string, spaces are allowed in the string.

reduced value-reduced Specifies the value by which the master's priority reduces if the NQA test instance detects that the uplink is unavailable.

The value is an integer that ranges from 1 to 255. The priority can decrease to 1. By default, the master's priority value decreases by 10 if the associated NQA test instance detects that the uplink is unavailable.

Views

Interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

To improve device reliability, two user gateways are configured to work in master/backup mode, and VRRP is enabled on these gateways to determine their Master and Backup states. Although a VRRP group has been configured, the uplink may be unreachable and access devices may not detect the faulty uplink. Consequently, data traffic is lost.

You can associate a VRRP group with an NQA test instance to solve this problem. The NQA test instance periodically sends ICMP packets to detect whether the destination IP address of the uplink is reachable. When the destination IP address is unreachable, the NQA test instance reports the fault to the associated VRRP group and instructs the VRRP group to adjust the priority, implementing an active/standby switchover. When the status of the monitored NQA test instance recovers, the original priority of the master in the VRRP group is restored.

Prerequisites

An NQA test instance of ICMP has been configured.

Precautions

  • The master and backup in the VRRP group must work in preemption mode. It is recommended that the preemption delay be 0 on the backup and non-0 on the master.

  • The VRRP group to be associated with a route cannot contain an IP address owner.

  • The VRRP group can only be associated with an NQA test instance of ICMP.

  • A VRRP group can monitor a maximum of eight NQA test instances.

Example

# Associate a VRRP group with NQA test instance user user1 on VLANIF100 and set reduced value-reduced to 20 when the destination IP address is unreachable.

<HUAWEI> system-view
[HUAWEI] nqa test-instance user user1
[HUAWEI-nqa-user-user1] test-type icmp
[HUAWEI-nqa-user-user1] destination-address ipv4 10.1.1.1
[HUAWEI-nqa-user-user1] frequency 10
[HUAWEI-nqa-user-user1] probe-count 2
[HUAWEI-nqa-user-user1] start now
[HUAWEI-nqa-user-user1] quit
[HUAWEI] interface vlanif 100
[HUAWEI-Vlanif100] vrrp vrid 1 virtual-ip 10.2.1.12
[HUAWEI-Vlanif100] vrrp vrid 1 track nqa user user1 reduced 20

vrrp vrid version-3 send-packet-mode

Function

The vrrp vrid version-3 send-packet-mode command configures a mode in which VRRPv3 Advertisement packets are sent on an interface.

The undo vrrp vrid version-3 send-packet-mode command restores the default mode.

By default, VRRPv3 Advertisement packets are sent in v3-only mode.

Format

vrrp vrid virtual-router-id version-3 send-packet-mode { v2-only | v3-only | v2v3-both }

undo vrrp vrid virtual-router-id version-3 send-packet-mode

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the VRID of a VRRP group. The value is an integer that ranges from 1 to 255.
v2-only Indicates that only VRRPv2 Advertisement packets are sent. -
v3-only Indicates that only VRRPv3 Advertisement packets are sent. -
v2v3-both Indicates that both VRRPv2 and VRRPv3 Advertisement packets are sent. -

Views

Interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

If devices in a VRRP group use different VRRP version numbers, the VRRP group may fail to negotiate the status. This is because a VRRPv2-enabled device can only receive VRRPv2 Advertisement packets and discards the received VRRPv3 Advertisement packets. You can set the mode in which VRRP Advertisement packets are sent on the VRRPv3-enabled device so that the VRRPv2-enabled and VRRPv3-enabled devices can negotiate the status.

Precautions

  • Only VRRPv3 supports this command.

  • If the vrrp version-3 send-packet-mode command is used in the system view and interface view simultaneously, the configuration in the interface view takes effect.

NOTE:

If a large number of VRRP groups are configured, v2v3-both is not recommended.

Example

# Set the mode in which VRRPv3 Advertisement packets are sent to v2-only on VLANIF100.
<HUAWEI> system-view
[HUAWEI] vrrp version v3
[HUAWEI] vrrp version-3 send-packet-mode v2-only
Warning: The globally configured packet sending mode will take effect for every VRRP backup group.Continue?[Y/N]:y
[HUAWEI] interface vlanif 100
[HUAWEI-Vlanif100] vrrp vrid 24 version-3 send-packet-mode v2-only
# Set the mode in which VRRPv3 Advertisement packets are sent to v2-only on GE0/0/1.
<HUAWEI> system-view
[HUAWEI] vrrp version v3
[HUAWEI] vrrp version-3 send-packet-mode v2-only
Warning: The globally configured packet sending mode will take effect for every VRRP backup group.Continue?[Y/N]:y
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] undo portswitch
[HUAWEI-GigabitEthernet0/0/1] vrrp vrid 24 version-3 send-packet-mode v2-only
Related Topics

vrrp vrid virtual-ip

Function

The vrrp vrid virtual-ip command creates a VRRP group and assigns a virtual IP address to the group.

The undo vrrp vrid virtual-ip command deletes the virtual IP address of a VRRP group.

By default, no VRRP group is created.

Format

vrrp vrid virtual-router-id virtual-ip virtual-address

undo vrrp vrid virtual-router-id [ virtual-ip virtual-address ]

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the VRID of a VRRP group.

The value is an integer that ranges from 1 to 255.

virtual-ip virtual-address Specifies the virtual IP address of a VRRP group.

The value is in dotted decimal notation.

Views

Interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

In practice, hosts use the default gateway to communicate with external networks. As value-added services such as IPTV or video conferencing services are widely deployed, hosts may fail to communicate with external networks if the default gateway fails. Configuring dynamic routing protocols such as RIP, OSPF, or ICMP can improve system reliability. However, it is difficult to configure dynamic routing protocols and some hosts may not support dynamic routing protocols. VRRP virtualizes multiple routing devices into a virtual router without changing the networking. The virtual router IP address is configured as the default gateway address.

If users on a network have the same reliability requirements, configure multiple virtual IP addresses for a VRRP group. By doing this, one virtual IP address serves one separate user group, and the default gateway address remains consistent regardless of changes in VRRP device locations. A VRRP group can be assigned a maximum of 16 virtual IP addresses.

Precautions

If all the virtual IP addresses in a VRRP group are deleted, the VRRP group is deleted automatically.

After the vrrp vrid virtual-ip command is run on an interface, when the ARP entries learned by the interface are aged, the device sends ARP aging probe packets with the source IP address being the interface's IP address. The virtual IP address of the interface is not used as the source IP address.

When VRRP and static ARP are configured simultaneously, note the following points:
  • When VRRP is configured on a VLANIF interface or Ethernet interface, the IP address corresponding to the VLANIF interface or Ethernet interface in a static ARP entry cannot be set to the virtual IP address of a VRRP group. Otherwise, services cannot be forwarded between devices. For example, if a static ARP entry contains IP address 10.1.1.1, the IP address 10.1.1.1 cannot be used as the virtual IP address.
  • When VRRP is configured on a VLANIF interface or Ethernet interface, the virtual IP address of a VRRP group cannot be used as the IP address corresponding to the VLANIF interface or Ethernet interface in a static ARP entry. Otherwise, services cannot be forwarded between devices. For example, if the VRRP group uses virtual IP address 10.1.1.1, the IP address 10.1.1.1 cannot be used in a static ARP entry.
NOTE:
  • VRRP groups must use different virtual IP addresses.
  • Two devices in a VRRP group must be configured with the same VRID.
  • VRRP groups on different interfaces of a device can be configured with the same VRID.
  • A virtual IP address must be different from the IP address of a user host. If the user host IP address is the same as the virtual IP address, all packets on the local network segment are sent to the user host. As a result, data of this network segment cannot be forwarded correctly.

Example

# Create a VRRP group on VLANIF 100 with ID 1 and virtual IP address 10.10.10.10.
<HUAWEI> system-view
[HUAWEI] interface vlanif 100
[HUAWEI-Vlanif100] vrrp vrid 1 virtual-ip 10.10.10.10
# Create a VRRP group with VRID 1 and virtual IP address 10.10.10.10 on GE0/0/1.
<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] undo portswitch
[HUAWEI-GigabitEthernet0/0/1] vrrp vrid 1 virtual-ip 10.10.10.10

vrrp6 nd send-mode simple

Function

The vrrp6 nd send-mode simple command enables a sub-interface for QinQ VLAN tag termination to send double-tagged ND packets carrying only the minimal inner VLAN ID when the VRRP status of the sub-interface in the Virtual Router Redundancy Protocol for IPv6 (VRRP6) backup group is master.

The undo vrrp6 nd send-mode simple command enables a sub-interface for QinQ VLAN tag termination to send double-tagged ND packets to all VLANs specified by the outer VLAN IDs and inner VLAN IDs when the VRRP status of the sub-interface in the VRRP6 backup group is master.

By default, double-tagged ND packets are sent to all VLANs specified by the outer VLAN IDs and inner VLAN IDs.

NOTE:

Only the S5720EI, S5720HI, S6720EI, and S6720S-EI support this command.

Format

vrrp6 nd send-mode simple

undo vrrp6 nd send-mode simple

Parameters

None

Views

Eth-Trunk sub-interface view, GE sub-interface view, XGE sub-interface view, 40GE sub-interface view

Default Level

2: Configuration level

Usage Guidelines

A sub-interface for QinQ VLAN tag termination sends double-tagged ND packets when the VRRP status of the sub-interface in the VRRP backup group is master. If there is a range for the inner VLAN IDs, the sub-interface sends ND packets to all VLANs in this range to update VRRP backup group's MAC address entry on a downstream switch, exposing a heavy burden on the system. To prevent this problem, you can use the vrrp6 nd send-mode simple command to allow an ND packet carrying only the minimal inner VLAN ID to be sent, reducing the number of ND packets to be sent.

NOTE:

The vrrp6 nd send-mode simple command takes effect within VLANs specified only by inner VLAN IDs rather than outer VLAN IDs. For example, VLAN IDs in the outer tag range from 1 to 10 and VLAN IDs in the inner tag range from 1 to 10. After the vrrp6 nd send-mode simple command is run, ND packets carrying only inner VLAN 1 and outer VLAN IDs ranging from 1 to 10 are sent. 10 ND packets (10 outer VLAN IDs x 1 inner VLAN ID) are sent.

The vrrp6 nd send-mode simple command is configured only on a sub-interface for QinQ VLAN tag termination.

Example

# Allow ND packets carrying only inner VLAN 1 to be sent.

<HUAWEI> system-view
[HUAWEI] interface gigabitethernet0/0/1.1
[HUAWEI-GigabitEthernet0/0/1.1] qinq termination pe-vid 5 ce-vid 1 to 10
[HUAWEI-GigabitEthernet0/0/1.1] quit
[HUAWEI] ipv6
[HUAWEI] interface gigabitethernet0/0/1.1
[HUAWEI-GigabitEthernet0/0/1.1] ipv6 enable
[HUAWEI-GigabitEthernet0/0/1.1] ipv6 address auto link-local
[HUAWEI-GigabitEthernet0/0/1.1] vrrp6 vrid 1 virtual-ip FE80::7 link-local
[HUAWEI-GigabitEthernet0/0/1.1] vrrp6 nd send-mode simple

vrrp6 un-check hop-limit

Function

The vrrp6 un-check hop-limit command disables the device from checking the TTL value in VRRP6 Advertisement packets.

The undo vrrp6 un-check hop-limit command enables the device to check the TTL value in VRRP6 Advertisement packets.

By default, the system checks the TTL value in VRRP6 Advertisement packets.

Format

vrrp6 un-check hop-limit

undo vrrp6 un-check hop-limit

Parameters

None

Views

VLANIF interface view, Eth-Trunk interface view, GE interface view, XGE interface view, 40GE interface view, MultiGE interface view, Eth-Trunk sub-interface view, GE sub-interface view, XGE sub-interface view, 40GE sub-interface view

Default Level

2: Configuration level

Usage Guidelines

The device checks the TTL value in received VRRP6 Advertisement packets. If the TTL value of a VRRP6 Advertisement packet is not 255, the device discards the packet.

On certain networks, especially on a network where the device interworks with non-Huawei devices, valid packets may be discarded if TTL check is enabled. You can configure the device not to check the TTL value in VRRP6 Advertisement packets.

Example

# Disable the device from checking the TTL value in VRRP6 Advertisement packets on VLANIF 100.
<HUAWEI> system-view
[HUAWEI] interface vlanif 100
[HUAWEI-Vlanif100] vrrp6 un-check hop-limit
# Disable the device from checking the TTL value in VRRP6 Advertisement packets on GE0/0/1.
<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] undo portswitch
[HUAWEI-GigabitEthernet0/0/1] vrrp6 un-check hop-limit
Related Topics

vrrp6 vrid preempt-mode disable

Function

The vrrp6 vrid preempt-mode disable command configures the device in a VRRP6 group in non-preemption mode.

The undo vrrp6 vrid preempt-mode command restores the default preemption mode.

By default, the device uses the immediate preemption mode.

Format

vrrp6 vrid virtual-router-id preempt-mode disable

undo vrrp6 vrid virtual-router-id preempt-mode

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the VRID of a VRRP6 group.

The value is an integer that ranges from 1 to 255.

Views

VLANIF interface view, Eth-Trunk interface view, GE interface view, XGE interface view, 40GE interface view, MultiGE interface view, Eth-Trunk sub-interface view, GE sub-interface view, XGE sub-interface view, 40GE sub-interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

To enable the device with higher priority in a VRRP6 group to be the master, set the preemption mode on the device. In non-preemption mode, as long as the master is working properly, the backup with higher priority cannot be the master.

NOTE:

When non-preemption is disabled, the preemption delay is restored to be 0 seconds immediately.

Prerequisites

The vrrp6 vrid virtual-ip command has been executed on an interface to create a VRRP6 group.

Example

# Configure VRRP6 group 1 in non-preemption mode on the VLANIF interface.
<HUAWEI> system-view
[HUAWEI] interface vlanif 100
[HUAWEI-Vlanif100] vrrp6 vrid 1 virtual-ip FE80::7 link-local
[HUAWEI-Vlanif100] vrrp6 vrid 1 preempt-mode disable
# Configure VRRP6 group 1 in non-preemption mode on the Ethernet interface.
<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] undo portswitch
[HUAWEI-GigabitEthernet0/0/1] vrrp6 vrid 1 virtual-ip FE80::7 link-local
[HUAWEI-GigabitEthernet0/0/1] vrrp6 vrid 1 preempt-mode disable

vrrp6 vrid preempt-mode timer delay

Function

The vrrp6 vrid preempt-mode timer delay command sets the preemption delay for the device in a VRRP6 group.

The undo vrrp6 vrid preempt-mode timer delay command restores the default preemption delay for the device in a VRRP6 group.

By default, the preemption delay is 0 seconds, indicating immediate preemption.

Format

vrrp6 vrid virtual-router-id preempt-mode timer delay delay-value

undo vrrp6 vrid virtual-router-id preempt-mode timer delay

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the VRID of a VRRP6 group.

The value is an integer that ranges from 1 to 255.

delay delay-value Specifies the preemption delay.

The value is an integer that ranges from 0 to 3600, in seconds. The default value is 0.

Views

VLANIF interface view, Eth-Trunk interface view, GE interface view, XGE interface view, 40GE interface view, MultiGE interface view, Eth-Trunk sub-interface view, GE sub-interface view, XGE sub-interface view, 40GE sub-interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

If the backup in a VRRP6 group does not receive VRRP6 Advertisement packets from the master within a specified period of time, the backup becomes the master. On an unstable network, even if the master is working properly, the backup may not receive packets from the master because of network congestion. In this case, the VRRP6 group status will flap and traffic is lost. To prevent frequent switching of the VRRP6 group status, run the vrrp6 vrid preempt-mode timer delay command to set the preemption delay so that the backup becomes the master only after the delay expires.

Prerequisites

The vrrp6 vrid virtual-ip command has been executed to create a VRRP6 group.

Precautions

You are advised to set the preemption delay of the backup in a VRRP6 group to 0, configure the master in preemption mode, and set the preemption delay to be longer than 15s. These settings allow a period of time for status synchronization between the uplink and downlink on devices on an unstable network. If the preceding settings are not used, two masters coexist and user devices may learn an incorrect master address. As a result, traffic is interrupted.

  • The preemption delay refers to the delay before the backup switches to the master. Therefore, the IP address owner is irrelevant to the preemption delay. After the IP address owner recovers, it becomes the master immediately without a delay.
  • On a stable network, a short preemption delay is recommended. When the master is faulty, the backup can rapidly switch to the master. This prevents traffic loss. On an unstable network, a long preemption delay is recommended. This prevents traffic loss caused by frequent switching of the VRRP6 group status.

Example

# Set the preemption delay of VRRP6 group 1 to 10 seconds on the VLANIF interface.
<HUAWEI> system-view
[HUAWEI] interface vlanif 100
[HUAWEI-Vlanif100] vrrp6 vrid 1 virtual-ip FE80::7 link-local
[HUAWEI-Vlanif100] vrrp6 vrid 1 preempt-mode timer delay 10
# Set the preemption delay of VRRP6 group 1 to 10 seconds on the Ethernet interface.
<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] undo portswitch
[HUAWEI-GigabitEthernet0/0/1] vrrp6 vrid 1 virtual-ip FE80::7 link-local
[HUAWEI-GigabitEthernet0/0/1] vrrp6 vrid 1 preempt-mode timer delay 10

vrrp6 vrid priority

Function

The vrrp6 vrid priority command sets the priority of the device in a VRRP6 group.

The undo vrrp6 vrid priority command restores the default priority of the device in a VRRP6 group.

By default, the priority of the device in a VRRP6 group is 100.

Format

vrrp6 vrid virtual-router-id priority priority-value

undo vrrp6 vrid virtual-router-id priority

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the VRID of a VRRP6 group.

The value is an integer that ranges from 1 to 255.

priority priority-value Specifies the priority of the device in a VRRP6 group.

The value is an integer that ranges from 1 to 254. A larger value indicates a higher priority.

Views

VLANIF interface view, Eth-Trunk interface view, GE interface view, XGE interface view, 40GE interface view, MultiGE interface view, Eth-Trunk sub-interface view, GE sub-interface view, XGE sub-interface view, 40GE sub-interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

To configure the device in a VRRP6 group as the default gateway, run the vrrp6 vrid priority command to specify the highest priority for the device so that the device can become the master.

Prerequisites

The vrrp6 vrid virtual-ip command has been executed to create a VRRP6 group.

Precautions
  • Priority 0 is reserved in the system. Priority 255 is reserved for the IP address owner.

  • When devices in a VRRP6 group have the same priority, the device that first changes to master state becomes the master. If devices attempt to be the master simultaneously, the device where the interface with the largest IP address is located becomes the master.

Example

# Set the priority of the switch in VRRP6 group 2 to 120 on the VLANIF interface.
<HUAWEI> system-view
[HUAWEI] interface vlanif 100
[HUAWEI-Vlanif100] vrrp6 vrid 2 virtual-ip FE80::7 link-local
[HUAWEI-Vlanif100] vrrp6 vrid 2 priority 120
# Set the priority of the switch in VRRP6 group 2 to 120 on the Ethernet interface.
<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] undo portswitch
[HUAWEI-GigabitEthernet0/0/1] vrrp6 vrid 2 virtual-ip FE80::7 link-local
[HUAWEI-GigabitEthernet0/0/1] vrrp6 vrid 2 priority 120

vrrp6 vrid timer advertise

Function

The vrrp6 vrid timer advertise command sets the interval at which the master sends VRRP6 Advertisement packets.

The undo vrrp6 vrid timer advertise command restores the default interval at which the master sends VRRP6 Advertisement packets.

By default, the master sends VRRP6 Advertisement packets every 1 second.

Format

vrrp6 vrid virtual-router-id timer advertise advertise-interval

undo vrrp6 vrid virtual-router-id timer advertise

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the VRID of a VRRP6 group.

The value is an integer that ranges from 1 to 255.

advertise advertise-interval Specifies the interval at which the master sends VRRP6 Advertisement packets.

The value is an integer that ranges from 100 to 4095, in centiseconds.

Views

VLANIF interface view, Eth-Trunk interface view, GE interface view, XGE interface view, 40GE interface view, MultiGE interface view, Eth-Trunk sub-interface view, GE sub-interface view, XGE sub-interface view, 40GE sub-interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

The master in a VRRP6 group sends VRRP6 Advertisement packets to backups at intervals to notify that it is working properly. If the backup with the highest priority does not receive any VRRP6 Advertisement packets from the master at the specified interval (usually, three times the interval for sending VRRP6 Advertisement packets), it considers the master faulty and becomes the master. The vrrp6 vrid timer advertise command sets the interval at which the master sends VRRP6 Advertisement packets.

Prerequisites

The vrrp6 vrid virtual-ip command has been executed on an interface to create a VRRP6 group.

Precautions

If a longer interval is used, backups in the same VRRP6 group cannot detect the fault on the master in a timely manner, causing packet loss. If a shorter interval is used, system resources are occupied. In addition, when network traffic is heavy or the network is unstable, backups may not receive packets after the Master_Down_Interval timer expires. As a result, the VRRP6 group status is incorrectly switched. Set the interval based on actual networking.

NOTE:
  • For VRRP for IPv4, set the same interval for sending VRRP Advertisement packets for members in a VRRP group to prevent multiple masters in the VRRP group.

  • For VRRP for IPv6, even if you set different intervals for sending VRRP Advertisement packets for members in a VRRP6 group, there is only one master in a VRRP6 group.

Example

# Set the interval at which the master in VRRP6 group 1 sends VRRP6 Advertisement packets to 200 centiseconds on the VLANIF interface.
<HUAWEI> system-view
[HUAWEI] interface vlanif 100
[HUAWEI-Vlanif100] vrrp6 vrid 1 virtual-ip FE80::7 link-local
[HUAWEI-Vlanif100] vrrp6 vrid 1 timer advertise 200
# Set the interval at which the master in VRRP6 group 1 sends VRRP6 Advertisement packets to 200 centiseconds on the Ethernet interface.
<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] undo portswitch
[HUAWEI-GigabitEthernet0/0/1] vrrp6 vrid 1 virtual-ip FE80::7 link-local
[HUAWEI-GigabitEthernet0/0/1] vrrp6 vrid 1 timer advertise 200
Related Topics

vrrp6 vrid track admin-vrrp6 vrid

Function

The vrrp6 vrid track admin-vrrp6 vrid command binds a VRRP6 group to an mVRRP6 group.

The undo vrrp6 vrid track admin-vrrp6 command unbinds a VRRP6 group from an mVRRP6 group.

By default, no VRRP6 group is bound to an mVRRP6 group.

Format

vrrp6 vrid virtual-router-id1 track admin-vrrp6 interface interface-type interface-number vrid virtual-router-id2 unflowdown

undo vrrp6 vrid virtual-router-id1 track admin-vrrp6

Parameters

Parameter Description Value
vrid virtual-router-id1 Specifies the VRID of a VRRP6 group.

The value is an integer that ranges from 1 to 255.

vrid virtual-router-id2 Specifies the VRID of an mVRRP6 group.

The value is an integer that ranges from 1 to 255.

interface-type interface-number Specifies the type and number of an interface configured with an mVRRP6 group.

-

unflowdown

Allows the interface where a VRRP6 group bound to an mVRRP6 group is configured to retain the Up state if the mVRRP6 group is in Backup or Initialize state.

-

Views

VLANIF interface view, Eth-Trunk interface view, GE interface view, XGE interface view, 40GE interface view, MultiGE interface view, Eth-Trunk sub-interface view, GE sub-interface view, XGE sub-interface view, 40GE sub-interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

If multiple VRRP6 groups are configured on the device, each group sends VRRP6 Advertisement packets to maintain its state machine. As a result, a large number of VRRP6 Advertisement packets are generated, which occupy network bandwidth resources and cause CPU performance to deteriorate. To solve the problem, run the vrrp6 vrid track admin-vrrp6 vrid command to bind a VRRP6 group to an mVRRP6 group. After a VRRP6 group is bound to an mVRRP6 group, the VRRP6 group does not send VRRP6 Advertisement packets to negotiate the Master and Backup states. The mVRRP6 group determines the status of the bound VRRP6 group. This method greatly reduces the impact of VRRP6 Advertisement packets on network bandwidth and CPU performance.

This mode is used on a network where uplink and downlink traffic can be transmitted along different paths. unflowdown can be configured to allow the mVRRP6 group to determine the status of its bound VRRP6 group. Uplink traffic travels through the master and then reaches the upper-layer network, and downlink traffic travels through either the master or backup to reach users.

Prerequisites

A VRRP6 group and an mVRRP6 group have been created.

Precautions

The vrrp6 vrid track admin-vrrp6 vrid command can be used only on the interface where the bound VRRP6 group is configured. This command cannot be used on the interface where an mVRRP6 group is configured.

VRRP4 and VRRP6 can be configured on an interface simultaneously. However, there are limitations:
  • A VRRP4 group can be bound to only an mVRRP4 group, and a VRRP6 group can be bound to only an mVRRP6 group.
  • At most one VRRP4 group and one VRRP6 group can be configured on an interface. An interface cannot be configured with multiple VRRP4 or VRRP6 groups.

Example

# Bind VRRP6 group 1 to mVRRP6 group 2 on the VLANIF interface.
<HUAWEI> system-view
[HUAWEI] interface vlanif 10
[HUAWEI-Vlanif10] vrrp6 vrid 1 track admin-vrrp6 interface vlanif 11 vrid 2 unflowdown
# Bind VRRP6 group 1 to mVRRP6 group 2 on the Ethernet interface.
<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] undo portswitch
[HUAWEI-GigabitEthernet0/0/1] vrrp6 vrid 1 track admin-vrrp6 interface gigabitethernet 0/0/2 vrid 2 unflowdown

vrrp6 vrid track bfd-session

Function

The vrrp6 vrid track bfd-session command associates a VRRP6 group with a BFD session.

The undo vrrp6 vrid track bfd-session command disassociates a VRRP6 group from a BFD session.

By default, a VRRP6 group is not associated with a BFD session.

NOTE:

Only the S5720SI, S5720S-SI, S5730SI, S5730S-EI, S5720EI, S5720HI, S6720SI, S6720S-SI, S6720EI, and S6720S-EI support this command.

Format

vrrp6 vrid virtual-router-id track bfd-session { session-id | session-name bfd-configure-name } [ increased value-increased | reduced value-reduced ]

undo vrrp6 vrid virtual-router-id track bfd-session [ session-id | session-name bfd-configure-name ]

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the VRID of a VRRP6 group.

The value is an integer that ranges from 1 to 255.

session-id Specifies the local discriminator of the monitored BFD session.

The value is an integer that ranges from 1 to 8191.

session-name bfd-configure-name Specifies the name of the monitored BFD session.
The value is a string of 1 to 15 case-insensitive characters without spaces.
NOTE:
When double quotation marks are used around the string, spaces are allowed in the string.
increased value-increased Specifies the value by which the priority increases when the monitored BFD session becomes Down.

The value is an integer that ranges from 1 to 255. The maximum priority value is 254.

reduced value-reduced Specifies the value by which the priority decreases when the monitored BFD session becomes Down.

The value is an integer that ranges from 1 to 255. The priority can decrease to 1. By default, when the monitored BFD session becomes Down, the VRRP6 priority decreases by 10.

Views

VLANIF interface view, Eth-Trunk interface view, GE interface view, XGE interface view, 40GE interface view, MultiGE interface view, Eth-Trunk sub-interface view, GE sub-interface view, XGE sub-interface view, 40GE sub-interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario
Association between a VRRP6 group and a BFD session implements the following functions:
  1. Rapid active/standby switchover: When the link of a VRRP6 group or the master is faulty, the backup becomes the master after a certain time (second level), causing packet loss. You can associate the VRRP6 group with a BFD session on the backup so that the BFD session can rapidly detect communication faults of the VRRP6 group. When the BFD session detects a fault, it notifies the VRRP6 group that the priority of the backup needs to be increased. Then an active/standby switchover is triggered immediately. This millisecond-level switchover reduces traffic loss. When the monitored BFD session recovers, the original priority of the device in the VRRP6 group is restored.

  2. Monitoring the uplink: Because VRRP6 cannot detect faults on the uplink of a VRRP6 group, services are interrupted. You can associate the VRRP6 group with a BFD session on the master so that the BFD session monitors the uplink status of the master. When the BFD session detects a fault on the uplink, it notifies the VRRP6 group that the priority of the master needs to be decreased. Then an active/standby switchover is triggered immediately. This reduces the impact of the uplink fault on service forwarding. When the monitored BFD session recovers, the original priority of the device in the VRRP6 group is restored.

Prerequisites

A VRRP6 group has been created and a static BFD session or a static BFD session with automatically negotiated discriminators has been created.

Precautions

Currently, the device supports only association between VRRP6 and BFD for IPv4.

After a VRRP6 group is associated with a BFD session, the BFD session type cannot be modified. Before deleting the BFD session type, you must delete all original configurations.

After a VRRP6 group is associated with a BFD session, set an appropriate value of increased value-increased or reduced value-reduced. This setting ensures that an active/standby switchover is performed immediately when the monitored BFD session becomes Down.

Multiple VRRP6 groups can monitor a BFD session, and a VRRP6 group can monitor a maximum of eight BFD sessions simultaneously.

NOTE:
When associating a VRRP6 group with a BFD session, note the following points:
  • If an IPv6 address owner exists in the VRRP6 group, the VRRP6 group cannot monitor the BFD session.

  • If session-name bfd-configure-name is specified, the VRRP6 group can be bound to only the static BFD session with automatically negotiated discriminators.

  • If session-id is specified, the VRRP6 group can bind to only a static BFD session.

Example

# Associate VRRP6 group 1 with the BFD session hello on VLANIF 100.
<HUAWEI> system-view
[HUAWEI] bfd
[HUAWEI-bfd] quit
[HUAWEI] bfd hello bind peer-ip 10.1.1.1 interface vlanif 100
[HUAWEI-bfd-session-hello] quit
[HUAWEI] interface vlanif 100
[HUAWEI-Vlanif100] vrrp6 vrid 1 virtual-ip FE80::7 link-local
[HUAWEI-Vlanif100] vrrp6 vrid 1 virtual-ip FC00::100
[HUAWEI-Vlanif100] vrrp6 vrid 1 track bfd session-name hello reduced 40
# Associate VRRP6 group 1 with the BFD session hello on GE0/0/1.
<HUAWEI> system-view
[HUAWEI] bfd
[HUAWEI-bfd] quit
[HUAWEI] bfd hello bind peer-ip 10.1.1.1 interface gigabitethernet 0/0/1
[HUAWEI-bfd-session-hello] quit
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] undo portswitch
[HUAWEI-GigabitEthernet0/0/1] vrrp6 vrid 1 virtual-ip FE80::7 link-local
[HUAWEI-GigabitEthernet0/0/1] vrrp6 vrid 1 virtual-ip FC00::100
[HUAWEI-GigabitEthernet0/0/1] vrrp6 vrid 1 track bfd session-name hello reduced 40

vrrp6 vrid track interface

Function

The vrrp6 vrid track interface command associates a VRRP6 group with an interface.

The undo vrrp6 vrid track interface command disassociates a VRRP6 group from an interface.

By default, a VRRP6 group is not associated with an interface.

Format

vrrp6 vrid virtual-router-id track interface interface-type interface-number [ increased value-increased | reduced value-reduced ]

undo vrrp6 vrid virtual-router-id track interface [ interface-type interface-number ]

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the VRID of a VRRP6 group.

The value is an integer that ranges from 1 to 255.

interface-type interface-number Specifies the type and number of an interface monitored by a VRRP6 group.
  • interface-type specifies the interface type.
  • interface-number specifies the interface number.

-

increased value-increased Specifies the value by which the priority increases when the monitored interface becomes Down.

The value is an integer that ranges from 1 to 255. The maximum priority value is 254.

reduced value-reduced Specifies the value by which the priority decreases when the monitored interface becomes Down.

The value is an integer that ranges from 1 to 255. The priority can decrease to 1. By default, when the monitored interface goes Down, the VRRP6 priority of the device decreases by 10.

Views

VLANIF interface view, Eth-Trunk interface view, GE interface view, XGE interface view, 40GE interface view, MultiGE interface view, Eth-Trunk sub-interface view, GE sub-interface view, XGE sub-interface view, 40GE sub-interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

VRRP6 can only detect the status change of the interface on which a VRRP6 group is configured. VRRP6 cannot detect faults on the uplink interface of the master, causing service interruption. You can associate a VRRP6 group with a device interface that is not in the VRRP6 group. When the monitored interface is faulty, the priority of the master is reduced. This triggers an active/standby switchover and reduces the impact of services on the uplink interface. When the fault is rectified, the original master restores its priority and switches to the master to forward traffic.

Prerequisites

The vrrp6 vrid virtual-ip command has been executed on an interface to create a VRRP6 group.

Precautions

After a VRRP6 group is associated with an interface, set increased value-increased or reduced value-reduced to an appropriate value. This setting ensures that an active/standby switchover is performed immediately when the monitored interface becomes Down.

NOTE:
  • The master and backup in the VRRP6 group must work in preemption mode. It is recommended that the preemption delay be 0 on the backup and larger than 0 on the master.

  • If the device is the IPv6 address owner (the virtual router IPv6 address is used as the actual interface address), you cannot associate a VRRP6 group with an interface.

  • If the IPv4 protocol status on the monitored interface configured with an IPv4 address changes, a new master in the VRRP6 group is selected. If the IPv6 protocol status on the monitored interface configured with an IPv6 address changes, the VRRP6 group remains unchanged.

Example

# Associate VRRP6 group 1 with VLANIF 100 and set reduced value-reduced to 50 when VLANIF 100 becomes Down.
<HUAWEI> system-view
[HUAWEI] interface vlanif 200
[HUAWEI-Vlanif200] vrrp6 vrid 1 virtual-ip FE80::7 link-local
[HUAWEI-Vlanif200] vrrp6 vrid 1 virtual-ip FC00::2
[HUAWEI-Vlanif200] vrrp6 vrid 1 track interface vlanif 100 reduced 50
# Associate VRRP6 group 1 with GE0/0/2 and set reduced value-reduced to 50 when GE0/0/2 becomes Down.
<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] undo portswitch
[HUAWEI-GigabitEthernet0/0/1] vrrp6 vrid 1 virtual-ip FE80::7 link-local
[HUAWEI-GigabitEthernet0/0/1] vrrp6 vrid 1 virtual-ip FC00::2
[HUAWEI-GigabitEthernet0/0/1] vrrp6 vrid 1 track interface gigabitethernet0/0/2 reduced 50
Related Topics

vrrp6 vrid virtual-ip

Function

The vrrp6 vrid virtual-ip command creates a VRRP6 group and assigns a virtual IPv6 address to the group.

The undo vrrp6 vrid virtual-ip command deletes the virtual IPv6 address of a VRRP6 group.

By default, no VRRP6 group is created.

Format

vrrp6 vrid virtual-router-id virtual-ip virtual-ipv6-address [ link-local ]

undo vrrp6 vrid virtual-router-id [ virtual-ip virtual-ipv6-address [ link-local ] ]

Parameters

Parameter Description Value
vrid virtual-router-id Specifies the VRID of a VRRP6 group.

The value is an integer that ranges from 1 to 255.

virtual-ip virtual-ipv6-address Specifies the virtual IPv6 address of a VRRP6 group.

The address is a 32-digit hexadecimal number, in the format X:X:X:X:X:X:X:X.

link-local Indicates that a link-local address is used as the virtual IPv6 address of a VRRP6 group. The first virtual IPv6 address of a VRRP6 group must be a link-local address.

-

Views

VLANIF interface view, Eth-Trunk interface view, GE interface view, XGE interface view, 40GE interface view, MultiGE interface view, Eth-Trunk sub-interface view, GE sub-interface view, XGE sub-interface view, 40GE sub-interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

In practice, hosts use the default gateway to communicate with external networks. As value-added services such as IPTV or video conferencing services are widely deployed, hosts may fail to communicate with external networks if the default gateway fails. Configuring dynamic routing protocols such as RIPng, OSPFv3, or ICMPv6 can improve system reliability. However, it is difficult to configure dynamic routing protocols and some hosts may not support dynamic routing protocols. VRRP6 virtualizes multiple routing devices into a virtual router without changing the networking. The virtual router IPv6 address is configured as the default gateway address.

If users on a network have the same reliability requirements, configure multiple virtual IPv6 addresses for a VRRP6 group. By doing this, one virtual IPv6 address serves one separate user group, and the default gateway address remains consistent regardless of changes in VRRP6 device locations. A VRRP6 group can be assigned a maximum of 16 virtual IPv6 addresses.

Precautions

If all the virtual IPv6 addresses in a VRRP6 group are deleted, the VRRP6 group is deleted automatically.

NOTE:
  • The first virtual IPv6 address of a VRRP6 group must be a link-local address. That is, you must run the vrrp6 vrid virtual-router-id virtual-ip virtual-ipv6-address link-local command before assigning other virtual IPv6 addresses to the VRRP6 group.

  • VRRP6 groups must use different virtual IP addresses.

  • Two devices in a VRRP6 group must be configured with the same VRID.

  • VRRP6 groups on different interfaces of a device can be configured with the same VRID.

Example

# Configure a VRRP6 group on VLANIF 100 and configure the virtual IPv6 address FE80::7.
<HUAWEI> system-view
[HUAWEI] interface vlanif 100
[HUAWEI-Vlanif100] vrrp6 vrid 1 virtual-ip FE80::7 link-local
# Configure a VRRP6 group on GE0/0/1 and configure the virtual IPv6 address FE80::7.
<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] undo portswitch
[HUAWEI-GigabitEthernet0/0/1] vrrp6 vrid 1 virtual-ip FE80::7 link-local
Translation
Download
Updated: 2019-10-09

Document ID: EDOC1000178165

Views: 48291

Downloads: 1163

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next