Using VRRP to Replace HSRP on CE Series Switch
Networking Requirements
As shown in Figure 3-11, the C6500 as the core device connects to uplink egress router NE40E-X3 and downlink access device CE6800. The C6500 is configured with HSRP to implement gateway redundancy, and MSTP is deployed on the Layer 2 network to remove loops.
Roadmap
HSRP is a Cisco proprietary protocol. The CE series switch (CE12800 is used as an example) cannot connect to an HSRP-enabled device. It is recommended that the CE12800s connect to NE40E-X3 routers. Gradually migrate services on active and standby links of access switch CE6800 to CE12800s.
The migration may cause second-level service interruptions because services on active and standby links of access switch CE6800 need to be migrated to CE12800s.
Procedure
- Connect CE12800s to NE40E-X3 routers.
Figure 3-12 Connect CE12800s to NE40E-X3 routers
Configure Layer 3 connectivity between CE12800s and NE40E-X3 routers and complete route convergence. Pay attention to the following points:
Shut down the VLANIF interface where VRRP is configured on the CE12800 and prevent direct routes from being advertised to the NE40E-X3 routers. This prevents services from being incorrectly imported to the CE12800.
Configure new IP addresses for connected Layer 3 interfaces between CE12800s and between CE12800s and NE40E-X3 routers, and use the loopback interface address on the CE12800 as the routing protocol ID.
- Migrate services on the standby link of the CE6800 to the
CE12800.
Figure 3-13 Migrate services on the standby link of the CE6800 to the CE12800
Migrate services on the standby link of CE6800-2 to CE12800-2 and shut down the interface on CE12800-2 connected to CE6800-2. Traffic from CE6800-2 is still forwarded by C6500-1.
Figure 3-14 Migrate services on the standby link of the CE6800 to the CE12800Shut down the interface of C6500-1 connected to CE6800-2 and the corresponding VLANIF interface.
Enable the interface of CE12800-2 connected to CE6800-2 and the corresponding VLANIF interface. Traffic from CE6800-2 is still forwarded by CE12800-2.
- Migrate services on the active link of the CE6800 to the
CE12800.
Figure 3-15 Migrate services on the active link of the CE6800 to the CE12800
Migrate services on the active link of CE6800-2 to CE12800-1, and enable the interface of CE12800-1 connected to CE6800-2 and the corresponding VLANIF interface. Traffic from CE6800-2 is still forwarded by CE12800-1.
- Perform steps 2 to 3 to migrate services on all access
switches CE6800s to CE12800s.
Figure 3-16 Migrate services on all access switches CE6800s to CE12800s
- Check whether services are normal after services on all
access switches are migrated.
The multicast addresses of Hello packets are different, and an ACL is deployed to allow HSRP packets (224.0.0.2) in some scenarios. When VRRP replaces HSRP, configure the ACL to allow VRRP packets (224.0.0.18).
- Remove C6500s when determining that services are normal.
Figure 3-17 Remove C6500s when determining that services are normal
Configuration Comparison
Operation |
HSRP |
VRRP |
|---|---|---|
Configure a virtual gateway. |
switch# configure terminal switch(config)# interface ethernet 1/2 switch(config-if)# ip 10.0.2.2/8 switch(config-if)# hsrp 2 switch(config-if-hsrp)# ip 10.0.2.1 switch(config-if-hsrp)# exit |
[~HUAWEI] interface vlanif 100 [~HUAWEI-Vlanif100] ip address 10.0.2.2 8 [*HUAWEI-Vlanif100] vrrp vrid 2 virtual-ip 10.0.2.1 |
Set the priority. |
switch(config-if-hsrp)# priority 60 |
[~HUAWEI] interface vlanif 100 [~HUAWEI-Vlanif100] vrrp vrid 2 priority 60 |
Associate HSRP/VRRP with an interface. |
switch# configure terminal switch(config)# track 1 interface ethernet 2/2 ip routing switch(config)# interface ethernet 1/2 switch(config-if)# hsrp 2 switch(config-if-hsrp)# track 1 decrement 10 |
[~HUAWEI] interface vlanif 100 [~HUAWEI-Vlanif100] vrrp vrid 2 track interface 10ge 1/0/2 reduce 10 |