No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Configuration Guide - Reliability

S2720, S5700, and S6720 V200R013C00

This document describes the configurations of Reliability, including BFD Configuration, VRRP Configuration, DLDP Configuration, Smart Link and Monitor Link Configuration, MAC Swap Loopback Configuration, EFM Configuration, CFM Configuration, Y.1731 Configuration.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
VRRPv2 and VRRPv3 Advertisement Packets

VRRPv2 and VRRPv3 Advertisement Packets

VRRP Advertisement packets are sent by the master to notify all backups in the VRRP group of the master's priority and status.

VRRP Advertisement packets are encapsulated into IP packets with the VRRP virtual IP address as the destination address. In the IP packet header, the source address is the primary IP address of the interface that sends the packets (not the virtual IP address), the destination address is 224.0.0.18, the TTL is 255, and the protocol number is 112.

The primary IP address is selected from one of the actual IP addresses of the interfaces. Usually, it is the first configured IP address.

VRRP has two versions: VRRPv2 and VRRPv3. VRRPv2 applies only to the IPv4 network, and VRRPv3 applies to both IPv4 and IPv6 networks.

VRRP is classified into VRRP for IPv4 (VRRP) and VRRP for IPv6 (VRRP6) by network type. VRRP supports VRRPv2 and VRRPv3, and VRRP6 supports only VRRPv3.

VRRPv2 and VRRPv3 Advertisement Packet Formats

Figure 3-2 shows the VRRPv2 Advertisement packet format, and Figure 3-3 shows the VRRPv3 Advertisement packet format.

Figure 3-2  Format of a VRRPv2 Advertisement packet

Figure 3-3  Format of a VRRPv3 Advertisement packet
Table 3-1 describes fields in a VRRP Advertisement packet.
Table 3-1  Description of fields in a VRRP Advertisement packet
Field Description
VRRPv2 VRRPv3
Version VRRP protocol version. The value is 2. VRRP protocol version. The value is 3.
Type VRRP Advertisement packet type. The value 1 indicates an Advertisement packet. VRRP Advertisement packet type. The value 1 indicates an Advertisement packet.
Virtual Rtr ID (VRID) Virtual router ID. The value ranges from 1 to 255. Virtual router ID. The value ranges from 1 to 255.
Priority Priority of the master in a VRRP group. The value ranges from 0 to 255. The value 0 indicates that the device stops participating in the VRRP group so that the backup with the highest priority can become the master immediately. The value 255 is reserved for the IP address owner. The default value is 100. Priority of the master in a VRRP group. The value ranges from 0 to 255. The value 0 indicates that the device stops participating in the VRRP group so that the backup with the highest priority can become the master immediately. The value 255 is reserved for the IP address owner. The default value is 100.
Count IP Addrs/Count IPvX Addr Number of virtual IPv4 addresses in the VRRP group. Number of virtual IPv4 or IPv6 addresses in the VRRP group.
Auth Type Authentication mode. There are three authentication modes:
  • 0: non-authentication

  • 1: simple text password

  • 2: IP Authentication Header (MD5 authentication)

-
Adver Int/Max Adver Int Interval at which VRRP Advertisement packets are sent, in seconds. The default value is 1. Interval at which VRRP Advertisement packets are sent, in centiseconds. The default value is 100 (1 second).
Checksum 16-bit checksum, which is used to verify data integrity in VRRP Advertisement packets. 16-bit checksum, which is used to verify data integrity in VRRP Advertisement packets.
IP Address/IPvX Address(es) Virtual IPv4 address in the VRRP group. The Count IP Addrs field determines the number of virtual IPv4 addresses in the VRRP group. Virtual IPv4 or IPv6 address in the VRRP group. The Count IPvX Addr field determines the number of virtual IPv4 or IPv6 addresses in the VRRP group.
Authentication Data Authentication key. This field is used only in simple authentication and MD5 authentication modes. In other authentication modes, this field is set to 0. -
rsvd - Reserved. This field has a fixed value of 0.
VRRPv2 and VRRPv3 have the following differences:
  • Apply to different networks. VRRPv3 applies to IPv4 and IPv6 networks, whereas VRRPv2 applies only to IPv4 networks.

  • Have different authentication functions. VRRPv3 does not support authentication, whereas VRRPv2 supports authentication.
    NOTE:
    VRRPv2 reserves the authentication field in VRRP Advertisement packets to be compatible with VRRP defined in earlier versions. VRRP authentication cannot improve security.
  • Use different time units to measure the interval at which VRRP Advertisement packets are sent. VRRPv3 uses centiseconds, whereas VRRPv2 uses seconds.

VRRP Authentication

The following authentication modes and authentication keys can be set in VRRPv2 Advertisement packets:
  • Non-authentication: The local device does not authenticate VRRP Advertisement packets before sending them. The remote device does not authenticate the received VRRP Advertisement packets and considers all the received packets valid.
  • Simple authentication: The local device encapsulates the authentication mode and authentication key into an outgoing VRRP Advertisement packet. When the remote device receives the VRRP Advertisement packet, it checks whether the authentication mode and authentication key in the packet are the same as those configured locally. If so, the device considers the received VRRP Advertisement packet valid. If not, the device considers the received VRRP Advertisement packet invalid and discards it.
  • MD5 authentication: The local device uses the MD5 algorithm to encrypt the authentication key and encapsulates the key in the Authentication Data field of an outgoing VRRP Advertisement packet. Upon receipt of the VRRP Advertisement packet, the remote device decrypts the authentication key and checks whether the authentication mode and authentication key are the same as those configured locally. If they are the same, the remote device accepts the packet; otherwise, it discards the packet.
Translation
Download
Updated: 2019-04-04

Document ID: EDOC1100065682

Views: 27473

Downloads: 246

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Share
Previous Next