Example for Configuring VRRP on a QinQ Termination Sub-interface
Networking Requirements
The host uses SwitchA as the default gateway to connect to the Internet. When SwitchA becomes faulty, SwitchB functions as the gateway. This implements gateway backup.
After SwitchA recovers, it resumes control within 20s.
In this scenario, to avoid loops, ensure that all connected interfaces have STP disabled and connected interfaces are removed from VLAN 1. If STP is enabled and VLANIF interfaces of switches are used to construct a Layer 3 ring network, an interface on the network will be blocked. As a result, Layer 3 services on the network cannot run normally.
Configuration Roadmap
The configuration roadmap is as follows:
- Assign an IP address to each interface and configure a routing protocol to ensure network connectivity.
- Configure a VRRP group on sub-interfaces of SwitchA and SwitchB, set the preemption delay to 20s and a higher priority for SwitchA so that SwitchA functions as the master to forward traffic, and set a lower priority for SwitchB so that SwitchB functions as the backup.
Procedure
- Configure devices to ensure network connectivity.
# Assign an IP address to each interface. SwitchA is used as an example. The configurations of SwitchB and SwitchC are similar to the configuration of SwitchA. For details, see the configuration files.
<Quidway> system-view [Quidway] sysname SwitchA [SwitchA] interface gigabitethernet 2/0/0.1 [SwitchA-GigabitEthernet2/0/0.1] ip address 10.1.1.1 24 [SwitchA-GigabitEthernet2/0/0.1] quit [SwitchA] interface gigabitethernet 2/0/0.2 [SwitchA-GigabitEthernet2/0/0.2] ip address 10.1.2.1 24 [SwitchA-GigabitEthernet2/0/0.2] quit [SwitchA] interface gigabitethernet 1/0/0 [SwitchA-GigabitEthernet1/0/0] undo portswitch [SwitchA-GigabitEthernet1/0/0] ip address 192.168.2.1 24 [SwitchA-GigabitEthernet1/0/0] quit
# Configure OSPF between SwitchA, SwitchB, and SwitchC. SwitchA is used as an example. The configurations of SwitchB and SwitchC are similar to the configuration of SwitchA. For details, see the configuration files.
[SwitchA] ospf 1 [SwitchA-ospf-1] area 0 [SwitchA-ospf-1-area-0.0.0.0] network 10.1.1.0 0.0.0.255 [SwitchA-ospf-1-area-0.0.0.0] network 10.1.2.0 0.0.0.255 [SwitchA-ospf-1-area-0.0.0.0] network 192.168.2.0 0.0.0.255 [SwitchA-ospf-1-area-0.0.0.0] quit [SwitchA-ospf-1] quit
- Configure Layer 2 forwarding.
# Configure LSW2.
<Quidway> system-view [Quidway] sysname LSW2 [LSW2] vlan 10 [LSW2-vlan10] quit [LSW2] interface gigabitethernet 1/0/0 [LSW2-GigabitEthernet1/0/0] port link-type access [LSW2-GigabitEthernet1/0/0] port default vlan 10 [LSW2-GigabitEthernet1/0/0] quit [LSW2] interface gigabitethernet 1/0/1 [LSW2-GigabitEthernet1/0/1] port link-type trunk [LSW2-GigabitEthernet1/0/1] port trunk allow-pass vlan 10 [LSW2-GigabitEthernet1/0/1] quit
# Configure LSW3.
<Quidway> system-view [Quidway] sysname LSW3 [LSW3] vlan 20 [LSW3-vlan20] quit [LSW3] interface gigabitethernet 1/0/0 [LSW3-GigabitEthernet1/0/0] port link-type access [LSW3-GigabitEthernet1/0/0] port default vlan 20 [LSW3-GigabitEthernet1/0/0] quit [LSW3] interface gigabitethernet 1/0/1 [LSW3-GigabitEthernet1/0/1] port link-type trunk [LSW3-GigabitEthernet1/0/1] port trunk allow-pass vlan 20 [LSW3-GigabitEthernet1/0/1] quit
# Configure LSW1.
<Quidway> system-view [Quidway] sysname LSW1 [LSW1] vlan 100 [LSW1-vlan100] quit [LSW1] interface gigabitethernet 1/0/0 [LSW1-GigabitEthernet1/0/0] port vlan-stacking vlan 10 stack-vlan 100 [LSW1-GigabitEthernet1/0/0] quit [LSW1] interface gigabitethernet 1/0/1 [LSW1-GigabitEthernet1/0/1] port vlan-stacking vlan 20 stack-vlan 100 [LSW1-GigabitEthernet1/0/1] quit [LSW1] interface gigabitethernet 1/0/2 [LSW1-GigabitEthernet1/0/2] port link-type trunk [LSW1-GigabitEthernet1/0/2] port trunk allow-pass vlan 100 [LSW1-GigabitEthernet1/0/2] quit [LSW1] interface gigabitethernet 1/0/3 [LSW1-GigabitEthernet1/0/3] port link-type trunk [LSW1-GigabitEthernet1/0/3] port trunk allow-pass vlan 100 [LSW1-GigabitEthernet1/0/3] quit
- Configure VRRP on a QinQ termination sub-interface.
# On SwitchA, configure VRRP group 1 on GE2/0/0.1 and VRRP group 2 on GE2/0/0.2. Then, set the priority of SwitchA in the two VRRP groups to 120 and the preemption delay to 20s.
[SwitchA] interface gigabitethernet 2/0/0.1 [SwitchA-GigabitEthernet2/0/0.1] qinq termination pe-vid 100 ce-vid 10 [SwitchA-GigabitEthernet2/0/0.1] qinq vrrp pe-vid 100 ce-vid 10 [SwitchA-GigabitEthernet2/0/0.1] vrrp vrid 1 virtual-ip 10.1.1.111 [SwitchA-GigabitEthernet2/0/0.1] vrrp vrid 1 priority 120 [SwitchA-GigabitEthernet2/0/0.1] vrrp vrid 1 preempt-mode timer delay 20 [SwitchA-GigabitEthernet2/0/0.1] quit [SwitchA] interface gigabitethernet 2/0/0.2 [SwitchA-GigabitEthernet2/0/0.2] qinq termination pe-vid 100 ce-vid 20 [SwitchA-GigabitEthernet2/0/0.2] qinq vrrp pe-vid 100 ce-vid 20 [SwitchA-GigabitEthernet2/0/0.2] vrrp vrid 2 virtual-ip 10.1.2.111 [SwitchA-GigabitEthernet2/0/0.2] vrrp vrid 2 priority 120 [SwitchA-GigabitEthernet2/0/0.2] vrrp vrid 2 preempt-mode timer delay 20 [SwitchA-GigabitEthernet2/0/0.2] quit
# On SwitchB, configure VRRP group 1 on GE2/0/0.1 and VRRP group 2 on GE2/0/0.2, and configure SwitchB to use the default priority in the two VRRP groups.
[SwitchB] interface gigabitethernet 2/0/0.1 [SwitchB-GigabitEthernet2/0/0.1] qinq termination pe-vid 100 ce-vid 10 [SwitchB-GigabitEthernet2/0/0.1] qinq vrrp pe-vid 100 ce-vid 10 [SwitchB-GigabitEthernet2/0/0.1] vrrp vrid 1 virtual-ip 10.1.1.111 [SwitchB-GigabitEthernet2/0/0.1] quit [SwitchB] interface gigabitethernet 2/0/0.2 [SwitchB-GigabitEthernet2/0/0.2] qinq termination pe-vid 100 ce-vid 20 [SwitchB-GigabitEthernet2/0/0.2] qinq vrrp pe-vid 100 ce-vid 20 [SwitchB-GigabitEthernet2/0/0.2] vrrp vrid 2 virtual-ip 10.1.2.111 [SwitchB-GigabitEthernet2/0/0.2] quit
- Verify the configuration.
# Run the display vrrp command on SwitchA and SwitchB. You can see that SwitchA is in Master state and SwitchB is in Backup state in the two VRRP groups.
[SwitchA] display vrrp GigabitEthernet2/0/0.1 | Virtual Router 1 State : Master Virtual IP : 10.1.1.111 Master IP : 10.1.1.1 PriorityRun : 120 PriorityConfig : 120 MasterPriority : 120 Preempt : YES Delay Time : 20 s TimerRun : 1 s TimerConfig : 1 s Auth type : NONE Virtual MAC : 0000-5e00-0101 Check TTL : YES Config type : normal-vrrp Backup-forward : disabled Create time : 2012-05-29 21:25:47 Last change time : 2012-05-29 21:27:10 GigabitEthernet2/0/0.2 | Virtual Router 2 State : Master Virtual IP : 10.1.2.111 Master IP : 10.1.2.1 PriorityRun : 120 PriorityConfig : 120 MasterPriority : 120 Preempt : YES Delay Time : 20 s TimerRun : 1 s TimerConfig : 1 s Auth type : NONE Virtual MAC : 0000-5e00-0102 Check TTL : YES Config type : normal-vrrp Backup-forward : disabled Create time : 2012-05-29 21:25:47 Last change time : 2012-05-29 21:27:10
[SwitchB] display vrrp GigabitEthernet2/0/0.1 | Virtual Router 1 State : Backup Virtual IP : 10.1.1.111 Master IP : 10.1.1.1 PriorityRun : 100 PriorityConfig : 100 MasterPriority : 120 Preempt : YES Delay Time : 0 s TimerRun : 1 s TimerConfig : 1 s Auth type : NONE Virtual MAC : 0000-5e00-0101 Check TTL : YES Config type : normal-vrrp Backup-forward : disabled Create time : 2012-05-29 21:25:47 Last change time : 2012-05-29 21:27:10 GigabitEthernet2/0/0.2 | Virtual Router 2 State : Backup Virtual IP : 10.1.2.111 Master IP : 10.1.2.1 PriorityRun : 100 PriorityConfig : 100 MasterPriority : 120 Preempt : YES Delay Time : 0 s TimerRun : 1 s TimerConfig : 1 s Auth type : NONE Virtual MAC : 0000-5e00-0102 Check TTL : YES Config type : normal-vrrp Backup-forward : disabled Create time : 2012-05-29 21:25:47 Last change time : 2012-05-29 21:27:10
# Run the display ip routing-table command on SwitchA and SwitchB. The command output shows that a direct route to the virtual IP address exists in the routing table of SwitchA and an OSPF route to the virtual IP address exists in the routing table of SwitchB.
[SwitchA] display ip routing-table Route Flags: R - relay, D - download to fib, T - to vpn-instance ------------------------------------------------------------------------------ Routing Tables: Public Destinations : 11 Routes : 13 Destination/Mask Proto Pre Cost Flags NextHop Interface 10.1.1.0/24 Direct 0 0 D 10.1.1.1 GigabitEthernet2/0/0.1 10.1.1.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet2/0/0.1 10.1.1.111/32 Direct 0 0 D 127.0.0.1 GigabitEthernet2/0/0.1 10.1.2.0/24 Direct 0 0 D 10.1.2.1 GigabitEthernet2/0/0.2 10.1.2.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet2/0/0.2 10.1.2.111/32 Direct 0 0 D 127.0.0.1 GigabitEthernet2/0/0.2 127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0 127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0 192.168.1.0/24 OSPF 10 2 D 192.168.2.2 GigabitEthernet1/0/0 OSPF 10 2 D 10.1.1.2 GigabitEthernet2/0/0.1 OSPF 10 2 D 10.1.2.2 GigabitEthernet2/0/0.2 192.168.2.0/24 Direct 0 0 D 192.168.2.1 GigabitEthernet1/0/0 192.168.2.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet1/0/0
[SwitchB] display ip routing-table Route Flags: R - relay, D - download to fib, T - to vpn-instance ------------------------------------------------------------------------------ Routing Tables: Public Destinations : 11 Routes : 15 Destination/Mask Proto Pre Cost Flags NextHop Interface 10.1.1.0/24 Direct 0 0 D 10.1.1.2 GigabitEthernet2/0/0.1 10.1.1.2/32 Direct 0 0 D 127.0.0.1 GigabitEthernet2/0/0.1 10.1.1.111/32 OSPF 10 2 D 10.1.1.1 GigabitEthernet2/0/0.1 OSPF 10 2 D 10.1.2.1 GigabitEthernet2/0/0.2 10.1.2.0/24 Direct 0 0 D 10.1.2.2 GigabitEthernet2/0/0.2 10.1.2.2/32 Direct 0 0 D 127.0.0.1 GigabitEthernet2/0/0.2 10.1.2.111/32 OSPF 10 2 D 10.1.1.1 GigabitEthernet2/0/0.1 OSPF 10 2 D 10.1.2.1 GigabitEthernet2/0/0.2 127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0 127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0 192.168.1.0/24 Direct 0 0 D 192.168.1.1 GigabitEthernet1/0/0 192.168.1.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet1/0/0 192.168.2.0/24 OSPF 10 2 D 192.168.1.2 GigabitEthernet1/0/0 OSPF 10 2 D 10.1.1.1 GigabitEthernet2/0/0.1 OSPF 10 2 D 10.1.2.1 GigabitEthernet2/0/0.2
# Run the shutdown command on GE2/0/0.1 of SwitchA to simulate a link fault.
[SwitchA] interface gigabitethernet 2/0/0.1 [SwitchA-GigabitEthernet2/0/0.1] shutdown [SwitchA-GigabitEthernet2/0/0.1] quit
# Run the display vrrp command on SwitchA and SwitchB. You can see that SwitchA is in Initialize state and SwitchB is in Master state in VRRP group 1.
[SwitchA] display vrrp GigabitEthernet2/0/0.1 | Virtual Router 1 State : Initialize Virtual IP : 10.1.1.111 Master IP : 0.0.0.0 PriorityRun : 120 PriorityConfig : 120 MasterPriority : 0 Preempt : YES Delay Time : 20 s TimerRun : 1 s TimerConfig : 1 s Auth type : NONE Virtual MAC : 0000-5e00-0101 Check TTL : YES Config type : normal-vrrp Backup-forward : disabled Create time : 2012-05-29 21:27:47 Last change time : 2012-05-29 21:29:10 GigabitEthernet2/0/0.2 | Virtual Router 2 State : Master Virtual IP : 10.1.2.111 Master IP : 10.1.2.1 PriorityRun : 120 PriorityConfig : 120 MasterPriority : 120 Preempt : YES Delay Time : 20 s TimerRun : 1 s TimerConfig : 1 s Auth type : NONE Virtual MAC : 0000-5e00-0102 Check TTL : YES Config type : normal-vrrp Backup-forward : disabled Create time : 2012-05-29 21:25:47 Last change time : 2012-05-29 21:27:10
[SwitchB] display vrrp GigabitEthernet2/0/0.1 | Virtual Router 1 State : Master Virtual IP : 10.1.1.111 Master IP : 10.1.1.2 PriorityRun : 100 PriorityConfig : 100 MasterPriority : 100 Preempt : YES Delay Time : 0 s TimerRun : 1 s TimerConfig : 1 s Auth type : NONE Virtual MAC : 0000-5e00-0101 Check TTL : YES Config type : normal-vrrp Backup-forward : disabled Create time : 2012-05-29 21:27:47 Last change time : 2012-05-29 21:29:10 GigabitEthernet2/0/0.2 | Virtual Router 2 State : Backup Virtual IP : 10.1.2.111 Master IP : 10.1.2.1 PriorityRun : 100 PriorityConfig : 100 MasterPriority : 120 Preempt : YES Delay Time : 0 s TimerRun : 1 s TimerConfig : 1 s Auth type : NONE Virtual MAC : 0000-5e00-0102 Check TTL : YES Config type : normal-vrrp Backup-forward : disabled Create time : 2012-05-29 21:25:47 Last change time : 2012-05-29 21:27:10
# Run the undo shutdown command on GE2/0/0.1 of SwitchA.
[SwitchA] interface gigabitethernet 2/0/0.1 [SwitchA-GigabitEthernet2/0/0.1] undo shutdown [SwitchA-GigabitEthernet2/0/0.1] quit
# After 20s, run the display vrrp command on SwitchA and SwitchB. You can see that SwitchA is in Master state and SwitchB is in Backup state in VRRP group 1.
[SwitchA] display vrrp GigabitEthernet2/0/0.1 | Virtual Router 1 State : Master Virtual IP : 10.1.1.111 Master IP : 10.1.1.1 PriorityRun : 120 PriorityConfig : 120 MasterPriority : 120 Preempt : YES Delay Time : 20 s TimerRun : 1 s TimerConfig : 1 s Auth type : NONE Virtual MAC : 0000-5e00-0101 Check TTL : YES Config type : normal-vrrp Backup-forward : disabled Create time : 2012-05-29 21:29:47 Last change time : 2012-05-29 21:31:10 GigabitEthernet2/0/0.2 | Virtual Router 2 State : Master Virtual IP : 10.1.2.111 Master IP : 10.1.2.1 PriorityRun : 120 PriorityConfig : 120 MasterPriority : 120 Preempt : YES Delay Time : 20 s TimerRun : 1 s TimerConfig : 1 s Auth type : NONE Virtual MAC : 0000-5e00-0102 Check TTL : YES Config type : normal-vrrp Backup-forward : disabled Create time : 2012-05-29 21:25:47 Last change time : 2012-05-29 21:27:10
[SwitchB] display vrrp GigabitEthernet2/0/0.1 | Virtual Router 1 State : Backup Virtual IP : 10.1.1.111 Master IP : 10.1.1.1 PriorityRun : 100 PriorityConfig : 100 MasterPriority : 120 Preempt : YES Delay Time : 0 s TimerRun : 1 s TimerConfig : 1 s Auth type : NONE Virtual MAC : 0000-5e00-0101 Check TTL : YES Config type : normal-vrrp Backup-forward : disabled Create time : 2012-05-29 21:29:47 Last change time : 2012-05-29 21:31:10 GigabitEthernet2/0/0.2 | Virtual Router 2 State : Backup Virtual IP : 10.1.2.111 Master IP : 10.1.2.1 PriorityRun : 100 PriorityConfig : 100 MasterPriority : 120 Preempt : YES Delay Time : 0 s TimerRun : 1 s TimerConfig : 1 s Auth type : NONE Virtual MAC : 0000-5e00-0102 Check TTL : YES Config type : normal-vrrp Backup-forward : disabled Create time : 2012-05-29 21:25:47 Last change time : 2012-05-29 21:27:10
Configuration Files
SwitchA configuration file
# sysname SwitchA # interface GigabitEthernet1/0/0 undo portswitch ip address 192.168.2.1 255.255.255.0 # interface GigabitEthernet2/0/0.1 qinq termination pe-vid 100 ce-vid 10 qinq vrrp pe-vid 100 ce-vid 10 ip address 10.1.1.1 255.255.255.0 vrrp vrid 1 virtual-ip 10.1.1.111 vrrp vrid 1 priority 120 vrrp vrid 1 preempt-mode timer delay 20 # interface GigabitEthernet2/0/0.2 qinq termination pe-vid 100 ce-vid 20 qinq vrrp pe-vid 100 ce-vid 20 ip address 10.1.2.1 255.255.255.0 vrrp vrid 2 virtual-ip 10.1.2.111 vrrp vrid 2 priority 120 vrrp vrid 2 preempt-mode timer delay 20 # ospf 1 area 0.0.0.0 network 10.1.1.0 0.0.0.255 network 10.1.2.0 0.0.0.255 network 192.168.2.0 0.0.0.255 # return
SwitchB configuration file
# sysname SwitchB # interface GigabitEthernet1/0/0 undo portswitch ip address 192.168.1.1 255.255.255.0 # interface GigabitEthernet2/0/0.1 qinq termination pe-vid 100 ce-vid 10 qinq vrrp pe-vid 100 ce-vid 10 ip address 10.1.1.2 255.255.255.0 vrrp vrid 1 virtual-ip 10.1.1.111 # interface GigabitEthernet2/0/0.2 qinq termination pe-vid 100 ce-vid 20 qinq vrrp pe-vid 100 ce-vid 20 ip address 10.1.2.2 255.255.255.0 vrrp vrid 2 virtual-ip 10.1.2.111 # ospf 1 area 0.0.0.0 network 10.1.1.0 0.0.0.255 network 10.1.2.0 0.0.0.255 network 192.168.1.0 0.0.0.255 # return
SwitchC configuration file
# sysname SwitchC # interface GigabitEthernet1/0/0 undo portswitch ip address 192.168.2.2 255.255.255.0 # interface GigabitEthernet2/0/0 undo portswitch ip address 192.168.1.2 255.255.255.0 # ospf 1 area 0.0.0.0 network 192.168.1.0 0.0.0.255 network 192.168.2.0 0.0.0.255 # return
LSW1 configuration file
# sysname LSW1 # vlan batch 100 # interface GigabitEthernet1/0/0 port vlan-stacking vlan 10 stack-vlan 100 # interface GigabitEthernet1/0/1 port vlan-stacking vlan 20 stack-vlan 100 # interface GigabitEthernet1/0/2 port link-type trunk port trunk allow-pass vlan 100 # interface GigabitEthernet1/0/3 port link-type trunk port trunk allow-pass vlan 100 # return
LSW2 configuration file
# sysname LSW2 # vlan batch 10 # interface GigabitEthernet1/0/0 port link-type access port default vlan 10 # interface GigabitEthernet1/0/1 port link-type trunk port trunk allow-pass vlan 10 # return
LSW3 configuration file
# sysname LSW3 # vlan batch 20 # interface GigabitEthernet1/0/0 port link-type access port default vlan 20 # interface GigabitEthernet1/0/1 port link-type trunk port trunk allow-pass vlan 20 # return