Licensing Requirements and Limitations for VRRP
Involved Network Elements
Other network elements are required to support VRRP functions.
Licensing Requirements
VRRP is a basic feature of a switch and is not under license control.
VRRP6 can be used only on the device enabled with IPv6. On the S9300, S9300E, and S9310X series switches, the IPv6 function is under license control and is unavailable by default. To use this function on these switches, apply for and purchase the license from the equipment supplier. On the S9300X-4, S9300X-8, and S9300X-12 switches, the IPv6 function is not under license control.
Feature Support in V200R019C10
All models of S9300 and S9300X series switches support VRRP.
Feature Limitations
In V200R003 and earlier versions, VRRP can be configured only on the VLANIF interface.
In V200R005, VRRP can be configured on the VLANIF interface and Layer 3 Ethernet interface.
In V200R006 and later versions, VRRP can be configured on the VLANIF interface, Layer 3 Ethernet interface, Dot1q termination sub-interface, and QinQ termination sub-interface.
- Starting in V200R010, VRRP6 can be configured on Dot1q termination sub-interfaces or QinQ termination sub-interfaces.
- Switches of a VRRP group must be configured with the same VRID.
- VRRP groups must use different virtual IP addresses. The virtual IP address of a VRRP group must be on the same network segment as the IP address of the interface where the VRRP group is configured.
- If each switch in the VRRP group uses a different VRRP version, VRRP packets may fail to be transmitted. When a VRRPv3-enabled switch and a VRRPv2-enabled switch belong to the same VRRP group, run the vrrp version-3 send-packet-mode { v2-only | v2v3-both } command to configure the switch to send VRRPv2 packets.
- If both VRRP and static ARP are configured on a VLANIF interface, a Dot1q termination sub-interface, a QinQ termination sub-interface, or an Ethernet interface on a device, an IP address mapped to a static ARP entry cannot be used as a virtual IP address. If a VRRP virtual IP address is an IP address mapped to a static ARP entry on the device, the device generates incorrect host routes, affecting traffic forwarding.
- The virtual MAC address of a VRRP group cannot be configured as a static or blackhole MAC address.
- In V200R003 and earlier versions, a maximum of 255 VRRP groups (sum of VRRP4 and VRRP6 VRRP groups) can be configured on the switch by default. Starting in V200R005, a maximum of 256 VRRP groups (sum of VRRP4 and VRRP6 VRRP groups) can be configured on the switch by default. Starting in V200R010C00, the set vrrp max-group-number max-group-number command can be used to set the maximum number of allowed VRRP groups (sum of VRRP4 and VRRP6 VRRP groups).
- When configuring VRRP in the sub-interface view, pay attention to the following points:
- In V200R009 and earlier versions, when VRRP is configured on a Dot1q termination sub-interface, only one VLAN can be configured on the sub-interface. When VRRP is configured on a QinQ termination sub-interface, only one PE VLAN and one CE VLAN can be configured on the sub-interface.
- When configuring the VRRP groups on a VLAN tag termination sub-interface, run the arp broadcast enable command to enable ARP broadcast on the VLAN tag termination sub-interface.
- The ARP aging probe packets sent by a VRRP device use an interface IP address, instead of a virtual IP address, as the source IP address.