Licensing Requirements and Limitations for VRRP
Involved Network Elements
Other network elements are required to support VRRP functions.
Licensing Requirements
VRRP is a basic feature of a switch and is not under license control.
VRRP6 can be used only on the device enabled with IPv6. On the S12700 series switches, the IPv6 function is under license control and is unavailable by default. To use this function on the S12700 series switches, apply for and purchase the license from the equipment supplier. On the S12700E series switches, the IPv6 function is not under license control.
For details about how to apply for a license, see Obtaining Licenses in the S12700 and S12700E Series Agile Switches License Usage Guide.
Feature Support in V200R019C10
All models of S12700 and S12700E series switches support VRRP.
Feature Limitations
In V200R005, VRRP can be configured on the VLANIF interface and Layer 3 Ethernet interface.
In V200R006 and later versions, VRRP can be configured on the VLANIF interface, Layer 3 Ethernet interface, Dot1q termination sub-interface, and QinQ termination sub-interface.
- Starting in V200R010, VRRP6 can be configured on Dot1q termination sub-interfaces or QinQ termination sub-interfaces.
- Switches of a VRRP group must be configured with the same VRID.
- VRRP groups must use different virtual IP addresses. The virtual IP address of a VRRP group must be on the same network segment as the IP address of the interface where the VRRP group is configured.
- If each switch in the VRRP group uses a different VRRP version, VRRP packets may fail to be transmitted. When a VRRPv3-enabled switch and a VRRPv2-enabled switch belong to the same VRRP group, run the vrrp version-3 send-packet-mode { v2-only | v2v3-both } command to configure the switch to send VRRPv2 packets.
- If both VRRP and static ARP are configured on a VLANIF interface, a Dot1q termination sub-interface, a QinQ termination sub-interface, or an Ethernet interface on a device, an IP address mapped to a static ARP entry cannot be used as a virtual IP address. If a VRRP virtual IP address is an IP address mapped to a static ARP entry on the device, the device generates incorrect host routes, affecting traffic forwarding.
- The virtual MAC address of a VRRP group cannot be configured as a static or blackhole MAC address.
- In V200R003 and earlier versions, a maximum of 255 VRRP groups (sum of VRRP4 and VRRP6 VRRP groups) can be configured on the switch by default. Starting in V200R005, a maximum of 256 VRRP groups (sum of VRRP4 and VRRP6 VRRP groups) can be configured on the switch by default. Starting in V200R010C00, the set vrrp max-group-number max-group-number command can be used to set the maximum number of allowed VRRP groups (sum of VRRP4 and VRRP6 VRRP groups).
- When configuring VRRP in the sub-interface view, pay attention to the following points:
- In V200R009 and earlier versions, when VRRP is configured on a Dot1q termination sub-interface, only one VLAN can be configured on the sub-interface. When VRRP is configured on a QinQ termination sub-interface, only one PE VLAN and one CE VLAN can be configured on the sub-interface.
- When configuring the VRRP groups on a VLAN tag termination sub-interface, run the arp broadcast enable command to enable ARP broadcast on the VLAN tag termination sub-interface.
- The ARP aging probe packets sent by a VRRP device use an interface IP address, instead of a virtual IP address, as the source IP address.