Version: ME60 V600R002C02SPC700
The network topology is as follows:
The S9306 is an aggregation layer device. Its upstream interface is configured as an Eth-Trunk interface that connects to the ME60. The upstream interface and interconnection interface transparently transmit service VLAN tags and mVRRP VLAN tags.
The ME60 works in dual-system hot backup mode. VRRP is enabled on sub-interfaces of downstream links through mVRRP VLANs. Service VRRP is enabled on upstream links, and a protection tunnel is set up between the ME60s.
The firewalls also work in dual-system hot backup mode, and VRRP is enabled on the downstream interfaces and interconnection interfaces.
Static routes are configured on ME60s and Eudemons for interconnection. The destination IP address of each static route is the VRRP virtual IP address.
VRRP packets are multicast packets and cannot be forwarded at Layer 3. To allow VRRP packets to be sent to Eudemon B, the ME60 must transparently transmit VRRP packets. Therefore, run the portswitch command to change the mode of the upstream and interconnection interfaces on the ME60 from Layer 3 to Layer 2.
port link-type access
port default vlan 32
port link-type trunk
port trunk allow-pass vlan 32
In addition, the ME60s use shared address pools. To allow a protection tunnel to be established between the ME60s, an interconnection address must be configured. As a result, a new VLAN and a VLANIF interface are configured. The interconnection link between the ME60s transparently transmits packets from the VLAN.
description to ME60B
ip address ×.×.×.× 255.255.255.252
port trunk allow-pass vlan 32 38
A PC is connected to S9306 A. Whether a master/slave ME60 switchover is successful can be determined based on the SPES authentication result. Before a switchover is performed, the PC can pass the SPES authentication. After the downstream interface of ME60 A goes Down, the PC fails the SPES authentication. The PC can obtain the IP address (×.×.×.×) but cannot pass the SPES authentication. In addition, the gateway address fails to be pinged on the PC.