Principles of vrrp, Vrrp tracking – H3C Technologies H3C S10500 Series Switches User Manual
Page 137
128
•
Priority—Priority of the router in the VRRP group, in the range of 0 to 255. A greater value
represents a higher priority.
•
Count IP Addrs/Count IPv6 Addrs—Number of virtual IPv4 or IPv6 addresses for the VRRP group.
A VRRP group can have multiple virtual IPv4 or IPv6 addresses.
•
Auth Type—Authentication type. 0 means no authentication, 1 means simple text authentication,
and 2 means MD5 authentication. VRRPv3 does not support MD5 authentication.
•
Adver Int—Interval for sending advertisement packets. For VRRPv2, the interval is in seconds and
defaults to 1. For VRRPv3, the interval is in centiseconds and defaults to 100.
•
Checksum—16-bit checksum for validating the data in VRRP packets.
•
IP Address/IPv6 Address—Virtual IPv4 or IPv6 address entry of the VRRP group. The Count IP Addrs
or Count IPv6 Addrs field defines the number of the virtual IP v4 or IPv6 addresses.
•
Authentication Data—Authentication key. Currently, this field is used only for simple authentication
and is 0 for any other authentication modes.
Principles of VRRP
•
Routers in a VRRP group determine their roles by priority. The router with the highest priority is the
master, and the others are the backups. The master periodically sends VRRP advertisements to notify
the backups that it is working properly, and each of the backups starts a timer to wait for
advertisements from the master.
•
In preemptive mode, when a backup receives a VRRP advertisement, it compares the priority in the
packet with its own priority. If the priority of the backup is higher, the backup becomes the master.
Otherwise, it remains as a backup. With the preemptive mode, a VRRP group always has a router
with the highest priority as the master for packet forwarding.
•
In non-preemptive mode, a router in the VRRP group remains as a master or backup as long as the
master does not fail. A backup does not become the master even if it is configured with a higher
priority. The non-preemptive mode helps avoid frequent switchover between the master and
backups.
•
If the timer of a backup expires but the backup still does not receive any VRRP advertisement, it
considers that the master fails. In this case, the backup considers itself as the master and sends VRRP
advertisements to start a new master election.
NOTE:
•
The VRRP group configuration might be different on routers, and network problems might exist, so
multiple master routers might exist in one VRRP group. These master routers will elect one master
according to their priorities and IP addresses. The router with the highest priority wins the election. If a
tie exists in the priority, the router with the highest IP address wins.
•
After a backup router receives an advertisement, it compares its priority against that carried in the
advertisement. If its priority is higher than that carried in the advertisement, it takes over the master.
VRRP tracking
NOTE:
To enable the VRRP tracking function, configure the routers in the VRRP group to work in preemptive mode
first, so that only the router with the highest priority can always operate as the master for packet
forwarding.
- H3C S5800 Series Switches H3C S5820X Series Switches H3C WX3000E Series Wireless Switches H3C SecPath F1000-E H3C SecPath F5000-A5 Firewall H3C SecPath F1000-A-EI H3C SecPath F1000-E-SI H3C SecPath F1000-S-AI H3C SecPath F5000-S Firewall H3C SecPath F5000-C Firewall H3C SecPath F100-C-SI H3C SecPath F1000-C-SI H3C SecPath F100-A-SI H3C SecBlade FW Cards H3C SecBlade FW Enhanced Cards H3C SecPath U200-A U200-M U200-S H3C SecPath U200-CA U200-CM U200-CS