H3C Technologies H3C SecPath F1000-E - Manual (Page 15)

14
To implement inter-VLAN or LAN-WAN communication, configure VLAN termination on the
subinterfaces of Layer 3 Ethernet interfaces on routers. As shown in Figure 9 , configure ambiguous VLAN
termination for VLAN 10 and VLAN 20 on the Layer 3 Ethernet subinterfaces on routers. At this time, if
you enable the subinterfaces configured with VLAN termination to transmit broadcast/multicast packets,
the master sends VRRP advertisements within all VLANs whose VLAN packets are configured to be
terminated by the subinterfaces. If the Layer 3 Ethernet subinterfaces are configured to terminate packets
from many VLANs, there will be many VRRP advertisements to be transmitted through the subinterfaces,
and the performance of the router will be seriously affected. If you disable the subinterfaces configured
with VLAN termination from transmitting broadcast/multicast packets, the master cannot send VRRP
advertisements to the backups. To solve this problem, you can configure a VRRP control VLAN to allow
the master to send VRRP advertisements only within the control VLAN when the subinterfaces configured
with VLAN termination are disabled from transmitting broadcast/multicast packets
VRRP control VLAN falls into two categories:
• Specify a single VLAN tag: For subinterfaces configured with ambiguous Dot1q termination, this
type of control VLAN should be specified.
• Specify both inner and outer VLAN tags: For subinterfaces configured with ambiguous QinQ
termination, this type of control VLAN should be specified.
NOTE:
•
You need to specify a control VLAN only for a Layer 3 Ethernet subinterface and Layer 3 aggregation
subinterface configured with ambiguous VLAN termination.
• When VRRP works in load balancing mode, you cannot specify the VRRP control VLAN.
• If you specified the VRRP control VLAN, after an active/standby switchover, to update MAC address
entries on devices in the VLAN terminated ambiguously, you are recommended to enable the routers in
the VRRP group to periodically send gratuitous ARP packets with the arp send-gratuitous-arp command.
For more information about the arp send-gratuitous-arp command, see ARP Commands in the IP
Services Volume.
• For more information about VLAN termination, see VLAN Termination Configuration in the Firewall
Web Configuration Manual.
Follow these steps to specify the VRRP control VLAN:
To do… Use the command… Remarks
Enter system view system-view —
Layer 3 Ethernet
subinterface
view
interface interface-type
interface-number.subnumber
Enter interface
view
Layer 3
aggregation
subinterface
view
interface route-aggregation
interface-number.subnumber
Required
Use either command.
Specify a VRRP control VLAN for
the subinterface configured with
ambiguous Dot1q termination
vrrp dot1q vid vlan-id
Required
Use either command.