H3C Technologies H3C SecPath F1000-E - Manual (Page 840)

11
Item Description
Virtual IP
Configure the virtual IP address of the VRRP group.
If an interface connects to multiple subnets, you can configure multiple virtual IP
addresses for the VRRP group to implement router backup on different subnets.
IMPORTANT:
z The virtual IP address cannot be 0.0.0.0, 255.255.255.255, a loopback
address, any other invalid IP address (like 0.0.0.1), or an address that does
not belong to class A, B or C.
z The virtual IP address can be either an unused IP address on the segment
where the VRRP group resides or the IP address of an interface on a router
in the VRRP group. In the latter case, the router is called the IP address
owner. Removal of the VRRP group on the IP address owner will cause IP
address collision. In such a case, it is recommended to modify the IP
address of the interface on the IP address owner to resolve the collision.
z The VRRP group can operate normally only when the configured virtual IP
address and the interface IP address belong to the same segment and are
valid host addresses. If the configured virtual IP address and the interface
IP address do not belong to the same network segment, or the configured
IP address is the network address or network broadcast address of the
network segment that the interface IP address belongs to, the state of the
VRRP group is always initialize though you can perform the configuration
successfully, that is, VRRP does not take effect in this case.
Priority
Set the priority of the routers in a VRRP group. The greater the value, the higher
the priority.
IMPORTANT:
z VRRP determines the role (master or backup) of each router in the VRRP
group by priority. A router with a higher priority has more opportunity to
become the master.
z VRRP priority is in the range of 0 to 255. Priority 0 is reserved for special
uses and priority 255 for the IP address owner.
z When a router acts as the IP address owner, its priority is always 255. That
is, the IP address owner in a VRRP group acts as the master as long as it
works properly.
Preempt Mode
Delay
Set the working mode of the VRRP group.
• Preemptive: preemptive mode. After setting the preempt mode to
Preemptive, you need to configure the preemption delay time.
• Non-preemptive: non-preemptive mode.
IMPORTANT:
An IP address owner always works in the preemptive mode.
Authentication
Key
Set the authentication mode and plain text authentication key of the VRRP group.
• Null: no authentication and no authentication key.
• Simple: simple text authentication. In this case, you need to configure a plain
text authentication key.
• MD5: MD5 authentication. In this case, you need to configure a plain text
authentication key.
IMPORTANT:
You can configure different authentication modes and authentication keys for the
VRRP groups on an interface. However, the members of the same VRRP group
must use the same authentication mode and authentication key.