H3C Technologies H3C SecBlade LB Cards - Manual (Page 26)

18
Item Description
Virtual IP
Configure the virtual IP address of the VRRP group.
If an interface connects to multiple subnets, you can configure multiple virtual IP
addresses for the VRRP group to implement router backup on different subnets.
IMPORTANT:
• The virtual IP address cannot be 0.0.0.0, 255.255.255.255, a loopback
address, any other invalid IP address (like 0.0.0.1), or an address that does not
belong to class A, B or C.
• The virtual IP address can be either an unused IP address on the segment where
the VRRP group resides or the IP address of an interface on a router in the VRRP
group. In the latter case, the router is called the "IP address owner." Removal of
the VRRP group on the IP address owner will cause IP address collision.
Therefore, you can modify the IP address of the interface on the IP address owner
to resolve the collision.
• The VRRP group can operate properly only when the configured virtual IP
address and the interface IP address belong to the same segment and are valid
host addresses. If the configured virtual IP address and the interface IP address
do not belong to the same network segment, or the configured IP address is the
network address or network broadcast address of the network segment to which
the interface IP address belongs, the state of the VRRP group is not always
initialize though you can perform the configuration successfully, that is, VRRP
does not take effect in this case.
Priority
Set the priority of the routers in a VRRP group. The greater the value, the higher the
priority.
IMPORTANT:
• VRRP determines the role (master or backup) of each router in the VRRP group by
priority. A router with a higher priority has more opportunity to become the
master.
• VRRP priority is in the range of 0 to 255. Priority 0 is reserved for special uses
and priority 255 for the IP address owner.
• When a router acts as the IP address owner, its priority is always 255. That is, the
IP address owner in a VRRP group acts as the master as long as it works properly.
Preempt Mode Set the working mode of the VRRP group:
• Preemptive—After setting the preempt mode to Preemptive, you need to
configure the preemption delay time.
• Non-preemptive—Non-preemptive mode.
IMPORTANT:
An IP address owner always operates in preemptive mode.
Delay
Authentication Set the authentication mode and plain text authentication key of the VRRP group:
• Null—No authentication and no authentication key.
• Simple—Simple text authentication. In this case, you need to configure a plain
text authentication key.
• MD5—MD5 authentication. In this case, you need to configure a plain text
authentication key.
IMPORTANT:
You can configure different authentication modes and authentication keys for the VRRP
groups on an interface. However, the members of the same VRRP group must use the
same authentication mode and authentication key.
Key