Vrrp interface tracking configuration example, Network requirements, Configuration procedure – H3C Technologies H3C SecBlade LB Cards User Manual
Page 66
58
The output shows that after LB A resumes normal operation, it becomes the master, and packets
sent from Host A to Host B are forwarded by LB A.
VRRP interface tracking configuration example
Network requirements
•
LB A and LB B belong to VRRP group 1 with the virtual IPv6 addresses of 1::10/64 and FE80::10.
•
Host A wants to access Host B on the Internet, and learns 1::10/64 as its default gateway through
RA messages sent by the routers.
•
When LB A operates properly, LB A forwards the packets that Host A sends to Host B. If interface
GigabitEthernet 0/1 through which LB A connects to the Internet is not available, LB B forwards the
packets that Host A sends to Host B.
•
To prevent attacks to the VRRP group from illegal users by using spoofed packets, configure the
authentication mode as plain text to authenticate the VRRP packets in VRRP group 1. Specify the
authentication key as hello.
Figure 30 Network diagram
Configuration procedure
1.
Configure LB A:
[LBA] ipv6
[LBA] interface gigabitethernet0/2
[LBA-GigabitEthernet0/2] ipv6 address fe80::1 link-local
[LBA-GigabitEthernet0/2] ipv6 address 1::1 64
# Create a VRRP group 1 and set its virtual IPv6 addresses to FE80::10 and 1::10.
[LBA-GigabitEthernet0/2] vrrp ipv6 vrid 1 virtual-ip fe80::10 link-local
[LBA-GigabitEthernet0/2] vrrp ipv6 vrid 1 virtual-ip 1::10
# Configure the priority of LB A in VRRP group 1 as 110, which is higher than that of LB B (100),
so that LB A can become the master.
[LBA-GigabitEthernet0/2] vrrp ipv6 vrid 1 priority 110
# Set the authentication mode of VRRP group 1 as simple and authentication key to hello.
[LBA-GigabitEthernet0/2] vrrp ipv6 vrid 1 authentication-mode simple hello