VRRP Feature Overview Guide
VRRP Feature Overview Guide
VRRP Introduction
This guide describes the Virtual Router Redundancy Protocol (VRRP) feature provided by
the switch, and how to configure the switch to participate in a virtual router.
One function of a switch is to act as a gateway to the WAN for hosts on a LAN. On larger
LANs, two or more switches may act as the gateway, and hosts use a dynamic routing
protocol, such as RIP or OSPF, to determine the gateway switch to use as the next hop in
order to reach a specific IP destination. However, there are a number of factors, such as
administrative or processing overhead or even support for the protocols, which may make it
undesirable to use a dynamic routing protocol. One alternative is to use static routing;
however, if the statically configured first hop switch fails, the hosts on the LAN are unable to
communicate with those on the WAN.
TheVirtual Router Redundancy Protocol is defined in RFC 5798 (Virtual Router Redundancy
Protocol (VRRP) Version 3 for IPv4 and IPv6). It provides a solution to the problem by
combining two or more physical switches into a logical grouping called a virtual router (VR).
The physical switches then operate together to provide a single logical gateway for hosts on
the LAN.
A virtual router is configured as the host’s gateway and comprises a number of physical
routers. The hosts can only see the virtual router so the number of physical routers that
make up the virtual router is transparent. If physical routers in the virtual router fail, then
traffic to and from the hosts will still be forwarded, so long as there is at least one functioning
physical router, no configuration changes will be required by the hosts.
To see whether your product supports VRRP, see the following documents:
The product’s datasheet
The AlliedWare Plus datasheet
The product’s Command Reference
These documents are available from the above links on our website at alliedtelesis.com.
Feature support may change in later software versions. For the latest information, see the
above documents.
Content
VRRP Introduction...............................................................................................................................................................1
Products and software version that apply to this guide .......................................................................2
Virtual Router Redundancy Protocol .......................................................................................................................3
VRRP Configuration for IPv4.........................................................................................................................................5
VRRP election and preempt for IPv4 ..............................................................................................................7
VRRP Configuration for IPv6.........................................................................................................................................9
VRRP election and preempt for IPv6 ........................................................................................................... 11
VRRP Debugging ............................................................................................................................................................... 13
VRRP Configuration Examples .................................................................................................................................. 14
VRRP preferred master with backup configuration ............................................................................. 14
VRRP circuit failover configuration................................................................................................................. 17
VRRPv2 to VRRPv3 transition configuration ............................................................................................ 22
Virtual Router Redundancy Protocol IPv6 (VRRPv3) configuration .......................................... 28
The virtual router uses a special reserved MAC address, which is called the VRRP virtual
MAC. This MAC address is returned by the master router of the virtual router in any ARP
responses relating to the gateway IP address, regardless of which device is acting as the
master router. By using this shared MAC address across routers, host maintain connectivity
with the remote network if a router fails with a backup taking over as master.
Note: If there are PIM-SM routers using VRRP, the Bootstrap Router (BSR) function will not
work properly
The virtual router has a virtual MAC address that is known by all its participating switches or
routers. The virtual MAC address is derived from the virtual router identifier - a user-defined
value from 1 to 255. At the network level, all hosts on the LAN are configured with a
common IP address that is used as the first hop. This IP address is typically owned by the
virtual router’s preferred individual switch or router. When available, this device performs the
duties of the virtual router, and is referred to as the master. The switch that owns the IP
address associated with the virtual router is referred to as the preferred master. When a
virtual router is configured so that none of the participating switches owns the IP address,
the virtual router has no preferred master.
When a switch takes the role of master for a virtual router, it is responsible for the following:
Responding to ARP and Neighbor solicitation packets that contain IP addresses associated
with the virtual router. The ARP reply or Neighbor response contains the virtual MAC
address of the virtual router so that the hosts on the LAN associate the virtual MAC
address with their configured first-hop IP address. Note that withVRRPv3 supporting both
IPv4 and IPv6, the IP address in this context can be an IPv4 or an IPv6 address.
Forwarding packets with a destination link layer MAC address equal to the virtual router
MAC address.
The VRRPv3 accept mode is enabled by default in the AlliedWare Plus VRRPv3
implementation. This enables a VRRP master to accept packets addressed to the virtual
router IP address even if this IP address is not owned by the VRRP master.
Broadcasting advertisement packets at regular intervals (at the specified advertisement
interval) to inform backup switches that it is still acting as the master switch.
Each of the other switches participating in the virtual router is considered to be a backup
switch.
A switch can be a member of several different virtual routers on one LAN, but each virtual
router must have a unique identifier (VRID). When a switch has the role of backup for a
virtual router, it must be able to perform the following tasks:
Receive advertisement packets from the master and check that the information contained
in them is consistent with their own configuration; ignoring and discarding advertisement
packets that do not match.
Assume the role of master for the virtual router if an advertisement packet is not received
for a given period (the master-down time), based on the specified advertisement interval
(for example, the command: awplus(config-router)# advertisement-interval 5 will set
the advertisement-interval to 5 seconds). The master-down time is approximately three
times the advertisement interval.
Assume the role of master if it receives an advertisement packet from another switch with
a lower priority than its own, and if preempt mode is on.
If a VRRP instance is running on a VLAN interface and the VLAN interface goes down, then
the VRRP instance, whether it is a VRRP master or a VRRP backup, moves to an INIT state.
When in the INIT state the VRRP instance on the VLAN interface cannot receive traffic, and
will not be active until the VLAN interface is up
Note: When using VRRPv3 with VCStacking, ensure that the VRRPv3 advertisement-interval
is configured to a longer time than the VCStacking failover time. If the VRRPv3
advertisement-interval is shorter than the VCStacking failover time, then a VRRPv3
failover will also occur whenever a VCStacking failover occurs. Use seconds not
centiseconds to ensure interoperability with VRRPv2.
To enable VRRP
awplus(config)#
router vrrp 1 vlan2 Create a new VRRP session on the router, specify the
virtual router ID (VRID) for the session, and specify
the interface (vlan2) that will participate in virtual
routing.
awplus(config-router)#
enable Enable the VRRP session on the switch.
awplus(config-router)#
exit Return to the Global Configuration mode.
awplus(config)# Global Configuration mode prompt.
To disable VRRP
awplus(config)#
router vrrp 1 vlan2 Specify an existing VRRP session, specify the virtual
router ID (VRID) for the session, and specify the
interface (vlan2) that will participate in virtual routing.
awplus(config-router)#
disable Disable the VRRP session on the switch.
awplus(config-router)#
exit Return to the Global Configuration mode.
awplus(config)# Global Configuration mode prompt.
A virtual router must be defined on at least two switches before it operates correctly. Use
the following steps to configure virtual routing on a switch. Note that this example assumes
that VLAN 2 already exists on the switch.
awplus#
configure terminal Enter the Global Configuration mode.
awplus(config)#
router vrrp 1 vlan2 Create a new VRRP session on the router, specify the
VRID for the session, and specify the interface (vlan2)
that will participate in virtual routing.
awplus(config-router)#
virtual-ip 10.10.10.50 Set the virtual IP address for the VRRP session. Define
master the default state (master or backup) of the VRRP
router within the virtual router. This sets the default
master priority value of 255 without needing to issue a
priority command separately.
awplus(config-router)#
enable Enable the VRRP session on the switch.
awplus(config-router)#
exit Return to the Global Configuration mode.
awplus(config)# Global Configuration mode prompt.
To destroy a virtual router on the LAN, it must be removed from all participating switches.
Use the following commands to remove a virtual router so that the switch no longer
participates in virtual routing.
awplus#
configure terminal Enter the Global Configuration mode.
awplus(config)#
no router vrrp 1 vlan2 Remove the VRRP session on the switch for the
specified interface vlan2.
awplus(config-router)#
exit Return to the Global Configuration mode.
awplus(config)# Global Configuration mode prompt.
Alternatively, you can simply disable the virtual router and retain the configuration.
awplus#
configure terminal Enter the Global Configuration mode.
awplus(config)#
router vrrp 1 vlan2 Select the VRRP session on the switch, specify
the VRID for the session, and specify the
interface (vlan2) used for virtual routing.
awplus(config-router)#
disable Disable the VRRP session on the switch.
awplus(config-router)#
exit Return to the Global Configuration mode.
awplus(config)# Global Configuration prompt.
By default, when a switch becomes available that has a higher priority than the master, this
switch takes over as master. This is referred to as preempt mode and can be set on or off.
Even with preempt mode off, the switch that owns the IP address always becomes the
master when available. Preempt mode should be the same for all switches in the virtual
router.
If two switches are configured with the same priority and a conflict occurs when they both
transition to master simultaneously, the one with the highest IP address has higher priority.
Due to timing differences the conflict may not always occur and simply the first switch to
respond will become the master.
Hosts on the LAN can continue sending packets to the virtual MAC address they originally
associated with the first hop IP address, even though the switch that owns the IP address is
not currently available. When the original switch becomes available again, and if it is a
preferred switch (i.e. it owns the virtual router IP address) then it resumes the role of master.
Use the following commands to set the priority and preempt mode when you create the
virtual router:
awplus#
configure terminal Enter the Global Configuration mode.
awplus(config)#
router vrrp 1 vlan2 Select the VRRP session on the switch, specify
the VRID for the session, and specify the
interface (vlan2) used for virtual routing.
awplus(config-router)#
priority 255 Set the VRRP priority for the switch
awplus(config-router)#
preempt-mode true Select the preempt mode for VRRP 1. Note
only select preempt mode to true if this has
been set to false. Preempt is true by default.
awplus(config-router)#
enable Enable the VRRP session on the switch.
awplus(config-router)#
exit Return to the Global Configuration mode.
awplus(config)# Global Configuration prompt
The advertisement interval determines the rate at which the master sends its advertisement
packets. This rate must be the same value for all switches in the virtual router. The default
advertisement interval of 1second can be used for most networks. However, you can modify
this interval by using the advertisement-interval command, as shown in the following
procedure:
awplus#
configure terminal Enter the Global Configuration mode.
awplus(config#
router vrrp 1 vlan2 Select the VRRP session on the switch, specify
the VRID for the session, and specify the
interface (vlan2) used for virtual routing.
awplus(config-router)#
advertisement-interval 5 Set the advertisement interval to 5 seconds.
To enable VRRP
awplus(config)#
router ipv6 vrrp 1 Create a newVRRP session on the router, specify the
vlan2 virtual router ID (VRID) for the session, and specify
the interface (vlan2) that will participate in virtual
routing.
awplus(config-router)#
enable Enable the VRRP session on the switch.
awplus(config-router)#
exit Return to the Global Configuration mode.
awplus(config)# Global Configuration mode prompt.
To disable VRRP
awplus(config)#
router ipv6 vrrp 1 Specify an existing VRRP session, specify the virtual
vlan2 router ID (VRID) for the session, and specify the
interface (vlan2) that will participate in virtual routing.
awplus(config-router)#
disable Disable the VRRP session on the switch.
awplus(config-router)#
exit Return to the Global Configuration mode.
awplus(config)# Global Configuration mode prompt.
A virtual router must be defined on at least two switches before it operates correctly. Use
the following steps to configure virtual routing on a switch. Note that this example assumes
that VLAN 2 already exists on the switch.
awplus#
configure terminal Enter the Global Configuration mode.
awplus(config)#
router ipv6 vrrp 1 Create a newVRRP session on the router, specify the
vlan2 VRID for the session, and specify the interface (vlan2)
that will participate in virtual routing.
awplus(config-router)#
virtual-ipv6 fe80::1 Set the virtual IP address for the VRRP session.
master Define the default state (master or backup) of the
VRRP router within the virtual router. This sets the
default master priority value of 255 without needing
to issue a priority command separately.
Note that fe80::1 is an IPv6 link-local address. The
AlliedWare Plus VRRPv3 implementation supports
one IPv6 virtual link local address per virtual router
ID.
See the Usage note for the virtual-ipv6 command
for implementation information about link-local
addresses in AlliedWare Plus.
awplus(config-router)#
enable Enable the VRRP session on the switch.
awplus(config-router)#
exit Return to the Global Configuration mode.
awplus(config)# Global Configuration mode prompt.
To destroy a virtual router on the LAN, it must be removed from all participating switches.
Use the following commands to remove a virtual router so that the switch no longer
participates in virtual routing.
awplus#
configure terminal Enter the Global Configuration mode.
awplus(config)#
no router ipv6 vrrp 1 Remove the VRRP session on the switch for the
vlan2 specified interface vlan2.
awplus(config-router)#
exit Return to the Global Configuration mode.
awplus(config)# Global Configuration mode prompt.
Alternatively, you can simply disable the virtual router and retain the configuration.
By default, when a switch becomes available that has a higher priority than the master, this
switch takes over as master. This is referred to as preempt mode and can be set on or off.
Even with preempt mode off, the switch that owns the IP address always becomes the
master when available. Preempt mode should be the same for all switches in the virtual
router.
If two switches are configured with the same priority and a conflict occurs when they both
transition to master simultaneously, the one with the highest IP address has higher priority.
Due to timing differences the conflict may not always occur and simply the first switch to
respond will become the master.
Hosts on the LAN can continue sending packets to the virtual MAC address they originally
associated with the first hop IP address, even though the switch that owns the IP address is
not currently available. When the original switch becomes available again, and if it is a
preferred switch (i.e. it owns the virtual router IP address) then it resumes the role of master.
Use the following commands to set the priority and preempt mode when you create the
virtual router:
awplus#
configure terminal Enter the Global Configuration mode.
awplus(config)#
router ipv6 vrrp 1 vlan2 Select the VRRP session on the switch, specify
the VRID for the session, and specify the
interface (vlan2) used for virtual routing.
awplus(config-router)#
priority 255 Set the VRRP priority for the switch
awplus(config-router)#
preempt-mode true Select the preempt mode for VRRP 1. Note
only select preempt mode to true if this has
been set to false. Preempt is true by default.
awplus(config-router)#
enable Enable the VRRP session on the switch.
awplus(config-router)#
exit Return to the Global Configuration mode.
awplus(config)# Global Configuration prompt
The advertisement interval determines the rate at which the master sends its advertisement
packets. This rate must be the same value for all switches in the virtual router. The default
advertisement interval of 1second can be used for most networks. However, you can modify
this interval by using the advertisement-interval command, as shown in the following
procedure:
awplus#
configure terminal Enter the Global Configuration mode.
awplus(config#
router ipv6 vrrp 1 vlan2 Select the VRRP session on the switch, specify
the VRID for the session, and specify the
interface (vlan2) used for virtual routing.
awplus(config-router)#
advertisement-interval 5 Set the advertisement interval to 5 seconds.
VRRP Debugging
VRRP debugging displays data that is useful for troubleshooting. To enable or disable
debugging use the following commands:
awplus#
configure terminal Enter the Global Configuration mode.
awplus(config)#
debug vrrp [all|events| Enable the selected debugging type.
packet]
awplus(config)#
no debug vrrp [all| Disable the selected debugging type.
events|packet]
It is important that all switches involved in a virtual router are configured with the same
values for the following:
VRRP virtual router identifier
IP address
advertisement interval
preempt mode
authentication type
password
Inconsistent configuration causes advertisement packets to be rejected and the virtual router
cannot perform properly.
Internet
Virtual Router
Switch_A Switch_B
(Master) (Backup)
Switch_A owns the IP address of the virtual router, and always assumes the role of master
whenever it is available. Switch_B is the backup, and assumes the role of master, backing up
this IP address if A becomes unavailable.
At this point we assume that you have already created VLAN 2 on Switch_A.
At this point we assume that you have already created VLAN 2 on Switch_B.
The need for VRRP Circuit Failover arose because VRRPv2 was unable to track the gateway
interface status. The AlliedWare Plus VRRP Circuit Failover feature provides a dynamic
failover of an entire circuit in the event that one of the members of the group fails.
This introduces the concept of a circuit, where two or more Virtual Routers on a single
system are grouped. In the event of a failure occurring a Virtual Router performs the Master
to Backup transition and notifies the other Virtual Routers. These are then forced into the
Master to Backup transition, so that both incoming and outgoing packets are routed through
the same gateway router, eliminating the problem for NAT environments.
To configure VRRP Circuit Failover, each circuit is configured to have a corresponding priority
delta value, which is passed to VRRP when a failure occurs. The priority of each Virtual
Router on the circuit is decremented by the priority delta value, which causes the Virtual
Router Master to Virtual Router Backup transition. In this example, two switches Switch_A
and Switch_B are configured as backup routers with different priorities. The priority delta
value is configured to be greater that the difference of both the priorities.
Switch_A Switch_B
VLAN 2 VLAN 2
goes down is link up
Virtual Router
Switch_A Switch_B
(Master) (Backup)
VLAN 3
On Switch_A, when vlan2 fails, the priority of Switch_A becomes 80 (100 minus 20). Since
Switch_B has a greater priority (90) than Switch_A, Switch_B becomes the Virtual Router
Master, and routing of packets continues without interruption. When this Virtual Router
Backup (Switch_A) is up again, it regains its original priority (100), and becomes the Virtual
Router Master again.
Switch_A(config-router)#
Set preempt mode to true to specify that the
preempt-mode true
highest priority will own the virtual IP address
when there is a failure and will function as the
Backup Virtual Router.
Switch_B(config-router)#
Configure the default value for the
advertisement-interval 5
advertisement interval. The configurable range
for the advertisement interval is 1-10.
Switch_A(config-router)#
Configure circuit failover to 20 on Switch_A.
circuit-failover vlan2 20
This configures a priority delta value, greater
than the difference of priorities on master and
backup routers.
This priority delta value is subtracted from the
current VR Master Router priority value.
Switch_A(config-router)#
Enable the VRRP session on the router.
enable
Switch_A(config-router)#
Exit the Router Configuration mode and enter
exit
the Global Configuration mode.
Switch_A(config)#
Exit the Global Configuration mode and enter
exit
the Privileged Exec mode.
Switch_A# Privileged Exec mode prompt.
Switch_A#
Copy the contents of the running-configuration
copy running-config
startup-config to the startup-configuration.
At this point we assume that you have already created VLAN2 on Switch_B.
Switch_B(config-router)#
Configure the default value for the advertisement
advertisement-interval
5 interval.The configurable range for the advertisement
interval is 1-10.
Switch_B(config-router)#
Enable the VRRP session on the router.
enable
Switch_A(config-router)#
Exit the Router Configuration mode and enter the
exit
Global Configuration mode.
Switch_A(config)#
Exit the Global Configuration mode and enter the
exit
Privileged Exec mode.
Switch_A# Privileged Exec mode prompt.
Switch_A#
Copy the contents of the running-configuration to the
copy running-config
startup-config startup-configuration.
Transition mode allows interoperability for IPv4 VRRP instances between VRRPv2 and
VRRPv3 virtual routers. RFC 5798 for VRRPv3 allows a VRRPv3 virtual router to send both
VRRPv2 and VRRPv3 advertisements. Note that this feature is only for IPv4 interoperability.
Note that when transition-mode is set to true then VRRPv3 will also accept and process
VRRPv2 advertisement packets received should there be a VRRPv2 master on the network.
You should upgrade your VRRPv2 virtual routers to VRRPv3 as a long term solution and only
use transition mode for a staged VRRPv2 to VRRPv3 roll out. Transition mode is disabled by
default and is enabled by issuing the transition-mode true command.
Note that you should ensure that the advertisement interval for a VRRPv2 instance is
configured to greater than 1 second (100 centiseconds). If the advertisement interval is
configured to less than 1 second (100 centiseconds) then ensure the VRRPv2 virtual router
has a lower priority with the priority command than the VRRPv2/VRRPv3 virtual router.
When you configure a VRRPv3 instance with transition-mode true also configure it as the
VRRP master instance, either by configuring it to own the IP address or with a high priority.
Also configure the advertisement interval to whole seconds to maintain compatibility with
VRRPv2 hosts. All matching VRRP instances should be configured with the same
advertisement interval to eliminate master instance contention on VRRP startup as well.
VRRPv2 VRRPv2
Virtual Router
Switch_A Switch_B
(Backup VR ID 1) (Master VR ID 1)
(Master VR ID 2) (Backup VR ID 2)
VLAN 3
Follow the steps listed below to disable VRRPv2 on Switch_A before saving the running and
startup configurations then rebooting Switch_A to upgrade to VRRPv3.
Note that after upgrading Switch_A to VRRPv3 you can leave Switch_B running VRRPv2, or
you can upgrade Switch_B to VRRPv3. Running VRRPv3 on both is highly recommended.
The above illustration shows both Switch_A and Switch_B running VRRPv2 to upgrade.
Follow Step 1 to upgrade Switch_A from VRRPv2 to VRRPv3 and follow Step 2 to upgrade
Switch_B from VRRPv2 to VRRPv3. You can follow Step 1 only if Switch_B is not upgraded.
Only Switch_A needs transition-mode enabled to upgrade then disabled after upgrading.
At this point we assume that you have already copied the current release of AlliedWare Plus
with VRRPv3 to flash and only need to make this release the boot version and restart. We
also assume that you have already created VLAN 3 on Switch_B.
Switch_A#
Enter the Global Configuration mode for Switch_A.
configure terminal
Switch_A(config)#
Select the VRRPv2 backup session on the router,
router vrrp 1 vlan3
specify the VRID for the session (1), and specify the
interface (vlan3).
Switch_A(config-router)#
Disable the VRRPv2 backup on Switch_A.
disable
Switch_A(config-router)#
Exit the Router Configuration mode and enter the
exit
Global Configuration mode.
Switch_A(config)#
Select the VRRPv2 master session on the router,
router vrrp 2 vlan3
specify the VRID for the session (2), and specify the
interface (vlan3).
Switch_A(config-router)#
Disable the VRRPv2 master on Switch_A.
disable
Switch_A(config-router)#
Exit the Router Configuration mode and enter the
exit
Global Configuration mode.
Switch_A(config)#
Exit the Global Configuration mode and enter the
exit
Privileged Exec mode.
Switch_A#
Copy the contents of the running-configuration to
copy running-config
startup-config the startup-configuration.
Switch_A#
Enter the Global Configuration mode.
configure terminal
Switch_A(config)#
Restart Switch_A to load the AlliedWare Plus release
reload
with VRRPv3 as configured with the boot system
command earlier.
Switch_A(config)#
Enter Router Configuration mode for the backup
router vrrp 1 vlan3
VRRPv3 session on the router, specifying the VRID for
the session (1), and specifying the interface (vlan3).
Switch_A(config-router)#
Set transition mode to true to turn on transition mode
transition-mode true
enabling VRRPv2 and VRRPv3 advertisement on
VRRPv3.
Switch_A(config-router)#
Enable the VRRPv3 backup on Switch_A.
enable
Switch_A(config)#
Create a VRRPv3 master session on the router, specify
router vrrp 2 vlan3
the VRID for the session (2), and specify the interface
(vlan3).
Switch_A(config-router)#
Set transition mode to true to turn on transition mode
transition-mode true
enabling VRRPv2 and VRRPv3 advertisement on
VRRPv3.
Switch_A(config-router)#
Enable the VRRPv3 master on Switch_A.
enable
Switch_A(config-router)#
Exit the Router Configuration mode and enter the
exit
Global Configuration mode.
Switch_A(config)#
Exit the Global Configuration mode and enter the
exit
Privileged Exec mode.
Switch_A#
Copy the contents of the running-configuration to the
copy running-config
startup-config startup-configuration.
VRRPv3 VRRPv2
Virtual Router
Switch_A Switch_B
(Backup VR ID 1) (Master VR ID 1)
(Master VR ID 2) (Backup VR ID 2)
VLAN 3
The above illustration shows Switch_A running VRRPv3 and Switch_B running VRRPv2.
Note that Switch_A running VRRPv3 with transition-mode true configured sends both
VRRPv3 and VRRPv2 advertisements. This is an interim solution for IPv4 VRRPv2 and
VRRPv3 interoperability. Only VRRPv3 should be used on both devices for IPv6 use.
At this point we assume that you have already copied the current release of AlliedWare Plus
with VRRPv3 to flash and only need to make this release the boot version and restart. We
also assume that you have already created VLAN 3 on Switch_B.
Switch_B#
Enter the Global Configuration mode for Switch_B.
configure terminal
Switch_B(config)#
Select the VRRPv2 master session on the router, specify
router vrrp 1 vlan3
the VRID for the session (1), and specify the interface
(vlan3).
Switch_B(config-router)#
Disable the VRRPv2 master on Switch_B.
disable
Switch_B(config-router)#
Exit the Router Configuration mode and enter the Global
exit
Configuration mode.
Switch_B(config)#
Select the VRRPv2 backup session on the router, specify
router vrrp 2 vlan3
the VRID for the session (2), and specify the interface
(vlan3).
Switch_B(config-router)#
Disable the VRRPv2 backup on Switch_B.
disable
Switch_B(config-router)#
Exit the Router Configuration mode and enter the Global
exit
Configuration mode.
Switch_B(config)#
Exit the Global Configuration mode and enter the
exit
Privileged Exec mode.
Switch_B#
Copy the contents of the running-configuration to the
copy running-config
startup-config startup-configuration.
Switch_B#
Enter the Global Configuration mode.
configure terminal
Switch_B(config)#
Restart Switch_A to load the AlliedWare Plus release
reload
with VRRPv3 as configured with the boot system
command earlier.
Switch_B(config)#
Enter Router Configuration mode for the masterVRRPv3
router vrrp 1 vlan3
session on the router, specifying the VRID for the session
(1), and specifying the interface (vlan3).
Switch_B(config-router)#
Enable the VRRPv3 master on Switch_B.
enable
Switch_B(config-router)#
Exit the Router Configuration mode and enter the Global
exit
Configuration mode.
Switch_B(config)#
Enter Router Configuration mode for the backupVRRPv3
router vrrp 2 vlan3
session on the router, specifying the VRID for the session
(2), and specifying the interface (vlan3).
Switch_B(config-router)#
Enable the VRRPv3 backup on Switch_B.
enable
Switch_B(config-router)#
Exit the Router Configuration mode and enter the Global
exit
Configuration mode.
Switch_B(config)#
Exit the Global Configuration mode and enter the
exit
Privileged Exec mode.
Switch_B#
Copy the contents of the running-configuration to the
copy running-config
startup-config startup-configuration.
VRRPv3 VRRPv3
Virtual Router
Switch_A Switch_B
(Backup VR ID 1) (Master VR ID 1)
(Master VR ID 2) (Backup VR ID 2)
VLAN 3
The above illustration shows both Switch_A and Switch_B running VRRPv3. Note that
transition mode should be turned off Switch_A once VRRPv3 is active on both to stop
Switch_A from continuing to send VRRPv2 and VRRPv3 advertisements to Switch_B.
Switch_A#
Enter the Global Configuration mode for Switch_A.
configure terminal
Switch_A(config)#
Enter Router Configuration mode for the backup
router vrrp 1 vlan3
VRRPv3 session on the router, specifying theVRID for
the session (1), and specifying the interface (vlan3).
Switch_A(config-router)#
Set transition mode to false to turn off transition
transition-mode false
mode now VRRPv3 is on Switch_A and Switch_B.
Switch_A(config-router)#
Exit the Router Configuration mode and enter the
exit
Global Configuration mode.
Switch_A(config)#
Enter Router Configuration mode for the master
router vrrp 2 vlan3
VRRPv3 session on the router, specifying theVRID for
the session (2), and specifying the interface (vlan3).
Switch_A(config-router)#
Set transition mode to false to turn off transition
transition-mode false
mode now VRRPv3 is on Switch_A and Switch_B.
VRRPv3 eliminates the risk of a single point of failure inherent in a static default routing
environment. VRRPv3 specifies an election protocol that dynamically assigns responsibility for
a virtual router to one of the devices configured with VRRPv3 on a LAN.
VRRRv3 only allows Master/Non-Owner setup. You can configure the priority of the routers.
Router with the higher priority takes the role of master.
In this example, VRRPv3 is enabled on Switch_A, the Backup Virtual Router, and on
Switch_B, the Backup Virtual Router. In Switch_A, the static routes are redistributed.
Host A
vlan2 Network 1
Virtual Router
Switch_A Switch_B
(Backup) (Backup)
vlan3 Network 2
Switch_C VRRPv6
Switch_A owns the IP address of the virtual router, and assumes the role of master because
it is configured with a higher priority. Switch_B is the backup, and assumes the role of master,
backing up this IP address if A becomes unavailable. No authentication is used for this simple
virtual router.
See the sample output following the sample command configuration tables for each device.
See relevant VRRP show commands that are useful to validate configurations.
The AlliedWare Plus VRRPv3 implementation supports one IPv6 virtual link local address per
virtual router ID. Note that in the command examples, fe80::1 is an IPv6 link-local address.
An IPv6 link-local address is used because IPv6 link-local addresses are used by IPv6 ND
(Neighbor Discovery). A host’s default route to a router points to the IPv6 link-local address,
not a specific global IPv6 address for the router. For the host’s traffic to switch over a backup
router, the IPv6 link-local address of the router is used by VRRPv3.
At this point we assume that you have already created VLAN 2 and VLAN 3 on Switch_A.
Switch_A(config-router)#
Configure the default value for the
advertisement-interval 5
advertisement interval. The configurable range
for the advertisement interval is 1-10.
Switch_A(config-router)#
Configure the default priority value of 255
priority 255
when the device is the Master Virtual Router.
Switch_A(config-router)#
Set the preempt-mode to true for Switch_A.
preempt-mode true
The default preempt mode ensures that the
highest priority switch available always takes the
master role.
Switch_A(config-router)#
Enable the VRRPv3 session on Switch_A.
enable
Switch_A(config-router)#
Exit the Router Configuration mode and enter
exit
the Global Configuration mode.
Switch_A(config)#
Return to Privileged Exec mode.
exit
Switch_A#
Copy the running-config to the startup-config
copy running-config
startup-config to enable this configuration to execute after
restarting Switch_A.
At this point we assume that you have already created VLAN 2 and VLAN 3 on Switch_B.
Switch_B(config-router)#
Configure the default value for the
advertisement-interval 5
advertisement interval. The configurable range
for the advertisement interval is 1-10.
Switch_B(config-router)#
Configure the priority value of 100 when the
priority 100
device is the Backup Virtual Router.
Switch_B(config-router)#
Set the preempt-mode to true for Switch_B.
preempt-mode true
The default preempt mode ensures that the
highest priority switch available always takes
the master role.
Switch_B(config-router)#
Enable the VRRPv3 session on Switch_B.
enable
Switch_B(config-router)#
Exit the Router Configuration mode and enter
exit
the Global Configuration mode.
Switch_B(config)#
Exit the Global Configuration mode and enter
exit
the Privileged Exec mode.
Switch_B#
Copy the running-config to the startup-config
copy running-config
startup-config to enable this configuration to execute after
restarting Switch_B.
At this point we assume that you have already created VLAN 2 and VLAN 3 on Host_A.
Configure an IPv6 address on VLAN 2 and a static IPv6 route to reach Switch_C on VLAN 3
awplus#
configure terminal Enter the Global Configuration mode.
awplus(config)#
hostname Host_A Assign the host name to Host_A.
Host_A(config)#
Specify the interface (vlan2) that will
interface vlan2
participate in virtual routing to first configure
an IP address for vlan2.
Host_A(config-if)#
Specify the IPv6 address and mask for interface
ipv6 address 2001:db8:2::1/
64 vlan2.
Host_A(config-if)#
Return to Global Configuration mode.
exit
Host_A(config)#
Configure an IPv6 static route to reach
ipv6 route 2001:db8::/64
interface vlan3 of Host_A.
Host_A(config)#
Return to Privileged Exec mode.
exit
Host_A#
Copy the running-config to the startup-config
copy running-config
startup-config to enable this configuration to execute after
restarting Host_A.
At this point we assume that you have already created VLAN 2 and VLAN 3 on Switch_B.
awplus#
configure terminal Enter the Global Configuration mode.
awplus(config)#
hostname Switch_C Assign the host name Switch_C.
Switch_C(config)#
Specify the interface (vlan2) that will participate
interface vlan2
in virtual routing to first configure an IP address
for vlan2.
Switch_C(config-if)#
Specify the IPv6 address and mask for interface
ipv6 address 2001:db8:2::4/
64 vlan2.
Switch_C(config-if)#
Return to Global Configuration mode.
exit
Switch_C(config)#
Specify the interface (vlan3) that will participate
interface vlan3
in virtual routing to first configure an IP address
for vlan3.
Switch_C(config-if)#
Specify the IPv6 address and mask for interface
ipv6 address 2001:db8:3::4/
64 vlan3.
Switch_C(config-if)#
Return to Global Configuration mode.
exit
Switch_C(config)#
Return to Privileged Exec mode.
exit
Switch_C#
Copy the running-config to the startup-config
copy running-config
startup-config to enable this configuration to execute after
restarting Switch_C.
Switch_A To display information about the configured VRRPv3 session, to validate configuration as the
Master Virtual Router following the earlier configuration steps, enter the command:
Switch_A# show vrrp ipv6 vlan2
Output Figure 1: Example output from the show vrrp ipv6 vlan2 command on Switch_A
Switch_B To display information about the configured VRRPv3 session, to validate configuration as the
Backup Virtual Router following the earlier configuration steps, enter the command:
Switch_B# show vrrp ipv6 vlan2
Output Figure 2: Example output from the show vrrp ipv6 vlan2 command on Switch_B
Then disable the Master Virtual Router and validate so the Backup Virtual Router takes over:
Switch_A#
Specify the interface (vlan2) that will participate in
configure terminal
virtual routing to first configure an IP address for
vlan2.
Switch_A(config)#
Specify the interface (vlan2) that will participate in
interface vlan2
virtual routing to first configure an IP address for
vlan2.
Switch_A(config)#
Shutdown the interface (vlan2) that participates as
shutdown
the Master Virtual Router on Switch_A. This will
make Switch_B, which is configured as the Backup
Virtual Router, become the Master Virtual Router.
Output Figure 3: Example output from the show vrrp ipv6 vlan2 command on Switch_A
Switch_B To validate Switch_B is the Master Virtual Router after a shutdown on interface vlan2 on
Switch_A, so Switch_B takes over as the Master Virtual Router, enter the command:
Output Figure 4: Example output from the show vrrp ipv6 vlan2 command on Switch_B
C613-22049-00 REV A
North America Headquarters | 19800 North Creek Parkway | Suite 100 | Bothell | WA 98011 | USA | T: +1 800 424 4284 | F: +1 425 481 3895
Asia-Pacific Headquarters | 11 Tai Seng Link | Singapore | 534182 | T: +65 6383 3832 | F: +65 6383 3830
EMEA & CSA Operations | Incheonweg 7 | 1437 EK Rozenburg | The Netherlands | T: +31 20 7950020 | F: +31 20 7950021
alliedtelesis.com
© 2015 Allied Telesis Inc. All rights reserved. Information in this document is subject to change without notice. All company names, logos, and product designs that are trademarks or registered trademarks are the property of their respective owners.