Configuring VRRP Services
BayRS Version 13.10
Site Manager Software Version 7.10
Part No. 304138-A Rev 00
November 1998
4401 Great America Pa rkw ay 8 Federal S treet
Santa Clara, CA 95054 Billerica, MA 01821
Copyright © 1998 Bay Networks, Inc.
All rights reserved. Printed in the USA. November 1998.
The information in this document is subject to change without notice. The statements, configurations, technical data,
and recommendations in this document are believed to be accurate and reliable, but are presented without express or
implied warranty. Users must take full responsibility fo r th eir a pplic a tio ns of any products specified in this document.
The information in this document is proprietary to Bay Networks, Inc.
The software described in this document is furnished under a license agreement and may only be used in accordance
with the terms of that licen se. A summary of the Software License is included in this document.
ACE, AFN, AN, BCN, BLN, BN, BNX, CN, FRE, LN, Optivity, PPX, Quick2Config, and Bay Networks are
registered trademarks and Advanced Remote Node, ANH, ARN, ASN, BayRS, Switch Node, System 5000, and the
Bay Networks logo are trademarks of Bay Network s, Inc.
All other trademarks and registered trademarks are t he property of their respective owners.
Restricted Rights Legend
Use, duplication, or disclosure by the United States Government is subject to restrictions as set forth in subparagraph
(c)(1)(ii) of the Rights in Technical Data and Computer So ftware clause at DFARS 252.227-7013.
Notwithstanding any other license agreement that may pertain to, or accompany the delivery of, this computer
software, the rights of the United States Government regarding its use, reproduction, and disclosure are as set forth in
the Commercial Computer Software-Restricted Rights cl ause at FAR 52.227-19.
Statement of Conditions
In the interest of improving internal design, operational function, and/or reliability, Bay Networks, Inc. reserves the
right to make changes to the pr oducts described in this document without notice.
Bay Networks, Inc. does not assume any liability that may occur du e to the use or application of the product(s) or
circuit layout(s) described herein.
Portions of the code in this software product may be Copyright © 1988, Regents of the University of California. All
rights reserved. Redistribution and use in source and binary forms of such portions are permitted, provided th at the
above copyright notice and this paragraph are duplicated in all such forms and that any documentation, advertising
materials, and other materials related to such distribution and use acknowledge that su ch portions of the software were
developed by the University of California, Berkeley. The name of the University may not be used to endorse or
promote products derived from such portions of the software without specific prior written permission.
SUCH PORTIONS OF THE SOFTWARE ARE PROVIDED “AS IS” AND WITHOUT ANY EXPRESS OR
IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
In addition, the program and information contained herein are licensed only pursuant to a license agreement that
contains restricti ons on use and disclosure (that may incorporate by reference certai n limitations and no tices imposed
by third parties).
Bay Networks, Inc. Software License Agreement
NOTICE: Please carefully read this license agre ement before copying or using the accompanying software or
installing the hardware unit with pre-enabled software (each of which is referred to as “Software” in this Agreement).
BY COPYING OR USING THE SOFTWARE, YOU ACCEPT ALL OF THE TERMS AND CONDITIONS OF
THIS LICENSE AGREEMENT. THE TERMS EXPRESSED IN THIS AGREEMENT ARE THE ONLY TERMS
UNDER WHICH BAY NETWORKS WILL PERMIT YOU TO USE THE SOFTWARE. If you do not accept these
ii
304138-A Rev 00
terms and conditions, return the product, unused and in the original shipping container, within 30 days of purchase to
obtain a credit for the full purchase price.
1. License Grant. Bay Networks, Inc. (“Bay Networks”) grants the end user of the Software (“Licensee”) a personal,
nonexclusive, nontransferable license: a) to use the Software either on a single computer or, if applicable, on a single
authorized device identified by host ID, for which it was originally acquired; b) to copy the Software solely for backup
purposes in support of authorized use of the Software; and c) to use and copy the associated user manual solely i n
support of authorized use of the Software by Licensee. This license applies to the Software only and does not extend
to Bay Networks Agent software or other Bay Networks software pro ducts. Bay Networks Agent software or other
Bay Networks software products are licensed for use under the terms of the applicable Bay Networks, Inc. Software
License Agreement that accomp anies such software and upon payment by the end user of the applicable license fees
for such software.
2. Restrictions on use; reservation of rights. The Software and user manuals are protected under copyright laws.
Bay Networks and/or it s licensors retain all title and ownership in both the Software and user manuals, including any
revisions made by Bay Networks or i ts licensors. The copyr ight notice must be reproduced and included with any
copy of any portion of the Software or user manuals. Licensee may not modify, translate, decompile, disassemble, use
for any competitiv e analysis, re v erse engineer , distrib ute, or create deriv ati ve works from the Softwa re or user manuals
or any copy, in whole or in part. Except as expressly provided in thi s Agreement, Licensee may not copy or transfer
the Software or user manuals, in whole or in part. The Soft ware and user manuals embody Bay Networks’ and its
licensors’ confidential and proprietary intellectual property. Licensee shall not sublicense, assign, or otherwise
disclose to any third party the Software, or any information about the operation, design, performance, or
implementation of the Software and user manuals that is confidential to Bay Networks and its licensors; however,
Licensee may grant permission to its consultants, subcontractors, a nd agents to use the Softw are at Licensee’s facility ,
provided they have agreed to use the Software only in accordance with the terms of this license.
3. Limited warranty. Bay Networks warrants each item of Software, as delivered by Bay Networks and properly
installed and operated on Bay Networks hardware or other equipment it is originally licensed for, to function
substantially as described in its accompanying user m anual during its warranty period , which begins on the date
Software is first shipped to Licensee. If an y item of S oftware f ails to so function d uring its w arranty period, as the sole
remedy Bay Networks will at its discretion provide a suitable fix, patch, or workaround for the problem that may be
included in a future Software release. Bay Network s fur ther w arra nts to Licen see that the medi a on which the
Software is provided will be free from defec ts in materials and wo rkman ship under no rmal use for a peri od of 90 da ys
from the date Software is first shipped to Licensee. Bay Networks will replace defective media at no cha rge if it is
returned to Bay Netw orks during the warran ty perio d alon g with proof of the date of shipment . This war ranty do es not
apply if the media has been dam aged as a resul t of acci dent, misuse , or ab use. The Licen see assumes all re sponsibilit y
for selection of the Software to achieve Licensee’s intended results and for the installation, use, and results obtained
from the Software. Bay Networks does not warrant a) that the functions contained in the software will meet the
Licensee’ s requireme nts, b) that the Software will operate in the hardware or software combinations tha t the L icens ee
may select, c) that the operation of the Softw a re will be uninterru pte d or error free, or d) that all defec ts in the
operation of the Software will be corrected. Bay Networks is not obligated to remedy any Software defect that cannot
be reproduced with the latest Software release. These warranties do not apply to the So ftw are if i t has been (i) altered,
except by Bay Netwo rks or in a ccordance with its instru ction s; (ii) used in con junc tion with another v en dor’s product,
resulting in the defect; or (iii) damaged by improper environment, abuse, misuse, accident, or negligence. THE
FOREGOING WARRANTIES AND LIMITATIONS ARE EXCLUSIVE REMEDIES AND ARE IN LIEU OF ALL
OTHER WARRANTIES EXPRESS OR IMPLIED, INCLUDING W ITHOUT LIMITATION ANY WARRANTY OF
MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Licensee is responsible for the security of
its own data and information and for maintaining adequate procedures apart from the Software to reconstruct los t or
altered files, data, or programs.
4. Limitation of liability. IN NO EVENT WILL BAY NETWORKS OR ITS LICENSORS BE LIABLE FOR ANY
COST OF SUBSTITUTE PROCUREMENT; SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
DAMAGES; OR ANY DAMAGES RESULTING FROM INACCURATE OR LOST DATA OR LOSS OF USE OR
PROFITS ARISING OUT OF OR IN CONNECTION WITH THE PERFORMANCE OF THE SOFTWARE, EVEN
IF BAY NETWORKS HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. IN NO EVENT
304138-A Rev 00
iii
SHALL THE LIABILITY OF BAY NETWORKS RELATING TO THE SOFTWARE OR THIS AGREEMENT
EXCEED THE PRICE PAID TO BAY NETWORKS FOR THE SOFTWARE LICENSE.
5. Government Licensees. This provision applies to all Software and documentation acquired directly or indirectly
by or on behalf of the United States Government. The Software and documentation are commercial products, licensed
on the open market at market prices, and were developed entirely at private expense and without the use of any U.S.
Government funds. The license to the U.S. Government is granted only with restricted rights, and use, duplication, or
disclosure by the U.S. Government is subject to the restrictions set forth in subparagraph (c)(1) of the Commercial
Computer Software––Restricte d Rig hts cla u se o f FAR 52.227-19 and the limita tio ns set o ut in this license for civilian
agencies, and subparagraph (c)(1)(ii) of the Rights in Technical Data and Computer Software clause of DFARS
252.227-7013, for agencies of t he Department of Defense or their successors, whichever is applicable.
6. Use of Software in the European Community. This provision applies to all Software acquired for use within the
European Community. If Licensee uses the Software within a country in the European Community, the Software
Directive enacted by the Council of European Commun ities Directive dated 14 May, 1991, will apply to the
examination of th e Software to facilitate interoperability. Licensee agrees to notify Ba y Networks of any such
intended examination of the Software and may procure support and assistance from Bay Networks.
7. Term and termination. This license is effective until terminated; however, all of the restrictions with respect to
Bay Networks’ copyright in the Software and user manuals will cease being effective at the date of expiration of the
Bay Networks copyright; those restrictions relating to use and disclosure of Bay Networks’ confidential information
shall continue in effect. Licensee may terminate this license at any time. The license will automatically terminate if
Licensee fails to comply with any of the terms and conditions of the license. Upon termination for any reason,
Licensee will immediately destroy or return to Bay Networks the Software, user manuals, and all copies. Bay
Networks is not liable to Licensee for damages in any form solely by reason of the termination of this license.
8. Export and Re-export. Licensee agrees not to export, directly or indirectly, t he S oft ware or re lated technical data
or information without first obtaining any required export licenses or other governmental approvals. Without limiting
the foregoing, Licensee, on behalf of itself and its subsidiaries and affiliates, agrees that it will not, without first
obtaining all export licenses and approvals required by the U.S. Government: (i) export, re-export, transfer, or divert
any such Software or technical data, or any direct product thereof, to any country to which such exports or re-exports
are restricte d or em b argoed under United States ex po r t con t rol laws and re gulations, or to any national or resident of
such restricted or embargoed countries; or (ii) provide the Software or related technical data or information to any
military end user or for any military end use, including the design, development, or production of any chemical,
nuclear, or biological weapons.
9. General. If any provision of this Agreement is held to be invalid or unenf orceable by a court of competent
jurisdiction, the remainder of the provisions of this Agreement shall remain in full force and effect. This Agreement
will be governed by the laws of the state of California.
Should you have any questions concerning this Agreement, contact Bay Networks, Inc., 4401 Great America Parkway,
P.O. Box 58185, Santa Clara, California 95054-8185.
LICENSEE ACKNOWLEDGES THAT LICENSEE HAS READ THIS AGREEMENT, UNDERSTANDS IT, AND
AGREES TO BE BOUND BY ITS TERMS AND CONDITIONS. LICENSEE FURTHER AGREES THAT THIS
AGREEMENT IS THE ENTIRE AND EXCLUSIVE AGREEMENT BETWEEN BAY NETWORKS AND
LICENSEE, WHICH SUPERSEDES ALL PRIOR ORAL AND WRITTEN AGREEMENTS AND
COMMUNICATIONS BETWEEN THE PARTIES PERTAINING TO THE SUBJECT MATTER OF THIS
AGREEMENT. NO DIFFERENT OR ADDITIONAL TERMS WILL BE ENFORCEABLE AGAINST B AY
NETWORKS UNLESS BAY NETWORKS GIVES ITS EXPRESS WRITTEN CONSENT, INCLUDING AN
EXPRESS WAIVER OF THE TERMS OF THIS AGREEMENT.
iv
304138-A Rev 00
Contents
Preface
Before You Begin .............................................................................................................. ix
Text Conventions ...............................................................................................................x
Acronyms ........................... .......................... .......................... ......................... .................. xi
Bay Networks Technical Publications ............................................................................... xi
How to Get Help ...............................................................................................................xii
Chapter 1
VRRP Concepts
About VRRP ... ...... ...... ....... ...... ....... ...... ....... ...... ....................................... ...... ....... ...... ...1 -1
Master Virtual Router .....................................................................................................1-2
Backup Virtual Routers ...................................................................................................1-2
Critical IP Interfaces .......................................................................................................1-2
VRRP Messaging ...........................................................................................................1-2
Planning Your Network ...................................................................................................1-3
Sample Configurations .............................................................................................1-3
Chapter 2
Starting VRRP Services Using Site Manager
Configuring a Virtual Router ...........................................................................................2-1
Chapter 3
Customizing VRRP
Disabling and Reenabling a Virtual Router .. ...... ....................................... ...... ....... ...... ...3- 2
Changing the IP Address Backed Up by a Virtual Router ..............................................3-3
Setting the Priority of the Virtual Router .........................................................................3-4
Setting the Advertisement Interval ..................................................................................3-5
Setting the Critical IP Interface Address .........................................................................3-6
Setting the Token Ring Address .....................................................................................3-7
304138-A Rev 00
v
Appendix A Site Manager Parameters
Add Virtual Router Parameters ...................................................................................... A-1
VRRP Configuration Parameters ................................................................................... A-3
Glossary
Index
vi
304138-A Rev 00
Figures
Figure 1-1. Using VRRP with One Master and One Backup Virtual Router ...............1-3
Figure 1-2. Using VRRP and Perfoming Load-Balancing ...........................................1-4
Figure 1-3. Using VRRP with a Critical IP Interface ...................................................1-5
Figure 1-4. Sample Invalid Virtual Router Configuration ............................................1-6
Figure A-1. Add Virtual Router Window ..................................................................... A-1
Figure A-2. IP VRRP Configuration Parameters Window .......................................... A-3
304138-A Rev 00
vii
This guide describes the Virtual Router Redundancy Protocol (VRRP) and what
you do to start and customize VRRP services on a Bay Networks
Before You Begin
Before using this guide, you must complete the following procedures. For a new
router:
• Install the router (see the installation guide that came with your router).
• Connect the router to the network and create a pilot configuration file (see
Quick-Starti ng Router s , Conf igur ing BaySt ac k Remote Acc ess , or Connecting
ASN Routers to a Network).
Preface
®
router.
304138-A Rev 00
Make sure that you are running the latest version of Bay Networks BayRS
Site Manager software. For information about upgrading BayRS and Site
Manager, see the upgrading guide for your version of BayRS.
™
and
ix
Configuring VRRP Services
Text Conventions
This guide uses the following text conventions:
bold text
Indicates text that you need to enter and command
names and options.
Example: Enter
Example: Use the
show ip {alerts | routes
dinfo
command.
}
brackets ([ ]) Indicate optional elements in syntax descriptions. Do
not type the brackets when entering the command.
Example: If the command syntax is:
show ip interfaces [-alerts
show ip interfaces
or
]
, you can enter either:
show ip interfaces -alerts
.
italic text Indicates file and directory names, new terms, book
titles, and variables in command syntax descriptions.
Where a variable is two or more words, the words are
connected by an underscore.
Example: If the command syntax is:
show at
valid_route
<
valid_route>
is one variable and you substitute one value
for it.
separator ( > ) Shows menu paths.
Example: Protocols > I P ide nti fies the IP option on the
Protocols menu.
vertical line (
) Separates choices for command keywords and
|
arguments. Enter only one of the choices. Do not type
the vertical line when entering the command.
Example: If the command syntax is:
show ip {alerts | routes
show ip alerts
x
or
}
, you enter either:
show ip routes
, but not both.
304138-A Rev 00
Acronyms
IP Internet P rotocol
LAN local area network
MAC media access control
MIB management information base
VRID virtual router ID
VRRP Virtual Router Redundancy Protocol
Bay Networks Technical Publications
You can now print Bay Networks technical manuals and release notes free,
directly from the Internet. Go to support.baynetwork s.com/libr ary/ tpubs/ . Fi nd the
Bay Networks product for which you need documentation. Then locate the
specific category and model or version for your hardware or software product.
Using Adobe Acrobat Re ader, you can open the manuals an d rel ease n otes, searc h
for the sections you need, and print them on most standard printers. You can
download Acrobat Reader free from the Adobe Systems Web site,
www.adobe.com.
Preface
304138-A Rev 00
You can purchase Bay N etworks documentation sets, CDs, and selected technical
publications through the Bay Networks Collateral Catalog. The catalog is located
on the World Wide Web at support.baynetworks.com/catalog.html and is divided
into sections arranged alphabetically:
• The “CD ROMs” section lists available CDs.
• The “Guides/Books” section lists books on technical topics.
• The “Technical Manuals” section lists available printed documentation sets.
Make a note of the part numbers and prices of the items that you want to order.
Use the “Marketing Collateral Catalog description” link to place an order and to
print the order form.
xi
Configuring VRRP Services
How to Get Help
For product assistance, support contracts, or information about educational
services, go to the following URL:
http://www.baynetworks.com/corporate/contacts/
Or telephone the Bay Networks Technical Solutions Center at:
800-2LANWAN
xii
304138-A Rev 00
Chapter 1
VRRP Concepts
This chapter describes VR RP concepts you need to know before you begin
configuring a VRRP router.
Topic Page
About VRRP 1-1
Master Virtual Router 1-2
Backup Virtual Routers 1-2
Critical IP Interfaces 1-2
VRRP Messaging 1-2
Planning Your Network 1-3
About VRRP
The Virtual Router Redundancy Protocol (VRRP), which runs over IP, enables
you to configure router redundancy to protect a network from the irrecoverable
failure of one or more IP interfaces. VRRP manages a virtual router, which is a
software-defined object that corresponds to an IP address on a LAN segment. A
virtual router typica lly exist s on multiple rou ters runnin g VRRP (known as VRRP
routers). One of the VRRP routers acts as the master virtual router for an IP
address, while other VRRP routers act as backup virtual routers.
You identify each virtual router using a virtual router identifier (VRID) and a
virtual router IP address. All VRRP routers on a LAN segment must have the
same VRID and IP address. You can, ho we ver , use a VRID on more than on e LAN
as long as you pair it with a different virtual router IP address. The scope of each
virtual router is restricted to a single LAN.
304138-A Rev 00
1-1
Configuring VRRP Services
Master Virtual Router
The master virtual rou ter is the VRRP rout er respons ible for fo rwar ding the tr af f ic
received at the MAC address associated with the virtual router IP address. A
VRRP router with the highest priority assumes the responsibilities of the master
virtual router. When the master virtual router fails, one of the backup virtual
routers becomes the master virtual router.
Backup Virtual Routers
If the maste r virtual ro uter become s unavailable or if it i s not functioning
normally, VRRP dynamically switches over to one of the backup virtual routers,
in the order of the priority you set.
If more than one backup virtual router has the same priority assigned to it, the
VRRP router with the greater primary IP address will become the new master
virtual router.
Critical IP Interfaces
You can establish a critical IP address, which is a physical IP interface on a local
router , for each vi rtual router. If that critical IP interf ace fai ls, then VRRP switch es
to another virtual router. Figure 1-3 on page 1-5 shows a sample VRRP
configuration using a critical IP interface.
VRRP Messaging
VRRP generates VRRP advertisement messages as IP multicast datagrams,
enabling VRRP to operate over a variety of multiaccess LAN technologies that
support IP multicasting.
1-2
304138-A Rev 00
Planning Your Network
You can use VRRP to target stub networks with hosts having default gateway
addresses to provide redundancy for IP addresses. To avoid a single point of
failure, you should configure the default gateway IP address as the virtual router
IP address on multiple IP interfaces on di fferent physical routers. Refer to the
following sample configurations when determ ining how to configure VRRP in
your network.
Sample Configurations
The configuration in Figure 1-1 shows a simple VRRP scenario in which both
router A and router B are running VRRP. The end hosts install a default route to
the IP address of router A, which serves as the master virtual router for virtual
router 1. If router A fails, then router B becomes the master virtual router for
virtual router 1.
VRRP Concepts
IP Address
1.1.1.1
Router A
(running VRRP)
Virtual router 1
Master virtual
router for 1.1.1.1
IP Address
2.2.2.2
Router B
(running VRRP)
Virtual router 1
Backup virtual
router for 1.1.1.1
DG=1.1.1.1
Host
1
DG=1.1.1.1 DG=1.1.1.1 DG=1.1.1.1
Host
2
Host
3
Host
Key
DG=Default gateway
Figure 1-1. Using VRRP with One Master and One Backup Virtual Router
4
VR0001A
304138-A Rev 00
1-3
Configuring VRRP Services
The configuration in Figure 1-2 shows that half of the hosts install a default route
to VRRP router A’ s IP addre ss (1.1.1.1), and the othe r half install a def ault route to
VRRP router B’s IP address (2.2.2.2). Using two different default routes has the
effect o f l oad- b a lan cing the outgoing traff ic, while also providing full re dundancy.
Router A
(running VRRP)
Virtual router 1
Master virtual
router for 1.1.1.1
Virtual router 2
Backup virtual
router for 2.2.2.2
IP address
1.1.1.1
Key
DG=Default gateway
IP address
2.2.2.2
Router B
(running VRRP)
Virtual router 1
Backup virtual
router for 1.1.1.1
Virtual Router 2
Master rirtual
router for 2.2.2.2
DG=1.1.1.1
Host
1
DG=1.1.1.1 DG=2.2.2.2 DG=2.2.2.2
Host
2
Host
3
Host
4
VR0002A
1-4
Figure 1-2. Using VRRP and Perf oming Load-Balancing
304138-A Rev 00
VRRP Concepts
The configuration in Figure 1-3 shows that IP address 1.1.1.1 provides
connectivity to external networks. If that connection fails and the virtual router 1
on router B continues to forward traffic, you still lose connectivity to external
networks. However, if you designate IP address 1.1.1.1 as the critical IP address
for virtual router 1 on router B, and IP address 1.1.1.1 fails, then virtual router 1
on router A becomes the master virtual router and begins forwarding traffic.
200.200.200.2
Router C
1.1.1.22.2.2.2
Host
1.1.1.12.2.2
132.128.128.30
CRIP: 1.1.1.1
Router B
Virtual router 1
VRIP 132.128.128.30
VRID = 1
Priority 255
Continuous ping:
200.200.200.2
Router A
Virtual router 1
VRIP 132.128.128.30
VRID = 1
Priority 50
132.128.128.10
VRIP: 132.128.128.30
DG: 132.128.128.128.30
Key
DG=Default gateway
CRIP=Critical IP interface address
VRIP=Virtual router IP address
VRID=Virtual router ID
Figure 1-3. Using VRRP with a Critical IP Interface
VR0003A
304138-A Rev 00
1-5
Configuring VRRP Services
Figure 1-4 shows an invalid VRRP configuration; that is, the virtual router with
primary IP address 1.1.1.1 is not configured on a VRRP router that has a physical
interface with IP address 1.1.1.1. You must always configure a virtual router
whose IP address physic all y exists on the LAN. For example, you must conf igu re
virtual router 1 on router A, because the IP address of virtual router 1 is the same
as the physical address of router A.
Router B Router CRouter A
Virtual router 1
VRIP 1.1.1.1
VRID 1
Priority 100
1.1.1.1 1.1.1.2 1.1.1.3
1.1.1.4, DG=1.1.1.1
Host
Virtual Router 1
VRIP 1.r.1.1
VRID 1
Priority 50
Key
DG=Default gateway
VRIP=Virtual router IP address
VRID=Virtual router ID
Figure 1-4. Sample Invalid Virtual Router Configuration
VR0004A
1-6
304138-A Rev 00
Starting VRRP Services Using Site Manager
You must configure IP services on a router before you can configure VRRP. See
Configuring IP Services for information about how to configure IP.
You can create a basic virtual router configuration by supplying only the required
configuration information and accepting the d efault values for al l other Site
Manager parameters.
Configuring a Virtual Router
Chapter 2
304138-A Rev 00
When configuring a virtual router, you must supply the following:
• Primary IP address
The primary IP address associates a virtual router with the IP address of the
physical interface. You cannot change the primary IP address after you
configure a vi rtua l route r. If this primary IP addres s matches the vir tual r outer
IP address and the virtual router has the highest priority of 255, then this
VRRP router becomes the master virtual router, if it is available.
Caution:
router on an ANH
You should not configure an Ethernet interface as the master virtual
™
router.
2-1
Configuring VRRP Services
• Virtual router ID
The virtual router ID (VRID) identifies the virtual router. VRRP uses the
virtual router ID to calculate the virtual router’s virtual MAC address. If the
virtual router is in the primary virtual router state, it responds to all ARP
requests using the IP address of the virtual router with it s virtual MAC
address, not its physical MAC address. You cannot change the virtual router
ID after you configure a virtual router.
• Virtual router IP address
The virtua l router IP address identifies the IP address that the virtual ro uter
backs up.
To configure a virtual router, complete the following tasks:
Caution: If you are configuring virtual routers on the IP interface used as the
Site Manager management console, you should not add or modify a backup
virtual router be fore you c reate a master vi rtual route r. Otherwise, you can lose
connectivity to the router when dynamically configuring virtual routers. Use
local or remote mode when configuring a virtual router.
2-2
Site Manager Procedure
You do this System responds
1. In the Configuration Manager window,
choose
2. Choose IP. The IP menu opens.
3. Choose
4. Click on
5. Set the following parameters:
• Primary IP Address
• Virtual Router ID
• Virtual Router IP Address
Click on
descriptions starting on page A-2.
6. Click on OK. You return to the Configuration Manager
Protocols
VRRP
Add
Help
.
. The IP VRRP Configuration Parameters
. The Add Virtual Router window opens.
or see the param eter
The Protocols menu opens.
window opens.
window.
304138-A Rev 00
Chapter 3
Customizing VRRP
To customize VRRP, use the information in the following sections
Topic Page
Disabling and Reenabling a Virtual Router 3-2
Changing the IP Address Backed Up by a Virtual Router 3-3
Setting the Priority of the Virtual Router 3-4
Setting the Advertisement Interval 3-5
Setting the Critical IP Interface Address 3-6
Setting the Token Ring Address 3-7
304138-A Rev 00
Caution:
If you are configuring virtual routers on the IP interface used as the
Site Manager management console, you should not add or modify a backup
virtual router be fore you c reate a master vi rtual route r. Otherwise, you can lose
connectivity to the router when dynamically configuring virtual routers. Use
local or remote mode when configuring a virtual router.
3-1
Configuring VRRP Services
Disabling and Reenabling a Vi rtual Rou ter
When you first configure a virtual router, by default Site Manager enables that
virtual router. To disable or reenable a vi rt ual router, complete the fol lowing tasks:
Site Manager Procedure
You do this System responds
1. In the Configuration Manager window,
choose
2. Choose IP. The IP menu opens.
3. Choose
4. Click on a virtual router instance ID to
highlight it in the list of virtual routers.
5. Set the
or see the pa rameter description on
page A-3.
6. Click on
7. Click on
Protocols
VRRP
Enable
Apply
Done
.
. The IP VRRP Configuration Parameters
parameter . Click on
.
. You return to the Configuration Manager
Help
The Protocols menu opens.
window opens.
The configuration that pertains to the
highlighted virtual router appears.
window.
3-2
304138-A Rev 00
Customizing VRRP
Changing the IP Address Backed Up by a Virtual Router
When you first configure a virtual router, you must supply an IP address that the
virtual router back s up. This IP addres s must be on the same subnet as the pri mary
IP address .
To change the IP address to be backed up by a virtual router, complete the
following tasks:
Site Manager Procedure
You do this System responds
1. In the Configuration Manager window,
choose
2. Choose IP. The IP menu opens.
3. Choose
4. Click on a virtual router instance ID to
highlight it in the list of virtual routers.
5. Set the
parameter. Click on
parameter descriptions starting on
page A-4.
6. Click on
7. Click on
Protocols
VRRP
Virtual Router IP Address
Apply
Done
.
. The IP VRRP Configuration Parameters
Help
or see the
.
. You return to the Configuration Manager
The Protocols menu opens.
window opens.
The configuration that pertains to the
highlighted virtual router appears.
window.
304138-A Rev 00
3-3
Configuring VRRP Services
Setting the Priority of the Virtual Router
You can set the priority of t he virtual rou ter in relation to all virtual routers tha t
have t he same virt ual r outer ID and are on the s ame subne t. The hig her yo u set the
value, the higher the priority of the virtual router.
When you initially configure a virtual router, if the primary IP address is the same
as the virtual router IP address, Site Manager automatically sets the priority to the
highest priority (255) and the virtual router becomes the master virtual router as
soon as it comes up. If you initially configure a backup virtual router and later
change the primary IP ad dress to the virtual router IP address, you must manually
change the priority to 255 for the virtual router to become the master virtual
router.
By default, Site Manager assigns a priority of 100 to all backup virtual routers.
You can set the priority for backup virtual routers from 1 to 254. If you assign
more than one backup virtual router the same priority, the VRRP router with the
greater primary IP address takes p recedence.
To set a virtual router’s priority, complete the following tasks:
3-4
Site Manager Procedure
You do this System responds
1. In the Configuration Manager window,
choose
2. Choose IP. The IP menu opens.
3. Choose
4. Click on a virtual router instance ID to
highlight it in the list of virtual routers.
5. Set the
or see the pa rameter descriptions starting
on page A-4.
6. Click on
7. Click on
Protocols
VRRP
Priority
Apply
Done
.
. The IP VRRP Configuration Parameters
parameter. Click on
.
. You return to the Configuration Manager
Help
The Protocols menu opens.
window opens.
The configuration that pertains to the
highlighted virtual router appears.
window.
304138-A Rev 00
Setting the Advertisement Interval
The advertisement interval determines the interval, in seconds, between
transmissions of VRRP adv e rtisements from the master virtual router to notif y al l
backup routers that it is currently the master virtual router and is forwarding all
traffic. You must set the same advertisement interval for all VRRP routers having
the same VRID on the same LAN.
To set the advertisemen t interval, complete the following tasks:
Site Manager Procedure
You do this System responds
Customizing VRRP
1. In the Configuration Manager window,
choose
2. Choose IP. The IP menu opens.
3. Choose
4. Click on a virtual router instance ID to
highlight it in the list of virtual routers.
5. Set the
parameter. Click on
parameter descriptions starting on
page A-4.
6. Click on
7. Click on
Protocols
VRRP
Advertisement Interval
Apply
Done
.
. The IP VRRP Configuration Parameters
Help
or see the
.
. You return to the Configuration Manager
The Protocols menu opens.
window opens.
The configuration that pertains to the
highlighted router appears.
window.
304138-A Rev 00
3-5
Configuring VRRP Services
Setting the Critical IP Interface Address
The critical IP interface resides on the same router as a physical interface. The
state of the critical IP interface determines the state of the virtual router. If the
critical interface fails, the virtual router fails and the VRRP router with the next
highest priority becomes the master virtual router and begins routing traffic to its
destination.
Site Manager Procedure
You do this System responds
1. In the Configuration Manager window,
choose
2. Choose IP. The IP menu opens.
3. Choose
4. Click on a virtual router instance ID to
highlight it in the list of virtual routers.
5. Set the
Click on
descriptions starting on page A-5.
6. Click on
7. Click on
Protocols
VRRP
Critical IP Interface
Help
Apply
Done
.
. The IP VRRP Configuration Parameters
parameter.
or see the parameter
.
. You return to the Configuration Manager
The Protocols menu opens.
window opens.
The configuration that pertains to the
highlighted router appears.
window.
3-6
304138-A Rev 00
Setting the Token Ring Address
If you are running VRRP on a token ring network, VRRP uses the token ring
functional address you pro vide ins tead of a virtual rou ter MAC address. The token
ring address identif ies the toke n ring funct ional addr ess for the vi rtua l route r MAC
address that is configured on an IP interface over token ring.
Customizing VRRP
Caution:
For all virtual routers running over token ring, you must supply
token ring functional addresses for virtual router MAC addresses or VRRP
will fail.
To set the token ring address, complete the following tasks:
Site Manager Procedure
You do this System responds
1. In the Configuration Manager window,
choose
2. Choose IP. The IP menu opens.
3. Choose
4. Click on a virtual router instance ID to
highlight it in the list of virtual routers.
5. Set the
Click on
descriptions starting on page A-5.
6. Click on
7. Click on
Protocols
VRRP
Token Ring Address
Help
Apply
Done
.
. The IP VRRP Configuration Parameters
parameter.
or see the parameter
.
. You return to the Configuration Manager
The Protocols menu opens.
window opens.
The configuration that pertains to the
highlighted router appears.
window.
304138-A Rev 00
3-7
Appendix A Site Manager Parameters
This appendix explains all VRRP paramet ers and how to use them to cu sto mi ze a
virtual router that you have added to an IP interface.
Add Virtual Router Parameters
The VRRP parameters displayed in the Add Virtual Router window (Figure A-1)
enable you to establish a virtual router on an IP interface.
To Be Supplied
304138-A Rev 00
Figure A-1. Add Virtual Router Window
A-1
Configuring VRRP Services
Parameter: Primary IP Address
Path: Configuration Manager > Select Protocols > IP > VRRP > Add
Default: None
Options: Any valid IP address in dotted-decimal notation.
Function: Identifies the IP addr ess of th e physical interf ace. The ro uter l ists t his IP addr ess
as the source in VRRP advertisements sent by the virtual router.
Instructions: Ensure that the primary IP address and the virtual router IP address are on the
same subnet.
MIB Object ID: 1.3.6.1.4.1.18.3.5.3.25.1.1.4
Parameter: Virtual Router ID
Path: Configuration Manager > Select Protocols > IP > VRRP > Add
Default: None
Options: 1 to 255
Function: Identifies the virtual router’s ID (VRID). The router uses this number to
calculate the MAC address. The VRID must be unique on the LAN segment.
Instructions: Enter the ID of the virtual router.
MIB Object ID: 1.3.6.1.4.1.18.3.5.3.25.1.1.5
Parameter: Virtual Router IP Address
Path: Configuration Manager > Select Protocols > IP > VRRP > Add
Default: None
Options: Any valid IP address in dotted-decimal notation.
Function: Identifies the IP address that the virtual router backs up.
Instructions: Ensure that the primary IP address and the virtual router IP address are on the
same subnet. If the virtual router IP address is the same as the primary IP
address, then this VRRP router, when operating, will always be the master
virtual router.
MIB Object ID: 1.3.6.1.4.1.18.3.5.3.25.1.1.6
A-2
304138-A Rev 00
VRRP Configuration Parameters
The VRRP configuration para meters ena ble you to cu stomize a vi rtual rout er. Y ou
access these parameters from the IP VRRP Configuration Parameters window
(Figure A-2)
.
To Be Supplied
Site Manager Parameters
Figure A-2. IP VRRP Configuration Parameters Window
Parameter: Enable
Path: Configuration Manager > Select Protocols > IP > VRRP
Default: Enable
Options: Enable
Function: Enables or disables a virtual router on an interface.
Instructions: Select En able to Enable a v irtual rout er on an interf ace. Select Dis able to disabl e
a virtual router on an interface.
MIB Object ID: 1.3.6.1.4.1.18.3.5.3.25.1.1.2
304138-A Rev 00
Disable
|
A-3
Configuring VRRP Services
Parameter: Virtual RouterIP Address
Path: Configuration Manager > Select Protocols > IP > VRRP
Default: None
Options: Any valid IP address in dotted-decimal notation.
Function: Identifies the IP address of the interface that the virtual router backs up.
Instructions: Enter the IP address that you want the virtual router to back up. Ensure that the
primary IP address and the virtual router IP address are on the same subnet. If
the virtual router IP address is the same as the primary IP address, you should
set the priority to 255 and then this VRRP router, when operating, will always
be the master virtual router.
MIB Object ID: 1.3.6.1.4.1.18.3.5.3.25.1.1.6
Parameter: Priority
Path: Configuration Manager > Select Protocols > IP > VRRP
Default: 100
Options: 1 to 255
Function: Specifie s the priori ty of the virt ual router with respect to all virtua l routers on
the IP interface.
Instructions: Enter a priority from 1 to 254. The higher the value you specify, the higher the
priority of the virtual router. Site Manager automatically supplies a priority of
100 for all backup virtual routers. If you set the primary IP address to the IP
address of the physical interface, Site Manager sets the priority to 255.
MIB Object ID: 1.3.6.1.4.1.18.3.5.3.25.1.1.8
Parameter: Advertisement Interval
Path: Configuration Manager > Select Protocols > IP > VRRP
Default: 1
Options: 1 to 255 seconds
Function: The interval, in seconds, between the transmission of VRRP advertisements
from the primary virtual router.
Instructions: Enter a value from 1 to 255 seconds.
MIB Object ID: 1.3.6.1.4.1.18.3.5.53.25.1.1.9
A-4
304138-A Rev 00
Site Manager Parameters
Parameter: Critical IP Interface
Path: Configuration Manager > Select Protocols > IP > VRRP
Default: 0.0.0.0 (none)
Options: Any valid IP address in dotted-decimal notation.
Function: Identifies an IP address that determines whether the virtual router assumes the
role of the master virtual router and is responsible for forwarding traffic. If the
critical IP address is operating, then the virtual router forwards traffic. If the
critical IP address is down, then a backup virtual router assumes the
responsibilities of the master virtual router and forwards traffic. The critical IP
address must be on the same router as the primary IP address.
Instructions: Specify an IP address on the same router where the primary IP address resides.
MIB Object ID: 1.3.6.1.4.1.18.3.5.53.25.1.1.10
Parameter: Token Ring Address
Path: Configuration Manager > Select Protocols > IP > VRRP
Default: None
Options: Use one of the following unused token ring functional addresses:
03-00-02-00-00-00
03-00-04-00-00-00
03-00-08-00-00-00
03-00-10-00-00-00
03-00-20-00-00-00
03-00-40-00-00-00
03-00-80-00-00-00
03-00-00-01-00-00
03-00-00-02-00-00
03-00-00-04-00-00
03-00-00-08-00-00
Function: I
dentifies the token ring functional address for the virtual router ID MAC
address that is configured on an IP interface over token ring.
Instructions: Specify a unique functional token ring address. You must specify a token ring
functional address for virtual router s on an IP interface ove r token ring or VRRP
will not function.
MIB Object ID: 1.3.6.1.4.1.18.3.5.53.25.1.1.13
304138-A Rev 00
A-5
Glossary
advertisement
backup virtual router
critical IP interface
master virtual router
primary IP address
priority
An IP packet periodically broadcas t by the master virtual router to prevent any
of the backup virtual routers from becoming the master virtual router.
One of a set of VRRP routers available to become the master virtual router. A
router may be the master virtual router and/or the backup virtual router for
many virtual routers.
A local IP interface associated with a virtual router. When the state of this
interface changes, the virtual router switches roles. For example, if you
designate IP address 1.1.1.1 as the critical IP address for virtual router 1 on
router B, and IP address 1.1.1.1 fails, then virtual router 1 on router B is no
longer the master virtual router, and a backup virtual router becomes the
master virtual router.
The VRRP router that assumes responsibility for forwarding data packets
received at the MAC address associated with its virtual router, and answers
ARP requests for its IP address. A router may be the master virtual router and/
or the backup virtual router for many virtual routers.
The real IP interface address used as the source IP address for the IP packets
carrying advertisements.
The value that determines whether a virtual router serves as the master or
backup virtual router. The VRRP router with the highest priority becomes the
master virtual router. The value of 255 is reserved for the router that owns the
IP address associated with the virtual router. The value of 0 is reserved for the
master virtual router to indicate that it is releasing responsibility for the virtual
router. The range of 1 to 254 is available for VRRP routers backing up the
virtual router. The default priority is 100.
virtual MAC address
304138-A Rev 00
A unicast MAC address associated with each virtual router and used as the
source MAC address for VRRP advertisements. The master virtual router uses
this address instead of its physical MAC address in all communication.
Glossary-1
Configuring VRRP Services
virtual router
VRID
VRRP router
A software-defined object managed by VRRP that corresponds to an IP
address on a LAN segment. A virtual router typically exists on multiple VRRP
routers, one of which acts as the master virtual router for this IP addr ess, while
the others act as backup virtual routers.
The virtual router identifier configured in the range of 1 to 255. The VRID
must be unique within the subnet.
A router running the Virtual Router Redundancy Protocol. A VRRP router
may participate in one or more virtual routers.
Glossary-2
304138-A Rev 00
Index
A
acronyms, xi
adding a virtual router, 3-3
Advertisement Interval parameter, A-4
advertisement interval, setting, 3-5
B
backup virtual router, defined, 1-2
C
configuring a virtual router, 2-1
conventions, text, x
Critical IP Interface parameter, A-5
critical IP interface, s pecifying, 3-6
D
disabling a virtual ro uter, 3-2
E
educational services, xii
Enable parameter , A-3
enabling a virtual router, 3-2
M
MAC address, 1-2, 2-2
master virtual router, defined, 1-2
messaging, 1-2
P
primary IP address , 2-1
Primary IP Address parameter, A-2
priority of virtual routers, defined, 1-2
Priority parameter, A-4
priority, setting, 3-4
product support, xii
protocol messaging, defined, 1-2
publications, Bay Networks, xi
R
redundancy services, planning, 1-3
router redundancy , characteristics, 1-3
S
support, Bay Netw o rks , xi i
I
IP address to be backed up , assigning, 3-3
IP multicast datagrams, 1-2
304138-A Rev 00
Index-1
T
technical publications, xi
technical support, xii
text conventions, x
Token Ring Address parameter, A-5
token ring address, settin g, 3-7
token ring functio nal address, 3-7
V
virtual router
configuring, 2-1
disabling, 3-2
enabling, 3-2
virtual router ID (VRID), assigning, 2-2
Virtu al Router ID parameter, A-2
Virtual Router IP Address parameter, A-2, A-4
virtual router IP address, assigni ng, 2-2
VRRP advertisements, 3-5
Index-2
304138-A Rev 00
Loading...