In the configuration tasks of the VRRP load-balance protocol, the VRRP load-balance protocol must be enabled first, and the virtual IP address of the VRRP load-balance protocol group needs to be in the same network segment as the IP address of the interface, so the other configured functions can take effect.
Configuration Conditions
Before configuring the VRRP basic functions, first complete the following tasks:
- Configure the IP address of the interface
Enable the VRRP Load-Balance Protocol
To enable the VRRP load-balance protocol function, it is necessary to create one VRRP load-balance protocol group in the interface and configure the virtual IP address.
Table 8-3 Enable the VRRP protocol
Step
|
Command
|
Description
|
Enter the global configuration mode
|
configure terminal
|
-
|
Enter the interface configuration mode
|
interface interface-name
|
Mandatory
|
Configure the VRRP load-balance protocol group
|
vrrp vrid ip ip-address
|
Mandatory
Enable the VRRP load-balance protocol. Here, vrid is the VRRP load-balance protocol group number, and ip-address is the virtual IP address.
|
-
In the VRRP load-balance protocol mode, you cannot configure the virtual IP to be the same as the interface IP.
Configure the VRRP Priority
If the priority is not configured after configuring VRRP load balancing protocol, its default priority is 100; the device with high priority will be elected as Master responsible for forwarding packets, and the others will be Backup; if the priorities of all devices are equal, elect according to the interface IP address of each device, and the interface with the large IP address will be Master; you can set the priority of the VRRP load-balance protocol according to the need. The larger the priority value is, the higher the priority is.
Table 8-4 Configure the priority of the VRRP load-balance protocol group
Step
|
Command
|
Description
|
Enter the global configuration mode
|
configure terminal
|
-
|
Enter the interface configuration mode
|
interface interface-name
|
Mandatory
|
Configure the priority of the VRRP load-balance protocol group |
vrrp vrid priority priority |
Mandatory
By default, the priority is 100.
|
Configure the Virtual MAC Address of the VRRP Load-balance Protocol
Each virtual router in a VRRP load balancing protocol group has a virtual MAC address. According to the regulations of the VRRP load balancing protocol, the format of the virtual MAC address is 00.01.7a.00. {vrid}. {mid}, and the mid value is assigned by the master. When a virtual router responds to an ARP request, the returned is the virtual MAC address, not the real MAC address of the interface. By default, the real MAC address of the interface is used.
Table 8-5 Configure the virtual MAC address of the VRRP load-balance protocol
Step
|
Command
|
Description
|
Enter the global configuration mode
|
configure terminal
|
-
|
Enter the interface configuration mode
|
interface interface-name
|
Mandatory
|
Configure the VRRP load-balance protocol to use the virtual MAC address
|
vrrp vrid use-vmac
|
Mandatory
By default, use the real MAC address.
|
-
By default, adopt the real MAC address on the corresponding interface after configuring VRRP. After configuring the command of this section, use the virtual MAC, that is, the host forwards the packet by the virtual MAC address; after deleting the command of this section, use the real MAC address of the corresponding interface, that is, the host sends the packet by the real MAC address.
Configure Simple Text Authentication of VRRP Load Balance Protocol
After the VRRP load balancing protocol is configured, if the simple text authentication is not set, the simple text authentication function will not be enabled by default; only when the authentication is consistent in the VRRP load balancing protocol group can the neighbor be established successfully and the state can be negotiated.
Table 7-5 Configure the simple text authentication of VRRP load balance protocol
Step
|
Command
|
Description
|
Enter the global configuration mode
|
configure terminal
|
-
|
Enter the interface configuration mode
|
interface interface-name
|
Mandatory
|
Configure the simple text authentication of VRRP load balance protocol
|
vrrp vrid authentication text string
|
Mandatory
By default, do not enable simple text authentication function.
The authentication password is eight characters at most.
|
Configure the Real MAC Address of the VRRP Load-balance Protocol
Each virtual router in a VRRP load balancing protocol group has a virtual MAC address. According to the regulations of the VRRP load balancing protocol, the format of the virtual MAC address is 00.01.7a.00. {vrid}. {mid}, and the mid value is assigned by the master. When a virtual router responds to an ARP request, the returned is the virtual MAC address, not the real MAC address of the interface. By default, the virtual MAC address of the interface is used.
Table 7-6 Configure the real MAC address of the VRRP load-balance protocol
Step
|
Command
|
Description
|
Enter the global configuration mode
|
configure terminal
|
-
|
Enter the interface configuration mode
|
interface interface-name
|
Mandatory
|
Configure the VRRP load-balance protocol to use the real MAC address
|
vrrp vrid use-bia
|
Mandatory
By default, use the virtual MAC address.
|
-
By default, adopt the virtual MAC address after configuring VRRP. After configuring the command of this section, use the real MAC on the corresponding interface, that is, the host forwards the packet by the real MAC address; after deleting the command of this section, use the virtual MAC address of the corresponding interface, that is, the host sends the packet by the virtual MAC address.