R3166-R3206-HP High-End Firewalls High Availability Configuration Guide-6PW101

17
virtual MAC address. When such a mapping is adopted, the hosts in the internal network do not
need to update the mapping between the IP address and MAC address when the master changes.
• Real MAC address of an interface—In case that an IP address owner exists in a VRRP group, if the
virtual IP address is mapped to the virtual MAC address, two MAC addresses are mapped to one
IP address. To avoid such as problem, map the virtual IP address of the VRRP group to the real MAC
address of an interface to forward the packets from a host to the IP address owner.
Follow these steps to specify the type of MAC addresses mapped to virtual IP addresses:
To do… Use the command…
Remarks
Enter system view system-view
—
Specify the type of MAC
addresses mapped to
virtual IP addresses
vrrp method { real-mac |
virtual-mac }
Optional
Virtual MAC address by default
NOTE:
• When VRRP works in load balancing mode, a virtual IP address is always mapped to a virtual MAC
address regardless of which type of MAC addresses are specified to be mapped to virtual IP addresses.
• Specify the type of the MAC addresses mapped to the virtual IP addresses before creating a VRRP
group. Otherwise, you cannot change the type of the MAC addresses mapped to virtual IP addresses.
• If VRRP groups with the same ID are created on multiple interfaces of a device, and the VRRP
advertisements of these VRRP groups are to be sent through QinQ networks, HP recommends you to
map the real MAC addresses of the interfaces to the virtual IP addresses of these VRRP groups.
Otherwise, the VRRP advertisements of these VRRP groups cannot be sent successfully.
Specifying the VRRP control VLAN
With VLAN termination, after a port receiving a VLAN packet, it removes its VLAN tag(s) and then
forwards it at Layer 3 or processes it in other ways. VLAN termination falls in the following categories:
• Unambiguous termination—Terminates VLAN packets from a specified VLAN only. In other words,
after receiving a packet from the specific VLAN, a port configured with unambiguous VLAN
termination removes its VLAN tag.
• Ambiguous termination—Terminates VLAN packets from multiple VLANs whose VLAN IDs are in
the specified range. In other words, after receiving a packet from a VLAN in the specified range, a
port configured with ambiguous VLAN termination removes its VLAN tag.
By default, an ambiguous termination-enabled Layer 3 subinterface or VLAN interface drops broadcast
and multicast packets they receive, instead of transmitting them.
You can enable a Layer 3 Ethernet subinterface, or a VLAN interface configured with ambiguous
termination to transmit broadcast/multicast packets within all VLANs whose VLAN packets are
configured to be terminated by the subinterface or VLAN interface.