R3166-R3206-HP High-End Firewalls High Availability Configuration Guide-6PW101

Figure 12 VRRP control VLAN

As shown in Figure 12, configure ambiguous VLAN termination for VLAN 10 and VLAN 20 on the Layer

3 Ethernet subinterfaces on routers. To ensure that the master can periodically multicast VRRP

advertisements to the backups, be sure to enable the subinterfaces configured with VLAN termination to

transmit broadcast/multicast packets. Then, the master sends VRRP advertisements within all VLANs

whose VLAN packets are configured to be terminated by the subinterfaces. If the Layer 3 Ethernet

subinterfaces are configured to terminate packets from many VLANs, there will be many VRRP

advertisements to be transmitted through the subinterfaces, and the performance of the router will be

seriously affected.

To solve this problem, you can configure a VRRP control VLAN to allow the master to send VRRP

advertisements only within the control VLAN when the subinterfaces configured with VLAN termination

are disabled from transmitting broadcast or multicast packets.

VRRP control VLAN falls into the following categories:

• Specifying a single VLAN tag—For subinterfaces configured with ambiguous Dot1q termination,

this type of control VLAN should be specified.

• Specifying both inner and outer VLAN tags—For subinterfaces configured with ambiguous QinQ

termination, this type of control VLAN should be specified.

NOTE:

• You need to specify a control VLAN only for a Layer 3 Ethernet subinterface and Layer 3 a

ation

subinterface configured with ambiguous VLAN termination.

• When VRRP works in load balancing mode, you cannot specify the VRRP control VLAN.

• If you specified the VRRP control VLAN, to update MAC address entries on devices in the VLAN

terminated ambiguously after an active/standby switchover, use the arp send-gratuitous-arp command

to enable the routers in the VRRP group to periodically send gratuitous ARP packets. For more

information about the arp send-gratuitous-arp command, see

Network Management Command

Reference

Follow these steps to specify the VRRP control VLAN:

To do… Use the command…

Remarks

Enter system view system-view

—