R3166-R3206-HP High-End Firewalls High Availability Configuration Guide-6PW101

46
Associating the track module with an application
module
Associating track with VRRP
VRRP is an error-tolerant protocol. It adds a group of routers that can act as network gateways to a VRRP
group, which forms a virtual router. Routers in the VRRP group elect the master acting as the gateway
according to their priorities. A router with a higher priority is more likely to become the master. The other
routers function as the backups. When the master fails, to ensure that the hosts in the network segment
can uninterruptedly communicate with external networks, the backups in the VRRP group elect a new
gateway to undertake the responsibility of the failed master.
When VRRP works in the standard protocol mode or load balancing mode, associate the track module
with the VRRP group to implement the following actions:
• Change the priority of a router according to the status of the uplink. If there is a fault on the uplink
of the router, the VRRP group cannot be aware of the uplink failure. If the router is the master, hosts
in the LAN cannot access the external network. This problem can be solved with the track-VRRP
collaboration function. Use the detection modules to monitor the status of the uplink of the router
and establish the collaborations between the detection modules, track module and VRRP. When the
uplink fails, the detection modules notify the track module to change the status of the monitored
track entry to Negative, and the priority of the master thus decreases by a specified value, allowing
a higher priority router in the VRRP group to become the master to maintain proper communication
between the hosts in the LAN and the external network.
• Monitor the master on a backup. If there is a fault on the master, the backup working in the
switchover mode will switch to the master immediately to maintain normal communication.
When VRRP works in the load balancing mode, through the collaboration between the track module and
VRRP, you can change the priority of a virtual forwarder according to the status of the uplink. When the
uplink of the active virtual forwarder (AVF) fails, the status of the track entry changes to Negative and the
weight of the VF decreases by a specified value so that the VF with a higher priority becomes the AVF
and forwards packets.
Follow these steps to associate track with VRRP:
To do… Use the command…
Remarks
Enter system view system-view —
Enter interface view
interface interface-type
interface-number
—
Create a VRRP group
and configure its virtual
IP address
vrrp vrid virtual-router-id
virtual-ip virtual-address
Required
No VRRP group is created by default.
Specify a track entry
with a VRRP group
vrrp vrid virtual-router-id
track track-entry-number
[ reduced priority-reduced |
switchover ]
Required
No track entry is specified for VRRP by default.
This command is supported when VRRP works in
both the standard protocol mode and load
balancing mode.